This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
File:                     3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer (raw, json)
Hash identifier:          UfiLVDMvlNC+eZGhYQsch15nACCovigt9UZT7DeOdi4=
Subject key identifier:   3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       31FF6AE390C7B3BF4C82BB42D14BB8B1CCEB65F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Jan 2026 13:40:16 +0000
Certificate not after:    Sat 23 Jan 2027 13:45:16 +0000
Subordinate resources:    AS: 265062
                          IP: 170.231.156.0/22
                          IP: 2804:3234::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ff:6a:e3:90:c7:b3:bf:4c:82:bb:42:d1:4b:b8:b1:cc:eb:65:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 24 13:40:16 2026 GMT
            Not After : Jan 23 13:45:16 2027 GMT
        Subject: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9a:fd:81:5d:81:aa:5c:12:0e:4d:81:30:aa:
                    1d:03:2d:0c:44:31:5e:09:16:3b:12:d4:76:74:da:
                    b4:b0:b7:74:de:3b:9c:24:41:0b:a0:f6:6e:23:ff:
                    39:42:ae:8c:3b:ac:0c:b4:9e:ff:82:bf:5f:87:01:
                    a6:eb:6d:db:6a:b8:54:fb:d4:ab:73:a3:b0:8e:8c:
                    47:73:d5:4c:7d:78:18:ef:53:21:06:60:71:e9:ab:
                    90:fa:07:e9:43:63:ec:63:19:32:1a:b7:bc:4f:de:
                    50:14:fe:b6:0c:ca:f6:01:e0:d6:a9:90:14:79:7f:
                    fa:14:01:9a:b2:f9:24:dd:f1:0a:5d:8b:02:00:6e:
                    f9:c0:e1:e5:23:fb:d6:b0:ee:89:ef:95:3a:5a:45:
                    04:b8:ac:d3:a6:18:19:34:e8:4f:11:77:5d:11:10:
                    1b:b8:f0:06:45:f4:63:3e:e5:fa:3d:b3:92:10:fc:
                    89:c1:89:29:35:39:d8:58:54:80:bf:8a:c1:47:c5:
                    c8:f7:80:e7:49:e1:3c:a8:ad:a5:4e:d7:4d:dd:0f:
                    a7:34:da:0d:d4:77:fa:c7:40:ad:32:89:30:92:69:
                    84:76:26:6c:60:c6:d4:68:82:06:f4:7a:03:59:39:
                    51:79:a4:9e:f0:f1:36:ff:86:a2:67:4b:20:f2:cd:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.156.0/22
                IPv6:
                  2804:3234::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265062

    Signature Algorithm: sha256WithRSAEncryption
         08:cf:98:c0:b7:2c:79:7a:24:b9:5b:5e:29:e4:6b:8c:b0:1c:
         69:08:cf:34:08:6e:03:7f:0f:67:e1:8e:84:64:f5:d0:2d:05:
         6f:fd:4c:c4:d0:90:35:b0:57:28:ba:54:33:74:a9:7f:8d:1e:
         06:e0:2d:bd:4e:d0:c2:92:27:d2:0e:4d:c2:1e:3c:a5:78:1f:
         97:ba:81:68:91:24:be:83:03:97:d7:24:39:fb:e6:27:7b:c6:
         18:7b:90:68:6d:65:23:f5:8c:78:7f:5a:db:9b:eb:6e:70:fb:
         85:59:3c:9f:f0:77:07:54:5b:a2:40:c8:de:bc:b8:5f:4a:da:
         1e:77:18:fc:40:e2:1e:ff:36:e7:3d:63:f0:ba:08:34:02:b1:
         e8:35:db:f7:93:3b:32:27:7d:d7:e5:81:50:ec:c7:83:e9:38:
         2a:6a:f5:f2:93:2d:be:ef:dd:bb:10:ff:a1:e7:3c:fc:97:42:
         82:0f:77:fc:a2:58:ee:bc:a1:fa:a2:20:cb:c5:26:f9:bf:ec:
         d0:67:23:c8:97:70:3c:05:46:89:da:a9:92:74:45:48:ba:6c:
         39:95:f3:e5:a0:a2:35:c9:36:a9:43:e7:bc:15:48:a0:66:3e:
         c7:96:41:8d:f7:6b:b7:85:db:78:d4:2b:c9:84:79:de:8b:75:
         b6:82:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----