This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A6585BE340D4347071D6C4483B0834A82A049D4.cer
File:                     2A6585BE340D4347071D6C4483B0834A82A049D4.cer (raw, json)
Hash identifier:          1EGskEP0bfGcHU/iubfXw4dakZE/Sdx2dtfyw+Ygatk=
Subject key identifier:   2A:65:85:BE:34:0D:43:47:07:1D:6C:44:83:B0:83:4A:82:A0:49:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4E9FF1D0E8ECD9C8CFE73F58A8A0F3B41D24ADD8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/2A6585BE340D4347071D6C4483B0834A82A049D4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Jan 2026 14:56:55 +0000
Certificate not after:    Mon 11 Jan 2027 15:01:55 +0000
Subordinate resources:    AS: 270962
                          IP: 187.84.120.0/22
                          IP: 2804:7428::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 06:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9f:f1:d0:e8:ec:d9:c8:cf:e7:3f:58:a8:a0:f3:b4:1d:24:ad:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 12 14:56:55 2026 GMT
            Not After : Jan 11 15:01:55 2027 GMT
        Subject: CN=2A6585BE340D4347071D6C4483B0834A82A049D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:f2:6f:6f:d0:a8:73:64:c5:99:a1:89:e7:
                    72:3b:5e:50:02:0c:6e:ff:8d:cb:1b:cd:a9:1d:94:
                    ea:eb:ad:dc:62:22:a5:9e:be:aa:e6:a7:17:ba:27:
                    35:56:3e:ea:9a:2c:fe:79:42:d4:1b:5e:32:04:e3:
                    c3:1c:f8:5a:1d:86:c3:cc:c5:e2:e8:b9:31:4c:a3:
                    82:f2:57:9b:b0:6b:f6:dd:ee:d4:ef:e4:6e:33:93:
                    57:da:d6:8c:e2:69:e6:ec:29:33:52:85:cf:80:ef:
                    a6:c0:d4:5b:45:87:b9:a9:af:d6:24:48:e6:db:6a:
                    20:37:cd:86:37:5b:56:85:16:63:04:81:59:8d:b2:
                    bd:da:3b:0c:c3:70:7c:6e:cf:c5:2b:00:2e:55:93:
                    2e:ac:87:3d:79:b8:64:3e:6b:96:42:67:cc:67:2e:
                    92:f2:a3:d8:ed:1b:ff:ac:07:8d:44:74:54:66:49:
                    3a:e9:0d:e9:7f:07:b1:7e:9d:04:a8:07:ed:d5:95:
                    6c:4b:16:f9:e5:8d:ff:1d:3f:63:8d:53:14:87:b7:
                    af:44:db:ce:ee:7a:2e:28:e0:67:22:f3:62:0e:c0:
                    75:31:a7:8e:89:3e:6c:51:a1:ec:5e:d7:a0:80:2c:
                    c9:08:f5:d3:3d:f6:43:5b:6a:1b:11:74:a1:e7:35:
                    02:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:65:85:BE:34:0D:43:47:07:1D:6C:44:83:B0:83:4A:82:A0:49:D4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/2A6585BE340D4347071D6C4483B0834A82A049D4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.120.0/22
                IPv6:
                  2804:7428::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270962

    Signature Algorithm: sha256WithRSAEncryption
         0f:58:a2:c3:fa:2f:54:2b:20:28:98:86:6e:52:32:2b:99:cc:
         23:32:df:57:7e:45:6f:6d:61:70:d5:a4:41:87:7b:bc:15:7f:
         1e:d4:53:75:93:1a:8b:b1:7c:9a:8c:c7:df:44:0d:7c:af:a1:
         2f:9b:3a:5d:4b:6c:52:2c:83:b4:fc:5e:34:00:b8:b3:3e:35:
         96:71:83:90:94:ca:d4:2e:89:0d:4f:c6:a9:f1:c5:af:10:99:
         9b:d1:30:4f:06:15:0d:0e:18:78:56:fb:d9:a3:10:41:54:57:
         0e:f1:45:e1:e0:4f:56:40:27:4a:63:d3:ef:b4:ba:3f:8b:4b:
         31:40:73:43:6c:46:22:51:06:6c:07:dd:e5:4e:02:c2:fe:89:
         82:25:78:3b:b4:cc:00:60:f7:30:a8:02:39:83:4f:4c:cc:4d:
         3c:c2:2d:36:5d:67:09:00:58:11:e1:70:80:1d:ad:66:68:c0:
         41:ff:c7:3b:74:72:e6:50:5d:7c:6e:0e:d3:c0:98:2d:b3:ce:
         4b:69:3e:16:19:2e:fc:47:19:4d:fd:be:85:7d:0c:76:0d:1e:
         7b:75:6a:9a:a7:75:a4:f0:dd:a0:c7:6a:0a:c0:72:be:a6:1c:
         f4:ce:1b:db:5c:82:46:bc:28:bf:33:9f:e1:f6:9f:b2:fe:6e:
         be:c1:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----