This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6B6F4383A1C4D663F536EE4346C3937F192D49C5.cer
File:                     6B6F4383A1C4D663F536EE4346C3937F192D49C5.cer (raw, json)
Hash identifier:          0WGl6VT2RlSGa8j8nIIxZhj10yKik1iPIdTEsDEISyo=
Subject key identifier:   6B:6F:43:83:A1:C4:D6:63:F5:36:EE:43:46:C3:93:7F:19:2D:49:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       26F41A1248FE207D8A9A8FACE0ED54EDD709BFC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/6B6F4383A1C4D663F536EE4346C3937F192D49C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Jan 2026 14:26:18 +0000
Certificate not after:    Fri 22 Jan 2027 14:31:18 +0000
Subordinate resources:    AS: 264544
                          IP: 138.0.112.0/22
                          IP: 2804:213c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f4:1a:12:48:fe:20:7d:8a:9a:8f:ac:e0:ed:54:ed:d7:09:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 23 14:26:18 2026 GMT
            Not After : Jan 22 14:31:18 2027 GMT
        Subject: CN=6B6F4383A1C4D663F536EE4346C3937F192D49C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:f3:79:87:69:83:9a:49:33:a7:62:2c:76:
                    c9:95:44:e0:b8:b5:9b:43:e3:19:21:f5:e1:1a:ce:
                    0b:f9:21:6c:8c:6a:bd:17:b5:01:32:bd:a9:41:9c:
                    74:b8:0b:c1:c1:f0:a8:5c:75:18:ea:b0:c4:94:33:
                    54:34:1f:a0:c2:89:eb:c2:b7:0f:51:cc:d9:6b:5c:
                    97:80:f3:b0:1a:bc:78:ae:6a:06:ac:8d:b8:7c:c8:
                    8f:d8:7b:96:90:00:fc:19:02:ff:ef:7b:9d:b1:d0:
                    04:ed:8b:72:1d:7e:7f:f9:29:e6:a6:1b:25:2d:7b:
                    c3:a3:0c:b1:74:a6:c2:ce:7c:6e:9e:8a:b2:da:fb:
                    89:25:02:33:34:41:2b:f3:de:a6:a2:66:ba:d1:a5:
                    c6:20:1a:2a:47:20:35:c1:b3:36:d8:3e:00:7d:71:
                    60:a5:1f:9a:25:ab:47:68:01:23:73:17:29:e2:30:
                    f1:c6:30:eb:dd:c9:88:ca:54:30:ab:ce:33:37:10:
                    c3:1a:90:59:fc:94:71:04:3d:9f:e6:7a:af:3d:18:
                    21:b0:c9:95:3d:70:33:a7:db:17:0f:08:45:bc:39:
                    17:71:df:cc:ea:98:08:a0:25:c5:54:38:86:df:78:
                    dc:1a:56:73:fd:af:c3:92:2e:e7:f3:46:9d:0f:7b:
                    88:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:6F:43:83:A1:C4:D6:63:F5:36:EE:43:46:C3:93:7F:19:2D:49:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/6B6F4383A1C4D663F536EE4346C3937F192D49C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.112.0/22
                IPv6:
                  2804:213c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264544

    Signature Algorithm: sha256WithRSAEncryption
         1b:b4:e5:fd:8a:4f:02:b5:84:9b:8d:6e:7e:4d:ba:5a:e0:cc:
         4c:76:7b:c6:b4:2f:53:c4:2e:22:86:45:f7:3c:64:c1:69:f8:
         11:b3:50:6e:b0:48:b6:d7:89:b9:26:6e:43:2c:78:d4:47:e5:
         b0:95:53:7a:2a:71:db:30:28:c7:d6:a7:52:60:bc:e2:0f:6b:
         00:f2:e2:6b:c3:28:61:ff:3a:10:6a:30:6e:56:a8:d0:3c:52:
         ba:ef:ec:e0:c2:56:ec:81:08:67:59:ee:2e:31:10:7b:19:6c:
         6a:c2:0b:3d:44:33:13:d0:f1:46:ff:c7:d6:e8:f1:86:74:8b:
         35:12:e4:97:75:79:12:6c:49:74:38:43:b1:48:98:21:e1:67:
         78:9f:dd:3b:4e:35:2e:72:cd:64:dd:30:b1:fe:99:d7:5e:1b:
         bc:dc:93:a6:29:63:10:6f:bc:15:c3:b7:ed:2a:04:d6:8f:b9:
         a7:08:48:21:ba:02:ad:d1:8e:aa:cc:90:f3:66:dd:b8:53:90:
         32:6c:59:e7:af:ce:35:81:43:b0:4f:ab:9e:f2:e2:e4:91:2a:
         ff:47:a4:13:ec:3d:93:3b:4b:a1:7b:ad:fb:68:33:df:8c:42:
         18:3d:a2:6e:60:28:f5:01:a7:1d:57:d7:53:10:aa:27:1c:5b:
         8d:51:2f:94
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUJvQaEkj+IH2Kmo+s4O1U7dcJv8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMjMxNDI2MThaFw0yNzAxMjIxNDMxMThaMDMxMTAvBgNV
BAMTKDZCNkY0MzgzQTFDNEQ2NjNGNTM2RUU0MzQ2QzM5MzdGMTkyRDQ5QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxEfN5h2mDmkkzp2IsdsmVROC4
tZtD4xkh9eEazgv5IWyMar0XtQEyvalBnHS4C8HB8KhcdRjqsMSUM1Q0H6DCievC
tw9RzNlrXJeA87AavHiuagasjbh8yI/Ye5aQAPwZAv/ve52x0ATti3Idfn/5Keam
GyUte8OjDLF0psLOfG6eirLa+4klAjM0QSvz3qaiZrrRpcYgGipHIDXBszbYPgB9
cWClH5olq0doASNzFyniMPHGMOvdyYjKVDCrzjM3EMMakFn8lHEEPZ/meq89GCGw
yZU9cDOn2xcPCEW8ORdx38zqmAigJcVUOIbfeNwaVnP9r8OSLufzRp0Pe4gnAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRrb0ODocTWY/U2
7kNGw5N/GS1JxTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2Fx
Z1lMQjdLbmcyM1ZWMXJ1OXRKVWZSNzdQdnZuTE1CckM2d1hpVXpYOWIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nh
cWdZTEI3S25nMjNWVjFydTl0SlVmUjc3UHZ2bkxNQnJDNndYaVV6WDliLzAvNkI2
RjQzODNBMUM0RDY2M0Y1MzZFRTQzNDZDMzkzN0YxOTJENDlDNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCigBwMA0EAgACMAcDBQAoBCE8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQJYDANBgkqhkiG9w0BAQsFAAOCAQEAG7Tl/YpPArWEm41u
fk26WuDMTHZ7xrQvU8QuIoZF9zxkwWn4EbNQbrBItteJuSZuQyx41EflsJVTeipx
2zAox9anUmC84g9rAPLia8MoYf86EGowblao0DxSuu/s4MJW7IEIZ1nuLjEQexls
asILPUQzE9DxRv/H1ujxhnSLNRLkl3V5EmxJdDhDsUiYIeFneJ/dO041LnLNZN0w
sf6Z114bvNyTpiljEG+8FcO37SoE1o+5pwhIIboCrdGOqsyQ82bduFOQMmxZ56/O
NYFDsE+rnvLi5JEq/0ekE+w9kztLoXut+2gz34xCGD2ibmAo9QGnHVfXUxCqJxxb
jVEvlA==
-----END CERTIFICATE-----