This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.cer
File:                     603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.cer (raw, json)
Hash identifier:          eNbWNN/XPc2RTLqTnPg5jreGankTTk5Oa6a0p/HKmvU=
Subject key identifier:   60:3E:D9:BF:51:F8:9C:5F:08:53:E2:A3:C5:EA:8B:B0:92:E8:E2:99
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       155FDEB39A19277F48E3A1C8F9A24CFDDF72B5B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Jan 2026 18:28:05 +0000
Certificate not after:    Fri 22 Jan 2027 18:33:05 +0000
Subordinate resources:    AS: 270608
                          IP: 186.219.232.0/22
                          IP: 2804:6e9c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5f:de:b3:9a:19:27:7f:48:e3:a1:c8:f9:a2:4c:fd:df:72:b5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 23 18:28:05 2026 GMT
            Not After : Jan 22 18:33:05 2027 GMT
        Subject: CN=603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:04:10:2e:c6:c6:b6:b8:87:b9:85:e6:69:07:
                    a2:a5:fe:67:25:de:de:1f:05:dc:69:ba:80:8d:59:
                    70:5c:4b:b7:3f:5c:68:fe:50:b6:12:6c:df:24:71:
                    4b:76:ba:77:04:16:38:01:b6:4d:aa:30:88:74:9d:
                    dc:a6:ae:16:5c:d5:9f:83:de:9a:74:3d:05:c5:dc:
                    0c:c8:f2:26:32:bc:b5:04:e2:f3:a1:e8:ba:62:f7:
                    31:f1:31:63:4b:1c:20:47:10:16:fa:4d:0e:61:b6:
                    e8:77:c0:f8:fa:08:61:8a:2a:32:c9:fe:c1:02:12:
                    52:47:d7:81:15:39:3f:59:3c:96:58:82:26:4a:f0:
                    d8:4e:8a:fb:75:34:e6:e0:51:cc:20:00:fc:30:4f:
                    56:17:bf:fc:6d:49:2b:1d:26:f2:ff:4e:25:6b:43:
                    1d:98:b0:84:a1:70:3a:53:fe:f5:18:0d:55:14:6e:
                    88:ab:67:6b:04:cd:14:74:0b:9d:ad:fe:65:0f:bf:
                    3f:55:c4:80:c1:9f:9b:30:a8:4d:ac:24:1e:77:cf:
                    20:23:4a:35:d5:9d:4e:df:46:94:6d:3a:e4:77:f2:
                    b6:6f:0c:1c:6c:f4:75:b7:d4:da:2d:29:2b:b3:c1:
                    11:67:f7:e4:26:63:62:71:41:fc:43:5d:f9:01:f6:
                    c5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:3E:D9:BF:51:F8:9C:5F:08:53:E2:A3:C5:EA:8B:B0:92:E8:E2:99
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.232.0/22
                IPv6:
                  2804:6e9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270608

    Signature Algorithm: sha256WithRSAEncryption
         9c:93:10:27:7b:f6:17:9c:c9:3e:b2:97:f5:62:6b:0b:5a:5f:
         22:c9:ef:0e:e2:6d:f9:52:de:ff:ba:ec:5c:b2:70:a0:3b:91:
         c8:71:45:25:0b:b5:96:ae:8d:46:d5:cc:2e:8c:0f:b1:a3:22:
         62:64:81:9d:0e:62:3f:e0:b3:02:5d:11:c5:7d:56:d2:c5:b9:
         0c:7c:c9:ed:c1:05:69:7a:23:fb:d9:96:1b:65:57:ab:60:86:
         4f:a3:33:54:06:b0:47:9a:e6:e5:74:75:c5:57:fa:30:04:cf:
         6e:8f:8d:86:38:a4:fb:80:e7:6f:7c:90:6b:ec:fa:7f:be:45:
         b2:49:27:a5:5e:31:58:07:f3:f7:00:e0:a5:68:54:98:7b:cf:
         91:7d:92:2a:dc:3b:a6:01:24:8b:9a:37:d6:b4:07:cc:0a:be:
         c5:94:fe:42:3d:19:ed:7e:be:55:86:8e:b4:27:c1:97:55:33:
         40:52:07:00:d0:36:b1:41:26:bf:61:84:c0:19:b6:0d:aa:b0:
         dc:ec:52:e9:a4:51:62:29:e6:7e:a0:a1:71:ca:64:89:3d:a4:
         88:24:78:e9:b1:c9:97:e3:76:91:f4:9d:0a:20:3c:b8:f1:94:
         36:ba:e5:3a:91:d0:42:08:48:83:24:75:66:d4:a5:6b:d0:df:
         65:20:2f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----