This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.cer
File:                     581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.cer (raw, json)
Hash identifier:          5tpSsC0oRevSGc72UR5jaLouM9dQvJpsEtsJGMmZ5aQ=
Subject key identifier:   58:1F:7F:0D:AD:FA:0E:16:F4:D2:FF:9A:84:88:3B:C6:70:69:89:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       534D11F08E3BEABC83D12EA91D4F73F76EC762A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Jan 2026 09:40:30 +0000
Certificate not after:    Thu 14 Jan 2027 09:45:30 +0000
Subordinate resources:    AS: 273558
                          IP: 2804:9088::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4d:11:f0:8e:3b:ea:bc:83:d1:2e:a9:1d:4f:73:f7:6e:c7:62:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 15 09:40:30 2026 GMT
            Not After : Jan 14 09:45:30 2027 GMT
        Subject: CN=581F7F0DADFA0E16F4D2FF9A84883BC6706989C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:1a:f0:80:4c:5c:93:6d:9e:d2:15:66:8d:
                    21:af:b2:c3:fe:4b:80:81:73:d6:b7:3d:88:84:89:
                    80:31:8f:89:7c:d4:e9:8c:8a:c9:f1:83:7b:1d:6f:
                    b1:97:da:c6:73:5e:1c:7b:5b:58:e1:f4:67:8c:05:
                    e4:3d:b4:4c:88:d4:1b:21:2b:e5:73:c9:97:65:97:
                    29:e0:06:0d:ac:76:e8:7c:58:25:24:67:00:1e:ff:
                    77:81:d1:07:4b:be:f4:9a:bb:eb:ab:db:98:3b:85:
                    1b:54:3f:d8:47:b7:5a:a4:ff:63:7a:0b:a0:28:ee:
                    ab:35:b9:14:5b:0a:6c:d1:77:fe:bc:a4:10:ee:15:
                    d6:04:f7:99:d4:e5:56:a5:e0:9f:82:a0:83:8a:b6:
                    a2:39:f4:5f:6a:b5:03:e2:6e:a1:e0:ca:13:9d:20:
                    df:d7:b2:5b:d4:2e:d9:64:ad:8e:21:fc:1f:e0:d5:
                    9a:fc:64:50:43:46:a5:b0:2e:f6:3f:84:c9:f7:9d:
                    4d:23:ae:90:63:b1:4a:a1:48:6f:03:9f:1f:c1:cf:
                    d3:12:27:50:d7:8f:bc:8c:98:b0:09:63:e3:c4:d9:
                    7e:79:2d:18:59:5c:ba:16:67:1c:7b:0a:79:e0:50:
                    0f:d0:57:3d:7f:02:48:4a:5d:fd:12:2f:56:b6:5c:
                    ca:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:1F:7F:0D:AD:FA:0E:16:F4:D2:FF:9A:84:88:3B:C6:70:69:89:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9088::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273558

    Signature Algorithm: sha256WithRSAEncryption
         9b:e7:b9:d8:d1:e8:67:96:7b:01:2e:2e:80:69:5e:02:77:a7:
         7f:69:b0:19:09:3e:d1:5f:07:6b:39:53:66:02:fe:c1:1d:ac:
         3c:b5:1e:9f:4d:f5:ac:31:72:16:ee:b7:df:38:a6:c6:36:a6:
         a5:c1:52:00:4f:dd:9f:4e:10:de:df:a9:f8:97:a3:52:6b:d4:
         72:a9:cc:62:2e:83:8e:a9:c4:8e:a5:c9:82:ad:d2:73:ab:9d:
         2f:5d:28:c8:88:cc:46:a4:01:dc:d9:a7:c3:db:65:3f:e9:b5:
         ad:d0:e3:a6:a6:db:75:d4:91:63:05:dc:2e:38:04:32:fd:d8:
         05:5b:32:da:92:65:c6:64:f3:ec:a5:58:8b:7c:75:5a:90:bd:
         cb:7b:69:c9:06:be:38:5a:df:a5:38:6f:30:d4:d6:5b:54:6a:
         6e:19:7f:5d:ab:11:f2:88:00:16:81:1c:e5:52:6b:00:b5:2b:
         1c:5e:c9:83:ee:7b:d7:0a:50:e3:85:32:db:d7:97:fe:da:63:
         9d:ee:57:c8:b3:e8:8d:a0:db:ee:a2:ea:6f:08:0d:b8:83:c5:
         55:43:dc:11:2f:56:ec:22:72:85:19:72:6b:fd:a0:a7:f4:35:
         3b:1f:61:99:65:ea:71:68:77:f7:65:93:49:06:db:8d:fa:47:
         ed:77:75:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----