This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer
File:                     5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer (raw, json)
Hash identifier:          +Yen/oNMFIYEHmKVqul6fbMzqeYZKayCZfr1SseMlwo=
Subject key identifier:   5F:3F:3F:6E:06:76:8D:E0:B6:ED:B4:7D:20:8D:21:4B:AE:32:2A:87
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       39D6F466845F8262CF258669A79B8A0D2313386E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 18:05:26 +0000
Certificate not after:    Mon 18 Jan 2027 18:10:26 +0000
Subordinate resources:    AS: 265254
                          IP: 168.0.164.0/22
                          IP: 2804:2cf8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d6:f4:66:84:5f:82:62:cf:25:86:69:a7:9b:8a:0d:23:13:38:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 19 18:05:26 2026 GMT
            Not After : Jan 18 18:10:26 2027 GMT
        Subject: CN=5F3F3F6E06768DE0B6EDB47D208D214BAE322A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:95:f9:ef:c4:d4:32:cd:24:ec:8e:89:ef:b2:
                    4e:40:a3:61:63:bc:f6:7d:41:74:f9:87:01:cf:48:
                    11:e9:a5:a5:2f:a7:20:b3:ec:de:58:72:b7:3f:7f:
                    e7:48:2f:56:76:4d:60:f6:76:50:0f:d9:38:ae:55:
                    db:12:c6:34:88:d5:41:f2:6c:61:b3:79:bd:d6:28:
                    ee:82:2b:30:26:ab:72:e1:4c:6a:f8:50:09:67:26:
                    69:2f:20:24:8b:5e:9c:b9:c4:83:4b:8e:8f:7a:f4:
                    d3:19:e6:59:b2:b6:a8:ec:41:1c:a8:c2:8b:dd:1f:
                    f2:8c:29:a4:07:4b:84:44:87:8e:62:be:63:d3:2b:
                    be:c2:6b:42:cf:89:73:f4:60:2a:93:c9:d6:69:d7:
                    91:de:4d:d7:36:d2:96:47:7a:6c:04:cc:f7:01:2c:
                    60:f0:90:3b:4e:99:c0:cc:d8:e3:6a:c4:d0:5b:44:
                    2b:0f:d7:6c:5e:ef:12:fa:c0:fc:08:99:3e:6f:31:
                    2f:24:6f:58:4c:a5:07:f7:1c:2d:91:29:3f:9f:d0:
                    2b:4e:ea:ab:63:6a:e8:b8:21:0a:5e:33:03:05:cd:
                    fa:9e:bc:77:4b:58:55:ba:71:a7:35:7f:08:05:88:
                    15:60:6c:02:66:e2:33:c0:c8:58:67:7e:9a:dc:18:
                    06:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:3F:3F:6E:06:76:8D:E0:B6:ED:B4:7D:20:8D:21:4B:AE:32:2A:87
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.164.0/22
                IPv6:
                  2804:2cf8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265254

    Signature Algorithm: sha256WithRSAEncryption
         5f:4f:99:fc:e7:37:75:4c:a2:13:ba:9f:0e:2c:5d:53:da:3f:
         59:b6:3d:cb:cd:24:9d:07:b4:6a:0a:ce:d2:08:15:64:c4:60:
         15:c8:00:f7:8b:bd:2e:38:e6:6a:58:67:81:d0:b8:d1:28:db:
         a2:5d:a5:b5:41:19:1c:de:27:ea:9b:44:25:a5:31:ad:30:fb:
         13:e6:aa:78:55:30:70:f5:a0:59:87:b3:da:91:d6:a9:77:93:
         07:d8:77:89:7d:a7:61:fc:80:ff:31:52:a9:67:2c:3b:f1:c3:
         d5:f7:03:26:88:42:d9:fc:07:bb:a5:85:e3:45:57:28:61:62:
         ca:26:12:f0:a6:67:a9:29:f1:46:e5:23:6e:26:cb:07:fc:9c:
         50:ec:79:33:c9:74:f1:b2:b6:6c:49:0b:02:b0:10:14:64:99:
         b0:25:46:1e:20:bd:93:75:23:74:c4:89:89:57:e1:1a:08:36:
         a1:08:86:f3:65:92:96:f4:f9:d0:1e:ad:28:4c:b7:7a:76:47:
         a4:6a:d4:78:01:22:8a:f9:a1:d6:9b:ff:e5:01:35:66:61:f6:
         f6:91:90:6e:37:28:37:35:12:0f:c5:b9:50:87:09:a7:39:01:
         83:fd:56:47:e6:fa:c3:3f:05:cd:cf:d3:bf:e3:01:e5:96:2b:
         e4:25:54:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----