This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.cer
File:                     549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.cer (raw, json)
Hash identifier:          ZQapkdUOy0dw/Wp2mg5WBbQuP9dbM+S9XuOJSLLRx/4=
Subject key identifier:   54:93:61:11:9D:AB:7A:FB:B8:C8:31:A9:4F:B1:A7:5D:9B:F7:3E:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       33561BF9D36D94C27EFCE486D08D97F78E171CF0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Jan 2026 18:46:04 +0000
Certificate not after:    Wed 20 Jan 2027 18:51:04 +0000
Subordinate resources:    AS: 269006
                          IP: 45.176.148.0/22
                          IP: 2804:5e04::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:56:1b:f9:d3:6d:94:c2:7e:fc:e4:86:d0:8d:97:f7:8e:17:1c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 18:46:04 2026 GMT
            Not After : Jan 20 18:51:04 2027 GMT
        Subject: CN=549361119DAB7AFBB8C831A94FB1A75D9BF73EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d5:ee:86:dd:d7:24:d8:a6:69:87:19:89:13:
                    2e:59:b5:00:8c:76:e8:99:b4:c7:af:de:d2:2f:d4:
                    e6:89:c9:fd:da:93:1f:4a:06:bf:b6:cd:c1:74:0c:
                    8b:49:a3:15:92:c7:cf:f2:e2:85:83:b2:62:6e:8d:
                    9c:42:b4:5a:bb:2b:32:90:36:6c:c8:31:35:ad:40:
                    ec:93:5a:51:ca:0f:58:8e:33:be:26:ab:53:8b:d0:
                    4a:71:d9:d5:d6:82:ef:07:9e:3c:65:15:46:7f:53:
                    db:2e:ea:9b:d9:c3:68:93:b3:df:3b:60:ed:07:76:
                    84:47:0c:84:a9:c8:34:c4:ee:02:e3:5b:73:a1:f6:
                    19:81:e3:3e:a4:d8:aa:24:41:ce:9f:dc:13:0c:51:
                    b2:88:1b:24:4e:c6:82:7e:b2:64:fc:f3:7a:b4:1a:
                    49:4a:fa:e7:5f:05:16:51:b2:f7:bb:82:d8:3d:9e:
                    d9:10:a9:00:31:e1:92:6a:95:51:93:89:7c:20:2c:
                    54:ff:00:66:17:6f:88:ff:af:9c:47:24:59:a5:51:
                    f9:e9:d6:7e:a0:46:88:cd:ed:c2:e0:fc:a8:09:07:
                    60:43:23:b7:01:7d:b9:e0:65:87:fb:66:b0:88:d8:
                    d7:dc:4b:69:df:cb:9c:2f:a6:07:4e:36:9c:7a:9b:
                    ab:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:93:61:11:9D:AB:7A:FB:B8:C8:31:A9:4F:B1:A7:5D:9B:F7:3E:A8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.148.0/22
                IPv6:
                  2804:5e04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269006

    Signature Algorithm: sha256WithRSAEncryption
         03:b3:ac:ed:46:50:85:c7:09:01:91:30:1e:73:63:26:da:dc:
         34:f6:2a:7b:99:05:9d:3a:94:49:41:d8:5a:df:55:13:eb:a9:
         43:2b:00:2a:c5:bf:99:ff:d0:91:7b:24:8d:40:74:a6:ba:4f:
         09:fe:2e:4e:37:a6:1b:48:be:ca:bc:d1:25:1f:2c:8f:b1:14:
         4d:b1:45:da:96:ae:76:e1:0e:44:72:d9:e6:cf:e1:58:e4:78:
         03:f0:b6:10:45:5e:16:ba:86:ff:d4:64:ac:3d:45:b3:62:ab:
         fa:f3:a0:1e:5f:54:bf:d4:fa:ff:5d:50:7f:dc:17:24:4f:c4:
         96:15:64:e5:e0:13:0a:59:b7:ea:82:bc:f9:e4:47:dc:63:3a:
         da:4d:d5:59:84:76:dd:31:0e:c5:1b:db:5b:1e:1c:7d:e8:83:
         61:23:7e:73:02:68:a2:3b:f5:b7:0d:ce:00:b7:d2:10:8f:19:
         03:52:9a:50:18:08:c9:aa:71:eb:d9:bd:43:03:13:bd:e6:3c:
         db:14:a0:13:a6:af:f4:65:7a:4e:6f:d0:a9:d2:b1:32:72:d2:
         97:e1:b1:6f:f0:5d:fc:57:32:c3:1c:13:f7:18:2d:e5:48:ee:
         ff:ce:44:52:7e:fd:b3:7b:1e:e5:f7:1c:75:27:2d:3b:fe:62:
         fc:ab:9b:3b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUM1Yb+dNtlMJ+/OSG0I2X944XHPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMjExODQ2MDRaFw0yNzAxMjAxODUxMDRaMDMxMTAvBgNV
BAMTKDU0OTM2MTExOURBQjdBRkJCOEM4MzFBOTRGQjFBNzVEOUJGNzNFQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF1e6G3dck2KZphxmJEy5ZtQCM
duiZtMev3tIv1OaJyf3akx9KBr+2zcF0DItJoxWSx8/y4oWDsmJujZxCtFq7KzKQ
NmzIMTWtQOyTWlHKD1iOM74mq1OL0Epx2dXWgu8HnjxlFUZ/U9su6pvZw2iTs987
YO0HdoRHDISpyDTE7gLjW3Oh9hmB4z6k2KokQc6f3BMMUbKIGyROxoJ+smT883q0
GklK+udfBRZRsve7gtg9ntkQqQAx4ZJqlVGTiXwgLFT/AGYXb4j/r5xHJFmlUfnp
1n6gRojN7cLg/KgJB2BDI7cBfbngZYf7ZrCI2NfcS2nfy5wvpgdONpx6m6udAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUk2ERnat6+7jI
MalPsaddm/c+qDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1pT
ZjdSRll2VkZ6UDg3V25WUHVUaFd2RnlqMXBCY21QaWs2a1BIRVZQN1EvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0da
U2Y3UkZZdlZGelA4N1duVlB1VGhXdkZ5ajFwQmNtUGlrNmtQSEVWUDdRLzAvNTQ5
MzYxMTE5REFCN0FGQkI4QzgzMUE5NEZCMUE3NUQ5QkY3M0VBOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbCUMA0EAgACMAcDBQAoBF4EMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQazjANBgkqhkiG9w0BAQsFAAOCAQEAA7Os7UZQhccJAZEw
HnNjJtrcNPYqe5kFnTqUSUHYWt9VE+upQysAKsW/mf/QkXskjUB0prpPCf4uTjem
G0i+yrzRJR8sj7EUTbFF2pauduEORHLZ5s/hWOR4A/C2EEVeFrqG/9RkrD1Fs2Kr
+vOgHl9Uv9T6/11Qf9wXJE/ElhVk5eATClm36oK8+eRH3GM62k3VWYR23TEOxRvb
Wx4cfeiDYSN+cwJoojv1tw3OALfSEI8ZA1KaUBgIyapx69m9QwMTveY82xSgE6av
9GV6Tm/QqdKxMnLSl+Gxb/Bd/FcywxwT9xgt5Uju/85EUn79s3se5fccdSctO/5i
/KubOw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:16:34 2026 by rpki-client