This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4F9350644EE4E60E577D84F486918BEA2A20BA6B.cer
File:                     4F9350644EE4E60E577D84F486918BEA2A20BA6B.cer (raw, json)
Hash identifier:          uGnMBzwIkX05h78EyIYQIzFCVAPzC6oV2Bk0n9gLxss=
Subject key identifier:   4F:93:50:64:4E:E4:E6:0E:57:7D:84:F4:86:91:8B:EA:2A:20:BA:6B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C5C773E1ABC6909EA2BBB869333B2D2EBCFC0B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/4F9350644EE4E60E577D84F486918BEA2A20BA6B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Jan 2026 19:20:05 +0000
Certificate not after:    Fri 22 Jan 2027 19:25:05 +0000
Subordinate resources:    AS: 61882
                          IP: 131.0.48.0/22
                          IP: 2804:1abc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5c:77:3e:1a:bc:69:09:ea:2b:bb:86:93:33:b2:d2:eb:cf:c0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 23 19:20:05 2026 GMT
            Not After : Jan 22 19:25:05 2027 GMT
        Subject: CN=4F9350644EE4E60E577D84F486918BEA2A20BA6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d3:59:b6:21:9f:3f:83:2a:95:a1:31:3d:ed:
                    0a:8d:95:f3:90:15:23:a3:ae:06:1e:af:67:98:10:
                    e5:85:60:24:39:a8:10:0c:d7:31:ee:e3:1c:be:0d:
                    30:d9:c2:05:4d:39:e1:b6:f6:24:3a:31:af:04:da:
                    db:1d:f8:e4:b3:53:97:ea:af:df:1d:e5:5f:6f:62:
                    c3:0d:fe:e6:5b:0f:d5:cc:63:ef:84:3a:04:ad:e2:
                    fa:cf:55:4b:af:e3:ca:d8:e7:07:ba:ae:05:b8:33:
                    c2:9a:00:c8:94:ef:cc:57:b2:69:96:aa:f0:da:c2:
                    03:38:c1:29:ac:62:a3:d6:cd:e6:28:cc:46:ce:b1:
                    97:d0:f9:be:e1:3a:d7:28:f9:e4:13:ae:fb:23:68:
                    15:57:1b:3c:d8:aa:fa:4c:ab:41:43:67:3c:c9:34:
                    be:10:f6:3f:c6:29:bb:97:6d:fa:31:1c:8f:bc:96:
                    65:03:ca:31:90:bb:9a:25:0b:76:08:d3:d9:72:0f:
                    66:09:c0:84:13:d8:50:7e:c7:4b:d3:6b:27:4f:3b:
                    5e:66:53:e1:99:01:26:1e:de:05:da:30:a2:a2:9d:
                    b6:90:30:17:fb:09:08:ed:ec:23:ea:6e:26:0a:45:
                    fd:a8:60:94:bf:8c:95:0d:8e:cd:e7:33:72:d0:29:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:93:50:64:4E:E4:E6:0E:57:7D:84:F4:86:91:8B:EA:2A:20:BA:6B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/4F9350644EE4E60E577D84F486918BEA2A20BA6B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.48.0/22
                IPv6:
                  2804:1abc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61882

    Signature Algorithm: sha256WithRSAEncryption
         6b:b0:54:dd:89:d4:08:b6:49:00:ea:0e:37:03:6d:c2:5b:c2:
         18:8b:e4:13:fe:31:e2:68:4d:ff:79:5f:b5:45:11:3b:93:8d:
         93:f1:4c:a2:4c:18:6d:86:2d:67:ad:6d:bb:5c:6d:c9:31:28:
         ea:ed:65:f2:ad:6b:81:41:4c:cc:b2:a9:25:f1:c4:1d:5c:4b:
         67:5f:7e:f2:e9:88:db:ee:27:16:91:79:c9:ab:3f:48:86:2c:
         a6:cf:d3:c9:98:91:6c:43:9f:4f:99:9c:75:b2:f8:b3:02:5f:
         dd:2f:b8:4c:e9:fa:61:c3:96:e2:5e:32:1c:d3:0e:05:f7:4a:
         40:3c:38:94:ab:15:1a:f3:b5:e7:9e:3b:fc:31:9e:f5:c1:17:
         f8:f6:c4:f1:a2:ee:dc:0f:8f:0d:a2:f2:8e:b4:75:25:e3:86:
         78:aa:fb:dc:e3:f3:bd:0f:54:cd:08:21:46:61:b0:49:a7:eb:
         c0:77:44:04:55:56:71:da:6e:b5:33:fe:cf:96:3c:53:6b:c7:
         53:da:ac:33:00:a2:a0:1d:fe:09:4f:7d:f4:4d:64:92:c0:40:
         73:38:a0:bf:b5:ca:a9:dd:3b:b9:82:10:e8:13:a3:b0:3b:ce:
         5e:96:8c:7e:01:bc:e4:1e:36:d3:0b:e4:53:90:fa:60:f3:9e:
         49:c2:c4:da
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUbFx3Phq8aQnqK7uGkzOy0uvPwLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMjMxOTIwMDVaFw0yNzAxMjIxOTI1MDVaMDMxMTAvBgNV
BAMTKDRGOTM1MDY0NEVFNEU2MEU1NzdEODRGNDg2OTE4QkVBMkEyMEJBNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY01m2IZ8/gyqVoTE97QqNlfOQ
FSOjrgYer2eYEOWFYCQ5qBAM1zHu4xy+DTDZwgVNOeG29iQ6Ma8E2tsd+OSzU5fq
r98d5V9vYsMN/uZbD9XMY++EOgSt4vrPVUuv48rY5we6rgW4M8KaAMiU78xXsmmW
qvDawgM4wSmsYqPWzeYozEbOsZfQ+b7hOtco+eQTrvsjaBVXGzzYqvpMq0FDZzzJ
NL4Q9j/GKbuXbfoxHI+8lmUDyjGQu5olC3YI09lyD2YJwIQT2FB+x0vTaydPO15m
U+GZASYe3gXaMKKinbaQMBf7CQjt7CPqbiYKRf2oYJS/jJUNjs3nM3LQKVLtAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRPk1BkTuTmDld9
hPSGkYvqKiC6azAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnpU
SHBFWWE0eVJpMWZSTnFMekNUTG9GQ1RvNDRlUXdYU3JZTVBLQXY0dUQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6
VEhwRVlhNHlSaTFmUk5xTHpDVExvRkNUbzQ0ZVF3WFNyWU1QS0F2NHVELzAvNEY5
MzUwNjQ0RUU0RTYwRTU3N0Q4NEY0ODY5MThCRUEyQTIwQkE2Qi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCgwAwMA0EAgACMAcDBQAoBBq8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDxujANBgkqhkiG9w0BAQsFAAOCAQEAa7BU3YnUCLZJAOoO
NwNtwlvCGIvkE/4x4mhN/3lftUURO5ONk/FMokwYbYYtZ61tu1xtyTEo6u1l8q1r
gUFMzLKpJfHEHVxLZ19+8umI2+4nFpF5yas/SIYsps/TyZiRbEOfT5mcdbL4swJf
3S+4TOn6YcOW4l4yHNMOBfdKQDw4lKsVGvO15547/DGe9cEX+PbE8aLu3A+PDaLy
jrR1JeOGeKr73OPzvQ9UzQghRmGwSafrwHdEBFVWcdputTP+z5Y8U2vHU9qsMwCi
oB3+CU999E1kksBAczigv7XKqd07uYIQ6BOjsDvOXpaMfgG85B420wvkU5D6YPOe
ScLE2g==
-----END CERTIFICATE-----