This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/347335C55DEED06832A6596D46F3DDC3F2E83825.cer
File:                     347335C55DEED06832A6596D46F3DDC3F2E83825.cer (raw, json)
Hash identifier:          UGm21/BxWemJ+/uA/zz+GfSsnuCwLjRXJCbNkvM5XJ8=
Subject key identifier:   34:73:35:C5:5D:EE:D0:68:32:A6:59:6D:46:F3:DD:C3:F2:E8:38:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5968C60039375E9550C69903ADC02D8DE0D623A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/347335C55DEED06832A6596D46F3DDC3F2E83825.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Jan 2026 14:27:41 +0000
Certificate not after:    Fri 22 Jan 2027 14:32:41 +0000
Subordinate resources:    AS: 271104
                          IP: 179.42.4.0/22
                          IP: 2804:7654::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:68:c6:00:39:37:5e:95:50:c6:99:03:ad:c0:2d:8d:e0:d6:23:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 23 14:27:41 2026 GMT
            Not After : Jan 22 14:32:41 2027 GMT
        Subject: CN=347335C55DEED06832A6596D46F3DDC3F2E83825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:46:0d:ea:b6:77:4a:93:5f:41:12:d8:42:
                    79:5b:4a:b5:d5:4e:6f:a9:57:fe:30:7e:9f:40:17:
                    a7:19:2e:a0:54:9c:55:43:7a:44:15:11:b3:9d:7e:
                    7a:10:a4:7a:cd:26:ac:02:ce:91:22:8c:16:d1:09:
                    8d:91:5a:f9:d5:82:20:da:5c:19:a9:ee:c9:dd:a3:
                    72:f1:4e:43:1e:8a:ad:b2:56:d7:e3:f0:ec:74:fd:
                    f5:c1:c0:c1:77:4f:e2:35:c4:26:81:5a:9c:6b:24:
                    3f:19:dc:25:20:bc:a6:93:2b:93:a8:3e:aa:db:61:
                    ab:dc:d0:a6:26:df:0d:64:3a:64:29:94:06:98:d7:
                    57:1e:6e:49:54:f0:d8:a9:67:23:24:14:61:f3:ec:
                    47:14:f2:a8:71:de:7f:e1:5c:2b:9d:fe:c2:7e:12:
                    d2:3f:96:22:d3:14:51:ee:d6:74:58:6d:dd:03:a1:
                    80:57:af:54:e2:c8:0c:1f:8e:48:34:1d:20:f9:91:
                    bf:7e:49:6f:14:11:af:ac:28:7a:5c:f3:cf:d9:d7:
                    a6:56:f4:29:c8:ca:89:78:94:19:90:06:9b:d1:7f:
                    9d:4f:02:58:63:f3:1c:28:32:77:4f:d6:cf:1c:7b:
                    a8:fe:d3:03:69:a6:f8:02:3a:b2:24:af:9f:4f:a1:
                    ed:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:73:35:C5:5D:EE:D0:68:32:A6:59:6D:46:F3:DD:C3:F2:E8:38:25
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/347335C55DEED06832A6596D46F3DDC3F2E83825.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.4.0/22
                IPv6:
                  2804:7654::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271104

    Signature Algorithm: sha256WithRSAEncryption
         c2:a5:c0:77:49:62:2e:03:b1:79:72:af:22:5d:bd:6d:dd:b3:
         36:52:34:37:ec:6f:3b:66:73:a6:80:97:ee:96:0c:32:68:7c:
         ed:16:54:d8:38:de:da:45:d5:33:da:38:ea:4a:ea:ce:06:e2:
         ae:1b:8f:2c:21:17:77:56:7a:c9:80:ff:6a:a6:a2:b7:6b:5f:
         4c:c0:ee:a9:2a:ab:ea:f1:a8:40:0a:7a:21:3b:32:68:a4:fc:
         97:c9:0e:25:8d:e6:48:d9:01:8a:d8:1e:0b:20:03:6b:7e:73:
         4d:79:37:ef:e1:b0:b0:89:b4:6a:f1:c7:24:49:53:6e:c7:14:
         9f:69:39:1a:0d:0f:30:dc:44:16:ae:43:b3:fe:b6:66:e1:d9:
         80:46:a8:e0:c0:e5:3e:bf:89:73:b9:85:fb:af:2d:50:0c:6a:
         f6:be:fe:f1:4f:ea:24:9c:c1:dc:cf:ac:d8:ba:b3:2a:2c:2d:
         ac:0f:2b:32:dc:cd:67:f7:97:e2:ab:d7:97:94:58:80:8c:21:
         21:a9:e0:1c:17:c8:be:01:ee:74:a2:a3:fd:5d:4b:ae:53:58:
         78:c9:1c:90:27:36:65:d0:64:9a:9f:88:93:f4:e6:e8:ac:bb:
         23:63:7b:c3:d1:93:34:43:8e:b6:6b:e7:8e:06:44:2f:c1:80:
         73:e8:90:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----