This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/30FD06C8AB4B34C6A130B3FC8C20C891FE576788.cer
File:                     30FD06C8AB4B34C6A130B3FC8C20C891FE576788.cer (raw, json)
Hash identifier:          HU6C/4PFp6xRzcFhmnI9KQIiPynNhBtVHwS0CcGC+ok=
Subject key identifier:   30:FD:06:C8:AB:4B:34:C6:A1:30:B3:FC:8C:20:C8:91:FE:57:67:88
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       67D59891A53A6F8CC14D9425C19615A1AA95C670
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/30FD06C8AB4B34C6A130B3FC8C20C891FE576788.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Jan 2026 12:42:58 +0000
Certificate not after:    Wed 20 Jan 2027 12:47:58 +0000
Subordinate resources:    AS: 269436
                          IP: 45.186.212.0/22
                          IP: 2804:6494::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d5:98:91:a5:3a:6f:8c:c1:4d:94:25:c1:96:15:a1:aa:95:c6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 12:42:58 2026 GMT
            Not After : Jan 20 12:47:58 2027 GMT
        Subject: CN=30FD06C8AB4B34C6A130B3FC8C20C891FE576788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:82:28:8d:d2:fc:2e:3d:58:10:00:e8:46:0c:
                    36:d7:41:5d:05:90:88:f8:f2:b5:5d:52:90:dd:38:
                    58:4c:8b:08:5c:e2:52:3e:8a:bf:bd:d8:5a:d4:4b:
                    62:cb:ae:69:cc:93:77:79:eb:32:63:f3:86:81:74:
                    27:0f:f7:75:48:2f:38:82:e6:c1:fa:4b:47:ce:f7:
                    48:34:02:19:e2:b6:c9:86:b8:05:71:6d:22:33:b5:
                    75:94:48:b8:90:7e:b9:bb:6e:af:c8:8a:c9:80:9a:
                    71:07:b7:1d:13:13:3d:e2:d3:bb:a2:76:23:53:ac:
                    4b:d3:97:2b:cc:7c:b8:82:8c:ef:b3:7c:9e:5b:e9:
                    11:bb:eb:ba:9b:b9:eb:8c:87:10:6b:57:8f:b0:e7:
                    8f:33:40:43:79:6e:ed:3f:d0:78:03:2f:61:58:dd:
                    bf:bb:86:fb:bb:eb:5e:e6:9c:ef:7f:f0:16:33:b7:
                    3a:cf:78:29:51:da:11:c8:87:61:6f:22:db:c8:49:
                    cd:49:1f:68:a3:41:37:93:a5:72:99:d2:b5:94:1a:
                    ff:83:c7:14:5a:bc:7f:7c:cf:55:0d:57:56:e4:4b:
                    71:25:4e:cc:18:e0:ab:9f:23:e8:91:33:b7:cc:97:
                    20:e8:19:ad:c8:00:e7:e3:8d:6d:19:1c:e5:c1:4f:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:FD:06:C8:AB:4B:34:C6:A1:30:B3:FC:8C:20:C8:91:FE:57:67:88
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/30FD06C8AB4B34C6A130B3FC8C20C891FE576788.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.212.0/22
                IPv6:
                  2804:6494::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269436

    Signature Algorithm: sha256WithRSAEncryption
         c3:67:22:46:f3:b8:9e:42:db:5d:5c:83:2c:85:be:31:0f:73:
         84:49:3c:71:89:25:fc:7b:e6:58:62:6e:1a:70:bd:1a:3b:97:
         eb:08:77:8d:df:15:f4:95:2a:ce:e5:06:dc:1c:00:8a:f7:f7:
         6c:bf:95:03:6b:63:e7:ba:90:61:cc:7b:c8:78:22:12:80:5c:
         5d:5b:e8:04:14:77:33:9a:ae:5f:5f:fe:fd:20:f8:d2:7f:c1:
         2c:9d:bb:49:79:4c:b3:a5:22:58:f5:6d:d6:28:69:30:c3:bd:
         09:ca:f4:db:af:c5:14:63:b0:03:49:cf:38:51:b7:e4:0c:b6:
         b1:74:fc:93:17:d1:7d:03:25:7c:0f:02:f5:41:ce:72:72:9c:
         d8:25:13:e1:d6:93:45:fb:25:37:3f:5a:0a:94:53:03:05:ad:
         dc:26:2a:70:b6:06:c4:20:29:3a:b5:53:fe:56:23:c5:2b:1d:
         ac:5f:2c:45:f5:53:12:e7:38:c5:33:b8:c9:15:8d:f4:40:90:
         80:84:29:a6:06:74:10:39:96:3f:7f:13:2b:5a:64:b5:c9:20:
         d3:b3:90:31:82:79:44:8c:3b:48:21:0a:25:ec:84:5a:4e:d9:
         84:9d:50:2e:51:fd:85:4b:d5:f8:d8:80:1d:60:dd:65:b7:53:
         08:05:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----