This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.cer
File:                     44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.cer (raw, json)
Hash identifier:          3ud1mpLXUT5K5eDB9PXYcxMm0Rvl2Vk1HkPYZ5DQZZo=
Subject key identifier:   44:E3:53:DE:84:ED:32:E4:B3:AA:90:C5:1D:0D:65:7F:E5:6A:7F:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0A8C0B146FB5D3D85A5017392EDDB8C0D268C962
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Jan 2026 12:52:09 +0000
Certificate not after:    Wed 20 Jan 2027 12:57:09 +0000
Subordinate resources:    AS: 269388
                          IP: 45.185.180.0/22
                          IP: 2804:63dc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8c:0b:14:6f:b5:d3:d8:5a:50:17:39:2e:dd:b8:c0:d2:68:c9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 12:52:09 2026 GMT
            Not After : Jan 20 12:57:09 2027 GMT
        Subject: CN=44E353DE84ED32E4B3AA90C51D0D657FE56A7F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:58:07:0b:57:e8:b6:be:ec:3c:d8:86:ea:
                    bb:87:36:4a:49:f9:24:67:73:a7:85:1b:37:2f:35:
                    b6:4e:18:dc:46:22:f4:53:c2:87:e3:52:49:86:57:
                    69:a9:3c:d4:cd:ea:5a:ea:6e:16:fb:aa:61:9b:24:
                    03:48:33:a0:2e:cc:9a:cd:77:70:2a:14:6c:25:1e:
                    d2:01:f1:3f:b7:57:9a:38:87:f1:36:2d:51:65:75:
                    3f:e2:4c:68:a8:a3:74:95:ce:8c:54:0a:87:45:a3:
                    19:2f:c8:f3:b8:d5:30:40:40:7c:a5:4d:a3:56:64:
                    44:b2:21:8a:86:a2:ec:b5:7f:35:50:c0:45:dc:10:
                    2e:4b:52:de:f6:65:a9:f0:86:e0:43:45:bd:23:3c:
                    c9:0d:26:da:9c:e1:d4:23:91:62:77:11:60:41:f5:
                    fd:2f:26:1f:ea:73:78:7b:19:ac:29:e7:ef:3c:c0:
                    cb:ee:58:a4:d9:84:2a:55:3a:88:9b:2b:1c:3f:ef:
                    18:76:55:8e:cd:be:bb:cb:07:42:fc:81:0f:bc:8d:
                    e9:18:7a:51:b4:9f:40:c1:39:71:b9:cf:72:9c:86:
                    2d:23:d4:4d:3f:ac:9c:d1:bd:aa:06:c7:cf:87:6d:
                    07:b8:4a:fb:fc:de:ce:79:68:78:da:ab:3b:aa:bc:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:E3:53:DE:84:ED:32:E4:B3:AA:90:C5:1D:0D:65:7F:E5:6A:7F:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.180.0/22
                IPv6:
                  2804:63dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269388

    Signature Algorithm: sha256WithRSAEncryption
         91:2d:1b:1b:df:a3:6c:2d:9f:d1:40:d0:f7:19:89:26:59:81:
         9f:a3:10:07:4e:7d:d9:d3:1f:78:9f:29:ad:82:99:33:3c:2f:
         21:2d:a3:c6:f0:90:1b:bd:c3:ff:3f:68:1f:d3:6c:97:0b:b6:
         37:89:54:98:4f:ca:6d:fc:b8:0d:ac:b6:65:d6:b6:e0:2f:06:
         ab:7d:40:27:87:00:ea:7c:8a:0d:af:bd:5b:55:b3:47:27:59:
         23:c5:55:cc:39:94:b5:b1:b5:fe:05:88:12:7b:1f:70:7c:50:
         17:99:eb:a7:dd:eb:4c:14:78:0d:c8:cd:4b:e4:8d:26:25:fa:
         a5:d2:a5:d7:84:f5:16:e5:33:6e:08:9f:03:61:a8:3d:f9:2c:
         99:e7:af:4c:87:c7:1f:7c:85:10:b0:4c:dd:3e:c3:45:1b:8e:
         41:33:99:5b:e4:61:de:60:82:98:4d:0a:88:ec:66:81:61:ba:
         e9:c1:41:4c:86:a3:c0:02:67:bb:e4:9a:d1:60:a3:11:e3:c5:
         75:92:31:3f:1a:c7:da:b1:f2:c8:af:2e:a6:11:18:5b:5b:b6:
         3e:cf:86:29:b7:e5:2d:65:3e:97:92:28:32:59:5f:f7:d2:d2:
         7b:fd:bb:3f:7e:0c:95:78:22:e8:95:a8:c4:f4:9a:3e:07:b0:
         aa:e6:9d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----