This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.cer
File:                     26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.cer (raw, json)
Hash identifier:          wt1204mXx47vGRHzESlcImMIYQLiB5V43HQ+7PHp0mM=
Subject key identifier:   26:A6:AC:0E:32:4A:EA:C3:FC:39:40:B6:DA:A4:36:88:80:D3:86:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4CF5D81ADC087D31EEFBEFA4A7B6C6F5ABB4132D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 23 Nov 2025 20:01:03 +0000
Certificate not after:    Sun 22 Nov 2026 20:06:03 +0000
Subordinate resources:    AS: 266252
                          IP: 192.140.120.0/22
                          IP: 2804:3d14::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f5:d8:1a:dc:08:7d:31:ee:fb:ef:a4:a7:b6:c6:f5:ab:b4:13:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 23 20:01:03 2025 GMT
            Not After : Nov 22 20:06:03 2026 GMT
        Subject: CN=26A6AC0E324AEAC3FC3940B6DAA4368880D3861C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e2:1e:4b:a6:c8:9f:d3:9f:77:35:e7:21:87:
                    e7:ce:ed:bb:03:bb:dd:b9:d2:cf:b6:c8:5b:71:0a:
                    29:9e:bf:b8:f3:3e:dd:80:ca:98:64:4e:6f:b2:5d:
                    22:ce:d2:76:1a:3f:05:f3:b3:c7:99:0e:47:b5:76:
                    a3:81:c5:14:4e:87:70:4b:b5:91:a4:9b:a0:d7:b9:
                    ec:30:39:06:b9:cc:af:a2:80:8f:7f:75:7f:ce:f7:
                    e2:3c:6b:8b:38:3a:00:8f:c9:5b:6c:af:59:c0:42:
                    29:46:fc:e1:7f:7d:af:f1:6b:87:25:6a:77:d3:f6:
                    71:5c:cb:2c:3e:4d:a9:92:2f:7f:01:9b:d0:4f:d4:
                    a8:2c:31:6e:d0:1e:f9:3b:90:27:de:7c:60:05:91:
                    0e:46:df:6d:25:98:65:4b:73:65:e0:2a:1c:a6:08:
                    70:2b:90:45:83:39:0b:92:3f:b2:43:55:29:7e:95:
                    08:ec:38:91:db:49:aa:32:b7:fd:48:7c:4b:31:9f:
                    7e:eb:8d:e1:ca:41:fc:77:47:dc:ca:d2:75:4b:1d:
                    8b:8c:5a:eb:8a:99:77:7e:48:1a:05:d9:f0:e1:a3:
                    79:c9:8b:71:9a:ed:34:12:c7:2f:88:98:0f:91:7b:
                    85:82:9c:bf:0b:e0:47:20:ee:82:c3:c9:39:67:38:
                    45:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:A6:AC:0E:32:4A:EA:C3:FC:39:40:B6:DA:A4:36:88:80:D3:86:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.120.0/22
                IPv6:
                  2804:3d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266252

    Signature Algorithm: sha256WithRSAEncryption
         76:ee:8a:44:52:62:15:4d:3f:b4:6c:f2:f6:39:82:b1:26:60:
         c6:6d:1d:34:1f:95:5d:b8:f6:6b:51:d1:31:1f:a7:70:26:c0:
         1c:63:84:12:de:31:37:22:21:af:5c:84:8e:a6:65:eb:6d:1d:
         fc:82:f6:61:83:57:90:6a:d1:7a:e7:85:c0:25:26:7f:05:c7:
         b4:51:a0:c8:9c:da:bf:8f:5d:e8:d6:a3:2f:15:28:a7:68:9e:
         e1:5f:1b:b4:a4:bb:d5:80:42:06:60:7d:2d:79:3f:de:4e:5a:
         6d:6d:90:40:ab:0d:b6:e1:40:29:bc:d1:b8:5a:80:67:a3:8d:
         41:e2:74:16:59:9e:40:f4:f2:80:0a:52:f0:45:77:74:a9:46:
         9a:ed:8b:33:48:91:6e:f1:eb:4c:55:05:1d:0c:21:70:38:ab:
         f1:1f:82:4d:82:d2:d1:1a:ab:61:55:aa:5c:6d:2e:9e:e7:20:
         57:12:c4:2d:8a:43:7f:bd:34:33:9b:bf:d2:ad:55:8f:cf:ac:
         68:14:5b:8a:77:e9:69:4b:09:03:0d:ad:8c:bf:30:6d:7c:ff:
         7f:1d:bf:87:74:1d:0f:d3:eb:ae:f5:ff:9d:b5:ac:e8:7a:1d:
         44:75:e2:9f:36:25:af:ed:e4:c7:49:26:a7:96:2c:f6:29:07:
         9e:d9:1d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----