This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
File:                     32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer (raw, json)
Hash identifier:          9cdOx77jubYoXUSvqll7KxTRbgP/+LhPVeSvhemBE1c=
Subject key identifier:   32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57CD8FDDFC0F4C515C9F539BEFC38DA135E10AF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 20:14:03 +0000
Certificate not after:    Mon 18 Jan 2027 20:19:03 +0000
Subordinate resources:    AS: 269151
                          IP: 45.180.228.0/22
                          IP: 2804:6030::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cd:8f:dd:fc:0f:4c:51:5c:9f:53:9b:ef:c3:8d:a1:35:e1:0a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 19 20:14:03 2026 GMT
            Not After : Jan 18 20:19:03 2027 GMT
        Subject: CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1f:72:e6:a7:a6:2c:01:a5:7a:56:36:20:46:
                    7f:8b:8a:51:68:eb:1f:c0:f1:b8:4b:46:ff:40:56:
                    e3:b4:94:f3:7a:53:db:13:16:69:41:e2:7f:e5:80:
                    8c:48:04:27:bc:c8:43:a7:03:a2:e5:01:13:87:15:
                    f9:57:80:f8:b4:4b:5c:6e:80:c7:9d:00:01:86:76:
                    48:d1:c2:1e:62:65:c5:04:62:6f:4e:e3:85:69:45:
                    b4:c3:4b:74:37:fb:88:36:49:ca:25:1a:fe:2a:27:
                    06:3e:8b:ff:5b:8e:c0:54:3b:aa:3e:68:21:9e:89:
                    e2:25:38:fd:06:82:85:f8:f8:8c:3b:29:4b:41:5d:
                    51:12:99:aa:c0:91:1e:3a:18:55:00:8d:a0:c8:84:
                    09:0a:84:a9:9a:18:a0:c4:77:ec:b3:e8:8a:51:1a:
                    40:50:54:51:c4:3a:28:71:4e:d3:c0:1c:7a:eb:4e:
                    9c:c6:9f:b2:6f:2d:73:74:62:67:4c:b8:d3:5c:8b:
                    85:e6:29:e2:23:80:e3:98:47:f1:93:c4:bc:e2:00:
                    04:6d:79:bd:f2:0a:11:7c:23:29:e4:35:10:d4:e0:
                    cd:81:d2:ee:f8:43:a3:af:b2:81:eb:11:d9:8f:ca:
                    3a:23:33:3c:7e:e9:0a:87:ff:ec:61:ba:e2:4b:38:
                    3e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.228.0/22
                IPv6:
                  2804:6030::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269151

    Signature Algorithm: sha256WithRSAEncryption
         1d:c9:dd:48:3a:58:9d:cc:eb:3e:ad:91:ec:25:6d:3a:16:dd:
         69:f2:b7:ed:5b:6e:29:0e:d8:f5:07:75:57:35:51:3e:04:c7:
         cb:31:43:ce:8b:dd:51:ae:63:e1:7d:48:26:cb:16:ff:ec:95:
         6f:8f:62:08:34:5e:02:19:5c:be:fc:7c:70:d5:b3:e7:70:16:
         d9:6c:3e:3e:80:67:0d:d9:ee:b2:bf:a6:77:34:39:fa:a6:78:
         b4:90:07:72:94:76:a9:d7:26:99:f4:95:cb:1c:c5:00:85:47:
         f7:4a:fb:0a:ff:57:84:86:d8:bf:cc:5b:f3:2d:df:f4:2e:cb:
         8f:99:10:0f:f3:c9:a0:b9:1b:a3:42:25:4c:aa:ef:a9:3d:61:
         03:9e:b4:2f:c6:49:33:08:a5:6a:49:a1:ad:9e:d5:1e:3a:01:
         1a:29:c8:b7:da:fc:41:94:29:54:54:c2:51:a9:db:ac:18:ef:
         7f:21:0e:9e:5a:e8:0d:c3:11:37:bc:bd:6f:bb:10:0c:43:97:
         49:6b:55:c6:4f:e0:ae:42:63:34:90:df:9e:ed:b6:81:a8:89:
         9d:c9:f0:91:b6:78:da:1b:67:46:03:20:a0:73:3e:16:f4:ea:
         e2:53:dd:d8:f0:ee:26:01:6e:4e:08:cc:73:9b:50:fc:99:11:
         71:77:56:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----