This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
File:                     73D43FEADED592156D29C67CCC13A030541CD25A.cer (raw, json)
Hash identifier:          JJfxHP2ZB3e4+NP0+uv3aWgUwOnd1h2un3KSD8MG0QA=
Subject key identifier:   73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11B24111E2D547867D917CBEB739572B0B321806
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 25 Jan 2026 04:29:27 +0000
Certificate not after:    Sun 24 Jan 2027 04:34:27 +0000
Subordinate resources:    AS: 52564
                          IP: 131.161.36.0/22
                          IP: 138.219.144.0/22
                          IP: 177.85.156.0/22
                          IP: 177.91.236.0/22
                          IP: 187.62.72.0/22
                          IP: 2804:1eb8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b2:41:11:e2:d5:47:86:7d:91:7c:be:b7:39:57:2b:0b:32:18:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 25 04:29:27 2026 GMT
            Not After : Jan 24 04:34:27 2027 GMT
        Subject: CN=73D43FEADED592156D29C67CCC13A030541CD25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:64:85:aa:81:29:26:19:4c:78:89:bb:dc:01:
                    9b:0e:27:37:5f:34:51:3c:6f:b2:5a:81:50:d1:2e:
                    d6:14:44:a9:f6:ef:d4:5f:f2:f7:98:27:c4:2f:28:
                    e2:55:a1:18:a8:b8:ab:4d:bd:f8:9f:b8:ed:f9:0d:
                    ca:23:51:63:7b:cd:6b:ad:23:a4:6b:1f:cc:ca:f2:
                    b0:45:ce:a0:03:d6:ef:c0:5c:ef:ec:db:7d:29:80:
                    66:ff:c3:22:14:80:16:72:66:2c:18:9d:ff:cc:19:
                    1c:3d:89:d8:a0:d6:1e:22:c8:40:d0:41:a7:71:2d:
                    63:1d:13:a2:14:06:d9:56:bd:51:b7:a9:8f:18:e0:
                    c2:59:ae:3c:34:81:89:dc:51:e8:fb:1d:1a:d4:ad:
                    3b:6c:f1:bd:89:46:df:1b:d5:18:5e:fc:75:41:39:
                    cd:79:06:92:3f:87:67:5c:33:52:72:91:76:d5:5a:
                    8e:4e:cc:71:a2:f8:25:81:85:57:bf:ad:7d:01:14:
                    03:de:e5:49:db:12:cd:7d:3f:59:0e:68:55:95:e1:
                    cc:7e:be:fd:08:42:5d:b7:86:19:e4:67:c5:67:e3:
                    3f:50:4f:6e:44:7a:a1:4f:85:90:ec:11:0a:3b:f0:
                    0f:cd:50:0a:3f:fd:35:a6:08:ef:55:66:1a:4f:1e:
                    45:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.36.0/22
                  138.219.144.0/22
                  177.85.156.0/22
                  177.91.236.0/22
                  187.62.72.0/22
                IPv6:
                  2804:1eb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52564

    Signature Algorithm: sha256WithRSAEncryption
         80:dd:4b:4d:af:30:f9:9e:b8:92:e1:0d:da:82:83:c3:cb:dd:
         53:02:4c:fa:83:86:9d:9a:87:21:27:d7:e1:29:3a:76:83:42:
         79:86:37:16:23:7e:ac:ae:63:76:da:54:e6:ab:c6:cc:fc:98:
         32:32:cc:a6:4e:5b:78:05:1c:99:e3:2d:cb:41:44:98:9e:34:
         33:84:8b:de:65:08:43:e2:82:70:e6:c6:11:ce:d3:f4:74:cb:
         ce:a0:c6:9b:5a:4a:4c:b7:10:d2:fd:6e:df:de:88:17:94:d3:
         70:69:d0:20:8d:b5:9c:4e:a0:e4:24:d3:10:26:d9:a0:26:05:
         58:6e:89:85:c8:9d:62:d8:e1:36:20:6a:3f:b5:23:3d:d5:68:
         4d:62:00:16:e5:fb:a9:4c:38:8d:ab:db:d5:0c:b4:1f:05:4c:
         0c:d7:f3:eb:21:53:a6:d2:e2:24:2a:8d:ea:6f:88:d9:77:da:
         72:fe:fd:d5:ef:ed:ee:20:af:e4:04:c8:6e:57:5a:8e:b0:4c:
         e7:da:92:d4:36:6c:d3:42:76:90:5b:b1:52:30:27:d4:c7:6f:
         dc:ff:7c:70:f7:c2:41:bc:76:3c:32:21:20:7b:08:ed:05:ef:
         cb:22:a6:d2:7c:d7:67:04:aa:09:ee:3a:d9:a2:f2:11:6e:6b:
         cd:1b:0f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:30:31 2026 by rpki-client