This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7400F575ED2A891D8D0D0C8F4F75C2C6D4D8DDF7.cer
File:                     7400F575ED2A891D8D0D0C8F4F75C2C6D4D8DDF7.cer (raw, json)
Hash identifier:          3ukPIcFUE8e8KwvON+fd9Wrf9+dGjN8mX1KOjZKhbtY=
Subject key identifier:   74:00:F5:75:ED:2A:89:1D:8D:0D:0C:8F:4F:75:C2:C6:D4:D8:DD:F7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       371880158275D9F02593B5790F9C2BAB1825BB4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/7400F575ED2A891D8D0D0C8F4F75C2C6D4D8DDF7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Jan 2026 13:05:35 +0000
Certificate not after:    Mon 11 Jan 2027 13:10:35 +0000
Subordinate resources:    AS: 271145
                          IP: 201.71.216.0/22
                          IP: 2804:76f4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:18:80:15:82:75:d9:f0:25:93:b5:79:0f:9c:2b:ab:18:25:bb:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 12 13:05:35 2026 GMT
            Not After : Jan 11 13:10:35 2027 GMT
        Subject: CN=7400F575ED2A891D8D0D0C8F4F75C2C6D4D8DDF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:d5:af:20:21:e5:d6:27:bf:64:6a:47:bb:
                    82:45:09:6e:fd:3d:70:1c:a5:c2:d2:f9:bc:57:c2:
                    56:8e:cf:ed:b3:e7:be:01:fd:a3:58:3e:15:dd:94:
                    54:6b:84:5a:02:1a:11:ac:68:5c:2c:b6:7d:0f:78:
                    14:d9:a9:5f:e3:f8:2f:77:3f:9b:73:67:52:7c:5d:
                    4d:07:10:86:e5:c4:24:bb:bc:e5:b1:03:ac:e9:93:
                    bc:2f:b6:45:d2:70:73:b1:89:9f:73:c9:a8:03:76:
                    d5:ab:ce:f2:6d:14:34:07:dd:78:e5:6e:70:68:3d:
                    80:56:56:a0:e4:b0:eb:db:6c:03:cb:85:98:7c:87:
                    65:ed:82:d6:69:56:02:e7:d4:1e:b7:dd:dd:ca:37:
                    46:17:0b:ec:78:32:03:dd:4d:fb:49:e7:c3:69:8b:
                    49:72:a8:29:ad:26:7a:98:97:b5:90:ae:8a:8c:43:
                    77:f2:22:e3:e2:07:ef:1e:41:bf:8c:44:9b:0c:65:
                    20:0c:a3:b9:5f:95:56:dd:2c:11:41:4e:23:2a:43:
                    cd:ac:93:12:2e:ec:7f:62:6a:a9:40:97:f3:bb:be:
                    c6:ed:ae:f7:fa:af:b9:04:6e:b2:09:92:75:37:5c:
                    92:b7:18:d6:39:6f:1b:db:a8:a7:b5:10:56:96:67:
                    98:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:00:F5:75:ED:2A:89:1D:8D:0D:0C:8F:4F:75:C2:C6:D4:D8:DD:F7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/7400F575ED2A891D8D0D0C8F4F75C2C6D4D8DDF7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.216.0/22
                IPv6:
