This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/58BE498747EA22E6A42A4F8E3C0475421244264D.cer
File:                     58BE498747EA22E6A42A4F8E3C0475421244264D.cer (raw, json)
Hash identifier:          FQspmY5YcYnS4CJIJPDCcJo5Ylaxm9TFQK/SoEpggxs=
Subject key identifier:   58:BE:49:87:47:EA:22:E6:A4:2A:4F:8E:3C:04:75:42:12:44:26:4D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       16ECF57C57B258571EC310B825CD04B7018A8172
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/58BE498747EA22E6A42A4F8E3C0475421244264D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Jan 2026 12:56:32 +0000
Certificate not after:    Thu 14 Jan 2027 13:01:32 +0000
Subordinate resources:    AS: 263039
                          IP: 177.23.72.0/21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ec:f5:7c:57:b2:58:57:1e:c3:10:b8:25:cd:04:b7:01:8a:81:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 15 12:56:32 2026 GMT
            Not After : Jan 14 13:01:32 2027 GMT
        Subject: CN=58BE498747EA22E6A42A4F8E3C0475421244264D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:94:e7:ca:cb:93:28:72:48:68:24:67:0b:01:
                    40:f0:60:02:71:3d:89:8e:d3:8a:4d:46:23:fa:05:
                    af:36:79:89:90:55:e9:51:f9:e7:a5:38:b6:7f:ae:
                    29:e7:96:ba:fc:61:29:27:a6:0e:7c:b9:b2:f1:a1:
                    c7:b9:28:f5:54:a7:4f:3e:7a:6a:47:7d:e0:4a:84:
                    4e:07:f8:98:9c:40:99:7f:bd:b0:f7:46:07:dd:ae:
                    4c:90:89:2e:6d:55:3a:a7:b9:13:ed:1f:b2:47:d7:
                    80:73:89:ac:1a:68:ac:b4:09:00:06:aa:2f:b7:ae:
                    55:22:6b:7b:73:d8:71:44:bf:7c:41:64:13:49:dc:
                    65:33:09:69:30:7e:8a:42:2d:78:62:35:63:3c:f9:
                    7b:77:54:b7:a0:86:84:54:48:5b:ed:f9:2b:2b:39:
                    89:37:1b:50:2b:18:5b:85:26:a6:f0:47:ba:30:7f:
                    a9:4b:f5:5c:33:cd:f9:e2:75:83:08:8c:cb:9e:fa:
                    74:1e:a4:c4:9d:d4:db:72:ab:a5:dd:6a:6e:73:5d:
                    cd:a9:7b:65:3a:1b:f1:21:ed:38:1d:68:59:e1:7f:
                    2b:76:ac:e5:47:ef:e0:97:0b:a5:a1:55:fd:d0:74:
                    0a:1c:c9:55:8b:8d:95:f5:ca:4b:e8:6b:c2:a4:9c:
                    c9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:BE:49:87:47:EA:22:E6:A4:2A:4F:8E:3C:04:75:42:12:44:26:4D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/58BE498747EA22E6A42A4F8E3C0475421244264D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.72.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263039

    Signature Algorithm: sha256WithRSAEncryption
         04:29:42:8b:78:cb:bc:98:58:5f:3a:30:3a:11:7d:82:bc:de:
         a2:49:9e:e1:d3:43:36:d3:62:0b:bd:2f:9b:47:a4:ea:05:88:
         d0:ca:93:8b:6f:92:86:f6:65:66:b5:fd:f9:8c:7b:33:50:8b:
         75:0b:1f:90:59:04:6b:11:c4:58:ba:fd:50:1d:08:82:85:5f:
         67:40:9f:7a:dd:56:fb:c7:24:b9:6e:c8:b5:0e:93:44:98:6c:
         03:6f:6e:99:93:c9:9a:a3:0a:01:6e:07:aa:b8:bb:3c:18:4c:
         af:57:6c:86:d5:ae:22:dc:a2:eb:e6:81:9a:45:23:ac:f3:99:
         77:b6:8e:19:96:14:be:27:0a:91:0f:80:51:aa:a9:77:a4:2e:
         2e:65:8c:7e:78:bd:d8:f0:07:b2:26:0b:48:f8:1b:ab:d6:d6:
         a1:67:63:b6:58:5a:44:7a:76:5c:28:13:b2:ba:09:c1:56:ad:
         0a:1c:f2:d3:62:ce:a5:c5:41:41:90:f1:88:d4:b1:31:2d:d6:
         24:35:bc:83:e9:bf:20:21:3c:b8:2b:0c:ac:35:f1:66:7d:d3:
         5c:e7:7e:92:90:ca:05:c1:bf:6c:8f:09:96:37:4f:d6:d1:06:
         d0:ce:12:81:e6:6f:2b:72:98:e3:6c:f9:d0:62:48:37:82:b3:
         fe:07:29:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----