This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4878F053EB2D92E9DA039989631339ED4F4A4F69.cer
File:                     4878F053EB2D92E9DA039989631339ED4F4A4F69.cer (raw, json)
Hash identifier:          RpjXUmg9CPYWlRb7soA38ylQ6ZcFFPzyK0nwpdzZ8l8=
Subject key identifier:   48:78:F0:53:EB:2D:92:E9:DA:03:99:89:63:13:39:ED:4F:4A:4F:69
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       20BFACA9F0715F7C11BD09F205A005FE6EAAB81C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/4878F053EB2D92E9DA039989631339ED4F4A4F69.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Jan 2026 20:02:49 +0000
Certificate not after:    Fri 15 Jan 2027 20:07:49 +0000
Subordinate resources:    AS: 52634
                          IP: 177.124.188.0/22
                          IP: 2804:d7c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bf:ac:a9:f0:71:5f:7c:11:bd:09:f2:05:a0:05:fe:6e:aa:b8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 16 20:02:49 2026 GMT
            Not After : Jan 15 20:07:49 2027 GMT
        Subject: CN=4878F053EB2D92E9DA039989631339ED4F4A4F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:b5:5f:af:12:9c:9c:1e:a8:e0:34:05:69:
                    5a:45:97:0b:30:af:9f:7a:7a:f3:d0:06:eb:e9:94:
                    5a:78:64:ad:d3:53:36:df:e6:81:4b:08:20:7e:2a:
                    7c:91:82:5d:99:44:09:29:42:20:ad:55:05:63:11:
                    0e:07:ad:9d:f1:46:77:e9:ad:8d:02:87:20:02:f0:
                    e8:7b:33:89:8e:fd:cf:ca:dc:df:a0:f5:71:64:38:
                    0c:fb:24:81:af:4c:7c:55:19:2b:c8:69:50:7d:63:
                    df:57:01:b9:de:f9:81:09:34:7f:9d:c0:34:38:63:
                    49:27:2e:8b:f1:13:ea:d7:7e:eb:1e:a5:73:ad:fa:
                    d1:8c:65:ff:7b:28:1d:b2:4e:97:1c:94:bf:6e:4e:
                    18:88:f1:d5:61:18:3f:5e:c0:dd:32:8d:45:50:1f:
                    4c:a9:9a:9c:6a:57:5c:39:cb:c1:cd:fe:1e:72:13:
                    85:ab:9c:d6:8e:62:64:c4:80:e3:ef:02:a3:e9:ee:
                    e3:eb:7e:39:80:fd:70:1c:16:e9:8d:fa:4d:a1:6f:
                    99:dd:78:b3:d0:cf:4a:fd:67:03:9c:e6:a0:22:ce:
                    28:f2:0d:b5:34:c6:ed:ca:06:60:34:31:02:c4:ac:
                    30:39:11:f7:7c:44:fd:1a:e0:64:0a:d9:92:22:88:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:78:F0:53:EB:2D:92:E9:DA:03:99:89:63:13:39:ED:4F:4A:4F:69
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/4878F053EB2D92E9DA039989631339ED4F4A4F69.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.188.0/22
                IPv6:
                  2804:d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52634

    Signature Algorithm: sha256WithRSAEncryption
         51:94:2d:e9:12:14:db:a6:71:2b:89:91:dd:5e:56:ce:fd:14:
         9b:b6:5c:cb:dd:ad:fd:c5:2f:f8:7b:d4:48:5b:2b:b5:e7:12:
         3d:1a:32:95:9d:36:d3:b7:fe:dd:6a:2e:7e:eb:b0:22:84:9d:
         ab:e9:b5:58:6d:0b:22:9f:3a:a9:83:66:1a:b5:53:5f:38:57:
         d6:21:2b:43:ed:30:0f:97:ed:01:5d:19:ca:45:81:86:54:b8:
         73:dd:8d:2d:4a:dc:a9:f9:8e:ba:9c:4a:0d:9b:d4:5d:0c:49:
         b9:69:6c:63:42:52:ae:67:22:aa:ae:be:b7:e6:7b:06:4c:55:
         7a:05:bf:04:fc:a9:80:db:a1:c9:14:1b:96:95:ec:71:cd:8f:
         81:da:14:45:eb:c1:8e:27:53:57:ae:29:92:50:ef:22:11:4f:
         19:58:af:c9:a8:cf:59:ce:84:d2:dd:dd:1e:68:d1:03:04:bf:
         3f:d6:d8:a3:6f:4a:0b:f7:02:49:d3:90:04:6b:04:99:7d:16:
         6c:f1:b3:b9:c4:08:91:45:bf:29:7d:5d:36:b9:4b:c7:1c:d3:
         3f:a3:2c:13:72:be:91:c9:ac:6b:7e:44:c7:87:15:36:e7:8d:
         fa:b3:fc:26:f4:6f:45:ea:bd:40:9c:a0:75:72:e5:05:ce:6a:
         27:74:94:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:35:51 2026 by rpki-client