This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6618D0FACC0E93EF3CC1C3C3CFE9B2AA513D5244.cer
File:                     6618D0FACC0E93EF3CC1C3C3CFE9B2AA513D5244.cer (raw, json)
Hash identifier:          teUPygcEXzFZUOn9oeNQDyge386Uk5WjfV8GdnWqbJI=
Subject key identifier:   66:18:D0:FA:CC:0E:93:EF:3C:C1:C3:C3:CF:E9:B2:AA:51:3D:52:44
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       197C85528EED05404334F250BF3A06FECE413BE8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/6618D0FACC0E93EF3CC1C3C3CFE9B2AA513D5244.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Jan 2026 01:35:23 +0000
Certificate not after:    Fri 15 Jan 2027 01:40:23 +0000
Subordinate resources:    AS: 274621
                          IP: 186.195.165.0/24
                          IP: 2804:9124::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7c:85:52:8e:ed:05:40:43:34:f2:50:bf:3a:06:fe:ce:41:3b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 16 01:35:23 2026 GMT
            Not After : Jan 15 01:40:23 2027 GMT
        Subject: CN=6618D0FACC0E93EF3CC1C3C3CFE9B2AA513D5244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:8e:83:0b:bb:e2:54:09:3e:49:d5:a6:6e:
                    e8:ae:c4:32:ee:22:ac:d2:61:70:81:81:df:90:37:
                    df:2f:f8:f6:a5:6b:2f:0a:95:ad:63:12:2a:70:ad:
                    21:ca:39:99:eb:21:97:ec:4d:f3:9c:9e:bd:2e:84:
                    79:50:77:65:b9:51:fd:41:e8:d3:df:1f:76:f0:ff:
                    c4:b4:73:18:fe:ee:9a:4d:40:93:a0:f8:db:50:3c:
                    5a:ce:58:f2:6c:04:c0:35:67:00:df:28:14:05:b2:
                    05:8f:16:31:92:c8:83:ef:47:a9:d8:41:00:a0:28:
                    5c:6b:ed:f4:f7:78:87:48:d4:42:31:b2:6c:c4:0a:
                    19:4e:88:04:d7:a1:74:91:3a:54:5c:5c:30:bd:5a:
                    04:48:0d:ab:e6:53:e7:ec:12:44:72:8c:59:f9:52:
                    c1:38:82:14:87:6a:b2:1d:52:dc:58:3e:ec:17:64:
                    43:ea:d6:3b:51:a4:1c:87:a4:b3:d6:39:27:82:13:
                    ba:36:af:c4:fb:88:4c:7b:b8:f4:f7:38:6f:66:ec:
                    91:65:57:ec:ed:bf:9e:70:53:17:91:fc:56:f3:52:
                    a5:f1:86:46:71:67:4b:f9:96:b5:6f:76:d2:7a:eb:
                    73:91:3c:4d:ae:0a:90:b9:e4:a6:ee:72:c7:42:06:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:18:D0:FA:CC:0E:93:EF:3C:C1:C3:C3:CF:E9:B2:AA:51:3D:52:44
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/6618D0FACC0E93EF3CC1C3C3CFE9B2AA513D5244.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.165.0/24
                IPv6:
                  2804:9124::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274621

    Signature Algorithm: sha256WithRSAEncryption
         b0:08:07:f4:99:13:eb:a3:f3:c6:f2:ae:9a:66:bb:7b:c7:df:
         24:bf:57:ae:6a:0e:d1:da:ea:64:7a:dc:ef:5b:f7:a6:56:f6:
         cd:70:09:1b:1d:3f:8d:43:85:8d:fb:b3:cf:86:b2:ca:d0:d8:
         c5:6a:db:06:53:50:af:9a:56:1d:ef:43:31:2a:4b:60:d8:c2:
         cb:29:e8:4a:c0:4c:a2:33:1b:9b:1b:a2:69:9d:77:ed:27:93:
         b0:85:0c:8f:28:75:28:96:cc:c6:bf:8e:35:7f:f0:59:fb:49:
         20:d6:87:b3:e0:87:cc:21:da:b9:92:69:42:9a:e5:78:37:8f:
         ac:4b:20:63:fe:5c:ce:2c:82:c2:54:41:b3:21:ea:80:86:eb:
         f1:1e:69:38:99:20:25:21:79:21:cd:d6:b0:f5:d1:0f:4f:c4:
         66:e3:c8:be:f7:14:82:ff:85:6d:7f:36:f6:d8:ce:e9:42:8a:
         b8:7f:5e:22:91:5a:b8:64:7d:77:68:97:77:03:0b:b5:72:dd:
         2e:0b:12:d4:45:60:42:25:a3:8f:62:1d:d6:dc:87:84:09:8b:
         0c:af:7d:ab:b7:38:02:77:63:50:b3:06:b1:71:e5:ae:c0:8f:
         de:85:d4:2f:cf:1e:a4:df:eb:a8:3b:10:e3:bc:df:c0:2d:47:
         4e:f6:81:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----