This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6178852478628997DE5CA084FE91AA8EC0E630B0.cer
File:                     6178852478628997DE5CA084FE91AA8EC0E630B0.cer (raw, json)
Hash identifier:          b8WO16wH+n2pTTsDtpLKs370rXWRmKgQCCgQF0lqDa8=
Subject key identifier:   61:78:85:24:78:62:89:97:DE:5C:A0:84:FE:91:AA:8E:C0:E6:30:B0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7CFCCCC765EF54BA6D1D8D042528884BEC339045
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/6178852478628997DE5CA084FE91AA8EC0E630B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Jan 2026 16:09:17 +0000
Certificate not after:    Sat 23 Jan 2027 16:14:17 +0000
Subordinate resources:    AS: 269202
                          IP: 45.181.212.0/22
                          IP: 2804:60f4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fc:cc:c7:65:ef:54:ba:6d:1d:8d:04:25:28:88:4b:ec:33:90:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 24 16:09:17 2026 GMT
            Not After : Jan 23 16:14:17 2027 GMT
        Subject: CN=6178852478628997DE5CA084FE91AA8EC0E630B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7b:3a:d5:18:9a:72:c4:7f:18:7b:6a:0b:17:
                    8e:60:10:ad:b2:3d:d5:5a:0e:59:ef:ca:6e:3a:3b:
                    99:7f:f2:31:f1:ae:8e:c2:16:22:52:29:dc:e6:5f:
                    f2:10:a5:f3:b7:20:79:5c:de:a4:7e:bc:d7:30:a8:
                    0f:20:35:f9:e2:48:98:c0:c1:91:21:f3:1d:5e:1b:
                    b2:c0:7f:7d:69:0f:36:25:d0:03:2c:20:f3:52:eb:
                    98:8e:f3:2b:a1:f7:23:58:4a:ff:22:31:ef:a6:a4:
                    b5:11:ed:15:8b:c7:e1:27:ef:a0:fa:09:12:36:32:
                    f9:ac:ee:23:a1:97:a1:7e:45:75:61:21:28:dc:5b:
                    85:cc:78:50:28:b2:23:2b:8b:d2:c8:95:78:d1:e4:
                    76:11:d1:e7:08:0b:4f:f2:88:02:08:c6:da:54:eb:
                    87:2b:5d:61:f3:58:29:26:4f:54:0b:ec:59:57:0d:
                    65:41:f6:0c:f2:4d:31:65:79:87:24:f6:43:b9:07:
                    34:0b:e5:78:09:93:ab:f1:60:db:38:9a:ef:07:40:
                    1d:9d:da:34:00:7a:84:13:3a:73:40:f4:02:0c:76:
                    91:ac:1e:fa:37:c6:2c:48:52:65:a1:52:24:a3:a5:
                    1e:6a:e4:37:5f:0d:a1:b4:1b:2b:55:4d:d0:26:45:
                    53:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:78:85:24:78:62:89:97:DE:5C:A0:84:FE:91:AA:8E:C0:E6:30:B0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/6178852478628997DE5CA084FE91AA8EC0E630B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.212.0/22
                IPv6:
                  2804:60f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269202

    Signature Algorithm: sha256WithRSAEncryption
         87:12:df:bb:e2:25:56:e6:4e:fe:b3:a9:7a:b4:51:2b:83:7d:
         41:dd:8c:37:9b:73:f3:84:c0:22:c3:be:6e:47:26:76:df:b4:
         e3:99:70:5d:97:e8:1c:d3:c2:fc:23:59:c5:10:e0:07:1b:c9:
         e5:c5:22:d2:84:13:a6:1e:e8:63:00:0c:46:f5:b4:0c:c3:cf:
         ef:09:82:a5:63:fd:b4:46:24:c6:35:ad:cc:ee:10:c5:b3:4e:
         6f:1f:38:de:18:e8:b1:d9:45:3a:fa:97:d0:74:c9:6e:f8:4d:
         41:39:09:4b:a0:32:d9:34:b6:63:08:60:0f:67:b2:b9:a6:0d:
         f7:f2:6b:47:64:81:d7:93:16:1b:a8:fd:f2:a8:cd:71:9e:fd:
         b2:12:d0:34:06:d6:5f:30:e4:be:a8:93:d0:56:96:3b:34:67:
         50:ec:c3:9c:45:66:05:3c:d9:72:56:95:65:4b:24:e5:12:36:
         57:5d:1d:60:36:91:7b:d8:df:eb:56:89:ed:d2:a0:bf:4e:10:
         76:bf:ab:f9:ea:b3:50:8a:fe:87:6a:c9:2d:bc:02:43:4a:36:
         73:26:54:83:fa:fe:33:6c:df:6f:fc:cd:87:25:5e:3b:14:77:
         f9:76:ec:39:8a:6a:e4:91:4b:42:27:ca:1a:b1:48:cd:82:50:
         0e:9b:bb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:18:04 2026 by rpki-client