This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/58639C4997EFECC162154C22A0044E1442CBA069.cer
File:                     58639C4997EFECC162154C22A0044E1442CBA069.cer (raw, json)
Hash identifier:          pqn3AxCyLNehSVwE0v2oVLSXHgdGoxKARZPOgMEHSPE=
Subject key identifier:   58:63:9C:49:97:EF:EC:C1:62:15:4C:22:A0:04:4E:14:42:CB:A0:69
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       664FAF27FF4F0D7842E1A8798D921AB42209A91B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/58639C4997EFECC162154C22A0044E1442CBA069.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Jan 2026 12:20:41 +0000
Certificate not after:    Fri 22 Jan 2027 12:25:41 +0000
Subordinate resources:    AS: 269659
                          IP: 45.191.24.0/22
                          IP: 2804:67ec::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4f:af:27:ff:4f:0d:78:42:e1:a8:79:8d:92:1a:b4:22:09:a9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 23 12:20:41 2026 GMT
            Not After : Jan 22 12:25:41 2027 GMT
        Subject: CN=58639C4997EFECC162154C22A0044E1442CBA069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:36:14:9f:ac:c0:17:24:07:14:36:c8:9e:
                    a0:63:94:38:8c:8c:58:89:3c:82:d5:30:3a:18:07:
                    8a:99:d3:e9:21:81:26:96:11:46:0e:12:a4:92:1f:
                    c2:59:1e:9a:1d:a7:7a:f2:ae:a1:f8:ee:d8:57:84:
                    e7:92:26:2b:50:6a:65:b2:c1:de:b6:3a:06:ad:2f:
                    d6:17:48:15:99:1d:b4:b2:1e:91:eb:ed:4b:45:bf:
                    d8:a6:3c:df:db:c2:05:6c:d7:1d:06:c2:df:c2:13:
                    1d:4b:9c:15:8a:a6:41:bc:dc:80:db:64:90:91:69:
                    29:2d:17:11:1f:9c:45:4c:6e:ef:df:4d:d5:65:e9:
                    0a:5f:7d:60:2b:1b:59:10:5a:49:ec:a6:73:70:23:
                    45:fa:a2:ec:df:9a:57:04:73:14:28:38:15:8b:65:
                    40:db:6c:69:1c:a6:5d:ec:05:72:4e:d8:e3:2c:e4:
                    21:d7:d9:fc:12:6d:d4:eb:50:3f:f4:69:0b:6d:6c:
                    7e:bc:5d:a6:7f:f5:af:3f:6d:22:d4:dd:2b:38:2f:
                    0a:31:bb:57:44:df:79:f6:8e:d9:75:4c:75:45:90:
                    8a:62:3b:a9:04:a1:ad:46:90:d8:e9:16:d3:e4:fb:
                    c1:4a:64:ec:d3:ed:9d:4a:b7:33:6c:b5:e1:b9:9e:
                    8b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:63:9C:49:97:EF:EC:C1:62:15:4C:22:A0:04:4E:14:42:CB:A0:69
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/58639C4997EFECC162154C22A0044E1442CBA069.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.24.0/22
                IPv6:
                  2804:67ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269659

    Signature Algorithm: sha256WithRSAEncryption
         41:7e:cb:f3:27:0a:ad:e7:50:d6:6d:5f:25:0f:02:2d:69:9c:
         c2:cd:ca:13:99:4a:da:5a:75:d5:5b:80:45:5c:a5:64:fd:e7:
         a9:66:ea:68:08:f9:27:8a:dd:a8:e0:d5:75:53:31:4a:a3:4f:
         37:fb:8e:77:ae:5c:25:d0:d1:12:0b:b5:4e:51:a5:84:c0:49:
         9a:a5:5a:8c:3f:5b:b4:68:53:58:a3:25:f2:43:99:0f:13:f9:
         3b:50:21:63:78:65:c3:5e:fb:95:60:1a:b1:31:96:0e:24:c8:
         72:1c:0f:18:c5:de:71:0c:fb:1d:78:6d:e0:ce:ed:2c:af:ce:
         53:ec:35:96:09:8d:be:2b:83:1b:fb:51:b0:66:f5:07:1a:b4:
         79:0b:9b:3c:37:4b:53:24:a7:88:c3:fd:12:c0:af:88:85:ba:
         bc:90:95:4c:7d:33:6b:50:3f:7e:e9:2e:ad:40:f8:18:16:20:
         ca:36:96:2a:2a:a9:83:2d:1b:6a:72:39:79:0b:32:ae:16:37:
         ea:82:22:12:72:8d:64:bc:92:01:cc:d5:5c:4c:57:97:98:14:
         dc:0b:e8:ac:2e:38:b4:80:50:1d:4d:ae:f4:c2:ca:6e:fb:7c:
         85:c0:d9:8a:c3:fc:55:7c:ad:a5:6a:aa:d7:56:ee:f1:de:79:
         9c:44:ab:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----