This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer
File:                     33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer (raw, json)
Hash identifier:          bWfKQXuIYdTbGTbyApRu7wE/BhsCGRqX5Z1KmuNcB6k=
Subject key identifier:   33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4E3234AD74801B08C2C17360F584A2B9433180D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Jan 2026 15:38:17 +0000
Certificate not after:    Fri 15 Jan 2027 15:43:17 +0000
Subordinate resources:    AS: 266304
                          IP: 170.79.200.0/22
                          IP: 2804:35c0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:32:34:ad:74:80:1b:08:c2:c1:73:60:f5:84:a2:b9:43:31:80:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 16 15:38:17 2026 GMT
            Not After : Jan 15 15:43:17 2027 GMT
        Subject: CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8e:16:4c:4c:bb:9c:81:5a:90:61:45:21:25:
                    20:43:59:cd:93:a4:76:5c:47:0d:c5:1b:aa:ca:14:
                    26:b9:23:89:e4:61:18:47:2e:e4:b8:d0:c5:61:50:
                    63:c0:7f:72:1b:47:be:81:c3:00:7c:2e:2b:7c:f5:
                    f4:ac:7e:49:76:c4:91:3e:f5:81:45:c1:12:17:48:
                    99:d1:41:c8:26:97:52:b8:9c:ba:31:13:00:08:ee:
                    a6:1a:5a:75:7b:3f:bb:77:1f:4f:bb:28:8d:c6:4a:
                    d8:f2:0c:ba:0d:d0:56:2d:5b:17:ff:c6:75:e6:c1:
                    5d:a2:74:19:bf:41:69:93:37:58:72:de:f4:5b:6a:
                    3d:9c:2b:28:fd:74:67:b3:87:72:fd:88:e1:a3:73:
                    6a:64:05:7c:54:e7:f7:13:cc:13:40:31:a9:a7:ed:
                    a3:d1:87:33:51:06:cc:29:ef:3d:91:c6:4a:4d:59:
                    a5:93:f6:d3:14:59:d6:64:ac:2c:73:c5:80:a7:55:
                    47:46:03:91:41:73:85:05:62:cc:96:24:ed:1b:b3:
                    e7:12:44:3b:0e:15:be:ba:c9:6a:09:18:f9:82:fe:
                    50:98:32:d3:25:49:5c:92:aa:69:58:b8:df:32:a4:
                    d6:2d:17:54:ba:99:a3:af:ce:61:73:63:b8:63:66:
                    77:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.200.0/22
                IPv6:
                  2804:35c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266304

    Signature Algorithm: sha256WithRSAEncryption
         2f:17:81:c6:e3:c5:5b:e2:0d:aa:5a:b5:6c:45:c2:75:5f:43:
         1e:b8:44:dd:0b:d6:b8:45:e6:17:10:da:9d:66:40:17:5c:d6:
         8b:79:fa:a4:c6:38:12:95:25:c6:66:dd:39:46:f2:70:0d:1b:
         49:b8:5b:32:36:88:75:1b:26:e1:7e:0d:20:df:93:b2:c7:3b:
         4f:f4:a9:69:c8:3a:54:a5:97:3c:93:c0:40:89:79:52:6e:90:
         46:32:ae:ac:d8:a5:e6:81:d0:eb:1d:d5:62:d0:7f:40:fa:f5:
         96:c9:3a:0d:3b:0a:51:df:b1:ad:08:08:d9:89:b9:f8:da:3b:
         c2:63:44:69:10:73:e9:bd:85:43:49:9e:fc:ff:27:38:f1:33:
         3d:3b:b3:46:ab:60:21:9d:1a:02:a2:56:cb:59:54:97:03:14:
         a2:3a:78:d8:0a:f5:b4:29:d1:b6:0f:c7:34:a5:6b:b9:13:ea:
         88:fe:e1:de:af:57:9c:d9:43:d2:d1:1f:2c:60:5c:82:bf:bd:
         6b:55:95:d0:ed:66:3b:86:ec:b7:0b:46:c9:02:7a:a4:f9:0e:
         93:51:7f:2d:b7:b7:8a:6c:eb:89:a9:bb:b0:84:3f:f0:61:42:
         e6:70:64:a5:6a:83:4e:32:e7:f4:86:03:e2:97:aa:29:c8:00:
         7c:55:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----