This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2C81EC9836B1F0AFD457980B96A9DDF3A60D681B.cer
File:                     2C81EC9836B1F0AFD457980B96A9DDF3A60D681B.cer (raw, json)
Hash identifier:          NHc9xSEwuCxZXFJicTkkMH5FTHE6YVP7zE/YhCRLcbI=
Subject key identifier:   2C:81:EC:98:36:B1:F0:AF:D4:57:98:0B:96:A9:DD:F3:A6:0D:68:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       626223C2DAC2D4B966D9F371CD99DE92BD23E59E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/2C81EC9836B1F0AFD457980B96A9DDF3A60D681B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Jan 2026 15:13:31 +0000
Certificate not after:    Fri 22 Jan 2027 15:18:31 +0000
Subordinate resources:    AS: 267614
                          IP: 45.71.108.0/22
                          IP: 2804:43fc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:62:23:c2:da:c2:d4:b9:66:d9:f3:71:cd:99:de:92:bd:23:e5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 23 15:13:31 2026 GMT
            Not After : Jan 22 15:18:31 2027 GMT
        Subject: CN=2C81EC9836B1F0AFD457980B96A9DDF3A60D681B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:0f:0b:e0:6d:1b:15:ea:50:b9:55:91:4f:
                    6f:dd:26:9a:3d:c6:e9:2a:2c:2a:7b:fc:88:24:b4:
                    82:66:d8:26:cf:46:72:a0:9d:7b:24:81:46:48:08:
                    68:f1:21:86:f8:43:8d:33:0e:6c:90:3a:c4:a1:4a:
                    59:ea:87:5d:1c:99:31:b6:fb:28:f8:36:d9:19:49:
                    57:36:b2:d3:ad:1f:cc:69:3f:ae:99:0b:66:bc:3b:
                    49:95:da:eb:39:57:70:1f:c9:de:74:ab:9f:83:82:
                    84:f9:d8:76:cc:15:2d:2b:03:fc:b8:9c:b6:a6:00:
                    10:bb:0c:ba:5d:78:b7:49:94:d9:fa:51:7a:ac:7e:
                    9c:e1:c3:eb:cd:68:3f:b3:6f:ee:6b:37:52:94:b5:
                    8c:f9:ed:7f:2f:bb:22:2b:f4:98:3d:4e:3e:5a:c5:
                    36:a7:ee:3f:9f:61:b4:d6:27:56:43:f5:d8:9c:09:
                    45:cb:c0:e8:c1:5d:64:4f:94:0d:dd:0a:0a:f8:21:
                    62:7d:e0:39:1a:88:24:1b:b8:99:b4:12:df:7a:a9:
                    e0:a9:dd:7d:d2:1a:d6:af:a7:48:1e:97:47:2b:64:
                    93:94:0b:24:71:5c:c5:4c:e1:67:db:3b:bc:d5:d2:
                    b7:64:83:54:de:53:71:a5:38:c8:2e:e2:6b:98:c1:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:81:EC:98:36:B1:F0:AF:D4:57:98:0B:96:A9:DD:F3:A6:0D:68:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/2C81EC9836B1F0AFD457980B96A9DDF3A60D681B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.108.0/22
                IPv6:
                  2804:43fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267614

    Signature Algorithm: sha256WithRSAEncryption
         a5:e4:d9:30:cf:96:2b:2b:62:67:70:ce:33:b2:ae:b0:98:f3:
         0d:a8:74:6e:9d:db:1b:2b:5f:ea:74:03:64:51:63:55:1e:ad:
         53:89:e0:78:a7:cc:e8:b5:02:bd:d0:59:3f:e4:0a:78:27:dd:
         2c:b4:68:74:50:62:6d:78:87:a5:30:22:bd:6a:8f:57:ec:98:
         10:ff:aa:dc:90:9d:5d:d7:1c:d1:c9:35:1c:a6:4b:9b:bb:3d:
         ba:8b:cb:a9:5d:78:18:f3:e8:65:1e:36:54:b4:91:5e:47:3e:
         9e:e7:e0:6d:d4:4a:33:77:67:73:f9:97:96:25:93:b3:46:9a:
         f6:ae:88:69:e4:60:5b:fe:07:ec:68:bc:f2:19:ef:8b:5d:c4:
         41:37:ea:fb:c2:42:8d:ab:a7:30:d4:fe:d7:2b:f9:a1:79:cc:
         2f:04:f4:49:8f:62:da:ff:70:20:26:d5:7e:1f:ff:96:42:5f:
         ea:a9:47:bc:7d:a5:6f:65:9b:34:ed:34:10:d3:c2:f7:88:da:
         93:86:62:7e:96:30:58:f2:17:0d:e9:d6:60:a2:5b:2c:f8:6a:
         c3:5c:32:40:ce:fb:00:d0:d1:21:52:b3:03:f1:45:e6:7d:22:
         21:74:f6:8d:b6:e7:4c:dc:9b:98:72:86:45:40:be:a2:19:dd:
         91:9b:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----