                  2804:76f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271145

    Signature Algorithm: sha256WithRSAEncryption
         05:30:5c:71:ba:d9:99:37:38:8f:07:78:b3:ea:5d:fb:5e:b1:
         5d:78:55:30:1f:ab:b3:fb:bc:2f:12:b0:cf:4f:a7:96:42:cb:
         d9:08:e2:ab:ac:67:0a:82:38:46:1c:5f:32:23:03:ee:28:cd:
         3d:7c:87:06:a3:b9:06:80:6a:02:57:f4:64:84:98:3f:2b:49:
         89:04:64:82:20:e8:dc:99:d0:de:d8:c2:1e:25:55:f4:26:1b:
         c0:5d:4a:7b:2c:f7:21:26:72:81:16:97:e1:99:77:69:32:8b:
         86:bc:8a:90:e8:dc:3e:d7:70:83:01:6d:58:12:0a:99:cc:df:
         20:13:7a:5a:5e:47:1f:ed:a6:b1:b6:cf:86:9f:85:8b:6c:2c:
         b9:51:fd:3e:d3:b5:68:22:2d:b4:dd:e3:ba:d2:8e:a4:77:de:
         43:1b:f2:26:54:6f:84:1d:de:38:35:bc:7e:e4:6b:e9:55:59:
         d2:8c:0e:9e:f5:28:37:39:c8:8b:9f:d8:f5:38:40:0c:80:08:
         c9:c7:83:16:f2:6c:4f:49:4c:5b:0f:4b:60:30:d6:7d:73:33:
         2a:1c:7f:2d:f5:85:e3:16:a3:03:7a:1f:4f:ad:46:8a:5f:10:
         ea:14:1c:81:b0:77:05:9d:f0:5e:78:25:36:cf:fc:37:a0:a9:
         d1:72:13:e0
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUNxiAFYJ12fAlk7V5D5wrqxglu0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMTIxMzA1MzVaFw0yNzAxMTExMzEwMzVaMDMxMTAvBgNV
BAMTKDc0MDBGNTc1RUQyQTg5MUQ4RDBEMEM4RjRGNzVDMkM2RDREOERERjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCms9WvICHl1ie/ZGpHu4JFCW79
PXAcpcLS+bxXwlaOz+2z574B/aNYPhXdlFRrhFoCGhGsaFwstn0PeBTZqV/j+C93
P5tzZ1J8XU0HEIblxCS7vOWxA6zpk7wvtkXScHOxiZ9zyagDdtWrzvJtFDQH3Xjl
bnBoPYBWVqDksOvbbAPLhZh8h2XtgtZpVgLn1B633d3KN0YXC+x4MgPdTftJ58Np
i0lyqCmtJnqYl7WQroqMQ3fyIuPiB+8eQb+MRJsMZSAMo7lflVbdLBFBTiMqQ82s
kxIu7H9iaqlAl/O7vsbtrvf6r7kEbrIJknU3XJK3GNY5bxvbqKe1EFaWZ5hFAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR0APV17SqJHY0N
DI9PdcLG1Njd9zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzND
dEJ2c3NlOXpvd0pyUW9WcFVVREpnd3Z6NFgxMVByVXZmbzYxM2ZQOFYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzMz
Q3RCdnNzZTl6b3dKclFvVnBVVURKZ3d2ejRYMTFQclV2Zm82MTNmUDhWLzAvNzQw
MEY1NzVFRDJBODkxRDhEMEQwQzhGNEY3NUMyQzZENEQ4RERGNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyUfYMA0EAgACMAcDBQAoBHb0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQjKTANBgkqhkiG9w0BAQsFAAOCAQEABTBccbrZmTc4jwd4
s+pd+16xXXhVMB+rs/u8LxKwz0+nlkLL2Qjiq6xnCoI4RhxfMiMD7ijNPXyHBqO5
BoBqAlf0ZISYPytJiQRkgiDo3JnQ3tjCHiVV9CYbwF1Keyz3ISZygRaX4Zl3aTKL
hryKkOjcPtdwgwFtWBIKmczfIBN6Wl5HH+2msbbPhp+Fi2wsuVH9PtO1aCIttN3j
utKOpHfeQxvyJlRvhB3eODW8fuRr6VVZ0owOnvUoNznIi5/Y9ThADIAIyceDFvJs
T0lMWw9LYDDWfXMzKhx/LfWF4xajA3ofT61Gil8Q6hQcgbB3BZ3wXnglNs/8N6Cp
0XIT4A==
-----END CERTIFICATE-----