This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/36C7B30F348A0E6A07BB2500897B2144A0AB1818.cer
File:                     36C7B30F348A0E6A07BB2500897B2144A0AB1818.cer (raw, json)
Hash identifier:          h/ec0RP2Slfr/K54TL8UPZ3QAK/+mGA6HBn+Vjqo7wQ=
Subject key identifier:   36:C7:B3:0F:34:8A:0E:6A:07:BB:25:00:89:7B:21:44:A0:AB:18:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E3C4B2E612ADCAB05A46401AA157A92ECBDE10B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/0/36C7B30F348A0E6A07BB2500897B2144A0AB1818.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Jan 2026 20:28:42 +0000
Certificate not after:    Fri 08 Jan 2027 20:33:42 +0000
Subordinate resources:    AS: 264147
                          IP: 138.97.68.0/22
                          IP: 2804:2330::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 03:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3c:4b:2e:61:2a:dc:ab:05:a4:64:01:aa:15:7a:92:ec:bd:e1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  9 20:28:42 2026 GMT
            Not After : Jan  8 20:33:42 2027 GMT
        Subject: CN=36C7B30F348A0E6A07BB2500897B2144A0AB1818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:3c:83:af:bf:a5:58:20:11:11:9d:1b:cd:
                    d7:20:cc:e8:47:26:06:23:30:ff:ce:d5:e5:8b:ab:
                    a3:05:f2:48:fe:dd:83:f2:dd:71:d6:52:66:55:dc:
                    84:51:27:75:e2:ca:eb:d2:5a:fa:bc:13:fd:78:a6:
                    c7:28:e2:04:1e:fd:fa:40:9e:e2:f5:d8:2b:b4:b3:
                    c2:01:4e:a8:09:95:89:b7:67:b7:46:ab:41:82:a2:
                    83:98:45:1f:7c:67:45:e5:ae:17:4c:c3:8a:bf:49:
                    21:5d:26:fd:39:ee:fa:db:99:00:62:7b:03:0a:f4:
                    1f:75:f3:c6:bc:b0:29:72:a4:8a:93:e4:cd:85:b3:
                    f7:fe:c8:d1:c4:74:1a:a6:b0:c6:f4:41:23:b3:3a:
                    2f:be:11:f9:51:ea:af:82:4e:d1:03:d8:bd:b6:e2:
                    ec:01:ff:45:93:5b:19:29:63:c1:a9:4e:7f:18:ca:
                    b4:99:63:9e:7a:5c:bf:11:4b:18:65:13:a9:46:94:
                    d0:59:2e:fe:e5:3e:91:7a:8a:0a:61:13:87:5e:ee:
                    96:81:23:65:f6:a5:66:39:6e:8e:99:0e:b3:c5:d1:
                    b9:68:d6:72:45:4c:dd:be:a9:b0:0d:ef:dd:0a:35:
                    6c:87:1f:c2:de:d4:19:9d:2e:79:fc:e6:ea:91:08:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:C7:B3:0F:34:8A:0E:6A:07:BB:25:00:89:7B:21:44:A0:AB:18:18
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/0/36C7B30F348A0E6A07BB2500897B2144A0AB1818.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.68.0/22
                IPv6:
                  2804:2330::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264147

    Signature Algorithm: sha256WithRSAEncryption
         63:93:78:b3:f7:71:e5:77:9c:c3:6b:24:47:89:f2:5a:ab:a4:
         35:44:29:32:23:84:ca:b3:70:39:9f:87:54:9a:7d:eb:4b:34:
         24:1c:b7:57:99:16:72:18:ec:a9:e1:b6:1e:ec:cd:51:f5:27:
         e6:c0:3d:c9:a4:3b:92:1e:47:da:e3:a4:0d:a2:39:a1:71:82:
         ea:02:55:5b:25:d2:36:34:c9:38:6b:ba:d5:30:80:cc:cd:8c:
         eb:31:7c:b6:ed:26:ef:16:be:4e:1e:f5:88:d0:95:6e:f7:7e:
         03:1e:47:8a:4c:5c:82:03:71:b2:c0:ab:16:19:45:26:62:83:
         a8:c4:a0:a4:a1:8e:37:02:33:7b:56:37:3e:aa:ce:ec:f6:99:
         93:4c:6e:18:d5:96:d2:a7:cd:61:3f:75:86:2c:b4:7b:ea:92:
         f4:95:af:11:dc:d7:b1:13:3a:d7:01:21:bb:3d:be:84:a3:4a:
         f3:32:15:22:fc:0e:c2:f3:07:90:e5:3c:28:f2:6d:7e:70:23:
         ff:92:31:d9:83:ba:cd:a1:c4:ef:d6:76:9a:7b:ad:5c:6e:78:
         2b:c8:d9:f2:13:0c:03:c6:69:71:23:65:46:ab:f6:8a:2b:b0:
         5d:02:bf:6f:48:31:7b:16:db:0f:b7:d6:01:f3:90:29:9d:28:
         01:6c:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----