This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/217E33D24EC6AF885B2160DEF39923E01A803163.cer
File:                     217E33D24EC6AF885B2160DEF39923E01A803163.cer (raw, json)
Hash identifier:          C27aHTYhmvd/sXaH51mdtQjo8Gklni74GH4O9SVUg/M=
Subject key identifier:   21:7E:33:D2:4E:C6:AF:88:5B:21:60:DE:F3:99:23:E0:1A:80:31:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       03F57BB8937736B7B2C6EF061B5D216A99498409
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/0/217E33D24EC6AF885B2160DEF39923E01A803163.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Jan 2026 06:02:21 +0000
Certificate not after:    Sun 17 Jan 2027 06:07:21 +0000
Subordinate resources:    AS: 266985
                          IP: 45.226.52.0/22
                          IP: 2804:465c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 06:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f5:7b:b8:93:77:36:b7:b2:c6:ef:06:1b:5d:21:6a:99:49:84:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 18 06:02:21 2026 GMT
            Not After : Jan 17 06:07:21 2027 GMT
        Subject: CN=217E33D24EC6AF885B2160DEF39923E01A803163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:e7:44:cb:85:6d:2f:17:14:18:fc:36:40:
                    2a:3f:cb:e9:6d:2f:76:79:0e:74:ee:21:36:29:c1:
                    25:4a:f8:f4:e2:cd:48:1e:b1:85:19:7e:2d:c1:43:
                    77:52:ff:72:19:8b:78:5c:de:75:4c:0e:e5:81:d6:
                    dc:be:ef:71:41:08:77:b8:56:7c:bc:0e:26:6b:c0:
                    9b:4c:c5:40:0f:08:6e:24:7d:2e:50:a8:ec:5a:9f:
                    6e:50:7d:58:d7:58:b7:0d:2a:a8:1f:22:da:4c:7b:
                    6f:59:ec:0e:d3:cd:10:e0:fc:4a:1e:45:48:37:8c:
                    ab:d7:34:f6:1a:b1:28:a8:51:9a:f5:0a:79:89:41:
                    3b:23:82:1c:57:56:21:e0:4a:62:76:94:ad:8b:64:
                    18:47:2d:bf:3a:c1:06:3d:c3:5a:bd:a4:91:c7:a2:
                    d2:2a:bf:da:e3:f6:bf:ba:f8:28:26:5e:76:27:f9:
                    d3:92:90:a0:39:b9:0c:e2:bf:8e:46:d2:70:34:61:
                    5a:c0:c6:01:4f:a8:2b:c3:b4:59:7f:ed:73:81:29:
                    12:b4:73:c4:54:87:0f:24:ea:cf:54:d0:87:7f:5b:
                    ed:51:5e:5e:b2:6f:e7:c6:01:38:ee:d9:7c:71:4e:
                    5d:10:e3:be:e4:10:d9:65:d4:c5:ee:e6:20:c7:4b:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:7E:33:D2:4E:C6:AF:88:5B:21:60:DE:F3:99:23:E0:1A:80:31:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/0/217E33D24EC6AF885B2160DEF39923E01A803163.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.52.0/22
                IPv6:
                  2804:465c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266985

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:25:20:fd:0f:e0:57:c2:67:bc:7e:89:e6:12:f7:58:d6:
         5f:da:bd:fe:14:42:23:f4:d8:4c:c3:38:61:df:be:53:ae:6b:
         c6:40:2a:de:05:b8:74:52:6d:da:99:a4:03:62:09:f0:16:88:
         29:12:c4:68:64:43:ba:09:39:79:7b:18:56:36:fe:f7:d9:a1:
         1e:fd:94:53:ea:d5:c7:ed:98:1a:3f:a9:f1:dd:1f:d7:80:30:
         6c:c1:01:0d:ef:57:52:1d:d1:29:08:0a:96:d2:b7:83:56:48:
         2b:cb:30:2f:91:bf:d7:e8:15:03:4e:b1:90:a7:29:7c:d3:4b:
         9e:46:cd:14:d7:6d:9a:f9:35:39:84:a0:f4:76:44:f4:a3:80:
         84:90:1c:b2:e3:8d:79:60:2e:69:36:ae:a1:78:56:19:ab:f0:
         6e:4c:ec:1d:56:5b:68:51:7d:5c:66:2f:5d:ac:6e:dc:88:a7:
         fc:94:37:5b:66:55:1d:14:48:31:e2:c1:fa:e3:ad:84:39:da:
         a4:f8:56:ac:bc:94:03:05:12:fb:49:17:7d:34:32:7e:c7:e1:
         f4:3d:22:52:20:41:3d:be:ea:a2:25:88:07:7e:68:b2:20:5f:
         f6:f4:3b:eb:4d:b5:70:fa:14:01:ee:3d:86:44:ed:f1:3a:8f:
         9b:01:9e:9e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUA/V7uJN3Nreyxu8GG10haplJhAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMTgwNjAyMjFaFw0yNzAxMTcwNjA3MjFaMDMxMTAvBgNV
BAMTKDIxN0UzM0QyNEVDNkFGODg1QjIxNjBERUYzOTkyM0UwMUE4MDMxNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Y+dEy4VtLxcUGPw2QCo/y+lt
L3Z5DnTuITYpwSVK+PTizUgesYUZfi3BQ3dS/3IZi3hc3nVMDuWB1ty+73FBCHe4
Vny8DiZrwJtMxUAPCG4kfS5QqOxan25QfVjXWLcNKqgfItpMe29Z7A7TzRDg/Eoe
RUg3jKvXNPYasSioUZr1CnmJQTsjghxXViHgSmJ2lK2LZBhHLb86wQY9w1q9pJHH
otIqv9rj9r+6+CgmXnYn+dOSkKA5uQziv45G0nA0YVrAxgFPqCvDtFl/7XOBKRK0
c8RUhw8k6s9U0Id/W+1RXl6yb+fGATju2XxxTl0Q477kENll1MXu5iDHS5apAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhfjPSTsaviFsh
YN7zmSPgGoAxYzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFlR
ZU41a1hTSjZpcXNWUTRZUUNtc0plODE4MVV6WXdDSnNoVHRuZUNwc1IvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhZ
UWVONWtYU0o2aXFzVlE0WVFDbXNKZTgxODFVell3Q0pzaFR0bmVDcHNSLzAvMjE3
RTMzRDI0RUM2QUY4ODVCMjE2MERFRjM5OTIzRTAxQTgwMzE2My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeI0MA0EAgACMAcDBQAoBEZcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQS6TANBgkqhkiG9w0BAQsFAAOCAQEAOvYlIP0P4FfCZ7x+
ieYS91jWX9q9/hRCI/TYTMM4Yd++U65rxkAq3gW4dFJt2pmkA2IJ8BaIKRLEaGRD
ugk5eXsYVjb+99mhHv2UU+rVx+2YGj+p8d0f14AwbMEBDe9XUh3RKQgKltK3g1ZI
K8swL5G/1+gVA06xkKcpfNNLnkbNFNdtmvk1OYSg9HZE9KOAhJAcsuONeWAuaTau
oXhWGavwbkzsHVZbaFF9XGYvXaxu3Iin/JQ3W2ZVHRRIMeLB+uOthDnapPhWrLyU
AwUS+0kXfTQyfsfh9D0iUiBBPb7qoiWIB35osiBf9vQ76021cPoUAe49hkTt8TqP
mwGeng==
-----END CERTIFICATE-----