This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/40D0F0229169D52F626961DD15E22B1658FD6535.cer
File:                     40D0F0229169D52F626961DD15E22B1658FD6535.cer (raw, json)
Hash identifier:          SI0bmibqGfwqqQ5hZ7FDmcP9gkF67vCv4JU0pdRvevM=
Subject key identifier:   40:D0:F0:22:91:69:D5:2F:62:69:61:DD:15:E2:2B:16:58:FD:65:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       39F30A44BAEF52158405D87C09FBBEF52DFD5DC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/40D0F0229169D52F626961DD15E22B1658FD6535.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Jan 2026 19:58:25 +0000
Certificate not after:    Tue 12 Jan 2027 20:03:25 +0000
Subordinate resources:    AS: 266073
                          IP: 45.4.148.0/22
                          IP: 2804:3a24::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f3:0a:44:ba:ef:52:15:84:05:d8:7c:09:fb:be:f5:2d:fd:5d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 13 19:58:25 2026 GMT
            Not After : Jan 12 20:03:25 2027 GMT
        Subject: CN=40D0F0229169D52F626961DD15E22B1658FD6535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:48:d0:73:f9:45:6a:a3:9e:ff:d9:44:3a:
                    ed:e9:f1:9b:28:1b:b3:f7:a7:d6:5e:43:47:61:d5:
                    45:a8:b7:88:da:bb:9e:2a:cd:4a:64:8b:e6:79:2c:
                    3a:94:91:78:99:b3:2b:00:ea:35:af:f3:79:c4:e8:
                    ac:ba:7e:cb:02:56:b3:0f:77:0f:d0:0c:07:f3:61:
                    23:76:2d:58:98:76:6d:d5:7b:3e:97:39:bd:fe:a9:
                    de:de:2e:f8:84:66:a9:e1:32:71:2a:7f:58:4f:63:
                    af:0b:31:21:5b:53:c4:fe:a6:2f:f9:ca:b8:87:9d:
                    11:5e:60:29:3e:46:45:5c:f9:0f:d1:0d:1c:2e:f3:
                    17:4c:2f:4f:f6:e1:3b:bb:06:75:2f:48:91:78:86:
                    88:80:46:c0:a1:6f:c0:5d:ae:a9:3c:f5:b4:70:da:
                    ee:3c:45:1d:ca:15:db:83:3f:22:cc:95:3a:15:25:
                    35:f2:d0:61:ed:df:f6:b5:90:c5:e3:f8:58:58:31:
                    ea:79:e8:cf:11:c1:c6:e8:81:ce:ff:5c:05:e5:95:
                    98:10:26:1f:7c:eb:02:df:ce:f9:eb:74:7f:97:8b:
                    ae:3a:dc:27:30:e7:24:81:fe:9b:fe:9f:d0:4e:ea:
                    8f:6a:56:2a:e3:18:3a:df:44:05:89:93:30:b2:6a:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:D0:F0:22:91:69:D5:2F:62:69:61:DD:15:E2:2B:16:58:FD:65:35
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/40D0F0229169D52F626961DD15E22B1658FD6535.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.148.0/22
                IPv6:
                  2804:3a24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266073

    Signature Algorithm: sha256WithRSAEncryption
         6d:07:ff:bb:3a:a1:fa:e0:e2:a8:ea:b7:79:02:77:75:59:73:
         1c:64:13:ec:c6:9b:ea:e8:76:0a:74:9e:23:ad:7b:53:80:6e:
         6b:cb:4b:09:f0:34:df:15:06:61:77:e7:16:0c:61:51:44:c4:
         bf:4e:94:5f:65:cc:77:61:85:3b:0a:87:f4:c0:80:dc:3c:ea:
         bd:f0:ce:d9:cd:2c:00:48:4f:f4:f9:e9:a4:12:45:42:fc:2e:
         0e:18:6b:4a:fd:68:4b:fc:d7:78:9c:d3:94:1e:d3:bf:3a:eb:
         55:f4:f7:2e:cb:86:ca:3a:12:35:a8:02:38:3b:bd:a8:cd:b3:
         a6:f8:93:16:0a:3c:60:cc:07:31:b6:44:17:2e:6d:82:86:ea:
         96:a4:5a:16:68:88:b6:ad:a3:f9:bd:07:47:bf:09:37:93:d7:
         65:f8:ca:9f:da:e0:d6:86:53:81:7b:83:d2:a2:d8:41:77:22:
         ee:81:b3:21:11:3d:1d:78:f2:2a:e2:59:2c:ea:22:6b:71:77:
         6a:26:08:8e:2d:00:20:e7:25:7c:a2:a8:c3:23:e5:eb:1d:11:
         d2:ae:ba:2d:dd:4a:29:8b:06:4f:a9:2b:b0:7f:fd:7e:bc:c8:
         b3:6e:ab:9f:4d:4b:7b:4a:04:1f:27:e6:d2:35:95:86:d9:e8:
         da:96:32:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----