This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6CBEEC578E19206D32A7C2D4629174684FD98B23.cer
File:                     6CBEEC578E19206D32A7C2D4629174684FD98B23.cer (raw, json)
Hash identifier:          t4cEqRb5IT9dlV6XBVGwj0VlAFhornd7NGprJ9CFcyo=
Subject key identifier:   6C:BE:EC:57:8E:19:20:6D:32:A7:C2:D4:62:91:74:68:4F:D9:8B:23
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       55110D9AFC84E0339DDC8004713D37BA7E7C6AA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/6CBEEC578E19206D32A7C2D4629174684FD98B23.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Jan 2026 21:05:42 +0000
Certificate not after:    Wed 20 Jan 2027 21:10:42 +0000
Subordinate resources:    AS: 266204
                          IP: 190.123.196.0/22
                          IP: 2804:3c54::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:11:0d:9a:fc:84:e0:33:9d:dc:80:04:71:3d:37:ba:7e:7c:6a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 21:05:42 2026 GMT
            Not After : Jan 20 21:10:42 2027 GMT
        Subject: CN=6CBEEC578E19206D32A7C2D4629174684FD98B23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:54:94:d4:ce:b9:7c:79:cc:d5:4a:1d:16:34:
                    76:dd:d1:e3:c4:22:4e:df:ad:80:cb:0d:8d:ef:a4:
                    49:75:3d:c1:71:b8:ae:4f:39:8d:ed:cc:da:99:4d:
                    f8:56:8c:5c:f1:d4:3c:a4:8b:e9:70:15:0e:92:f6:
                    ba:1f:11:4d:61:e6:2f:64:09:70:85:cf:36:f9:41:
                    56:a9:f1:27:c1:c8:cb:45:c4:ef:1f:e9:36:cf:65:
                    7b:5b:bf:9f:1b:ed:a5:46:d0:5c:c5:d9:5b:9d:ed:
                    1a:5e:0c:9f:81:95:f4:0a:cd:a9:82:f1:20:aa:87:
                    72:9d:ec:66:4f:db:98:ca:e2:8a:71:bc:70:ac:95:
                    2d:f3:bf:97:21:4c:7e:56:ee:e5:b7:dc:58:8f:5a:
                    45:24:a4:3a:b0:29:1c:7d:57:7b:db:64:12:1e:4c:
                    b1:19:95:f6:c5:ad:90:b3:0e:30:2f:41:b8:49:d1:
                    61:23:79:d4:37:b4:78:ba:09:db:b9:f3:39:de:d2:
                    a5:b4:fa:fe:ba:6a:0a:4a:b4:31:6b:ed:b3:62:86:
                    9a:d9:1b:c1:1c:0c:90:5f:37:bd:22:ff:d6:87:97:
                    fd:23:41:ee:93:ad:0e:d1:39:a5:18:ab:ed:5c:c1:
                    ed:89:74:da:bf:05:e3:d7:4b:13:0a:eb:d8:5b:d4:
                    2d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:BE:EC:57:8E:19:20:6D:32:A7:C2:D4:62:91:74:68:4F:D9:8B:23
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/6CBEEC578E19206D32A7C2D4629174684FD98B23.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.196.0/22
                IPv6:
                  2804:3c54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266204

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:5e:6a:94:5a:5d:c4:5d:57:a6:94:07:c3:53:aa:7b:2c:
         0d:f2:25:92:01:49:39:74:96:b8:4c:b8:1f:56:04:e4:9f:d7:
         30:9a:9c:95:07:2f:df:ff:56:00:f5:37:fc:82:ef:14:1f:42:
         d4:07:de:2b:23:ad:9f:dd:b0:86:de:f7:a4:c0:c8:9f:55:14:
         20:f4:20:77:e5:2d:bd:a6:e5:02:eb:30:d7:53:ff:99:5c:d3:
         68:16:19:a5:e0:05:e0:bf:f0:8c:b7:1c:c2:d8:5e:dd:fc:ed:
         f4:aa:0d:32:91:d4:fe:7f:1b:b5:d5:83:23:08:9f:90:17:72:
         a9:d3:26:4c:8e:dc:bc:b8:2f:e4:49:a9:b1:3a:d7:25:94:e6:
         85:9e:93:d1:7e:0a:2a:03:ac:3e:93:20:22:40:9f:c6:1f:7a:
         ea:75:49:2a:fa:da:a7:46:b5:30:62:b0:f1:e4:6a:da:46:16:
         a1:e7:9e:ea:95:0d:32:9d:71:7d:6d:50:25:69:a6:e5:d2:3f:
         d6:d0:50:40:b0:20:e6:2f:58:bc:d9:01:37:5d:22:aa:12:9b:
         58:66:3c:df:7f:ec:ee:66:a5:98:16:86:31:74:d2:1e:8c:b6:
         a1:88:d5:30:1a:15:69:67:a4:2d:91:2a:82:20:b9:08:09:08:
         ac:e5:53:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----