This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer
File:                     80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer (raw, json)
Hash identifier:          IphWLknRk6e+B8lYDqR2CwGVQnw7i9tdvOF807S2ha0=
Subject key identifier:   80:D2:95:BF:46:2F:3B:D9:83:FA:79:14:BB:46:EC:5E:C8:AC:C9:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       087DC22798F25BB948F20B2A0CE524317028D25D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.mft
caRepository:             rsync://rpki.gns.net.br/repo/Gns/0/
Notify URL:               https://rpki.gns.net.br/rrdp/notification.xml
Certificate not before:   Wed 21 Jan 2026 15:23:13 +0000
Certificate not after:    Wed 20 Jan 2027 15:28:13 +0000
Subordinate resources:    AS: 53026
                          IP: 177.73.64.0/22
                          IP: 2804:614::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7d:c2:27:98:f2:5b:b9:48:f2:0b:2a:0c:e5:24:31:70:28:d2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 15:23:13 2026 GMT
            Not After : Jan 20 15:28:13 2027 GMT
        Subject: CN=80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:1f:de:ce:2b:6b:9c:54:73:42:a4:6c:b5:
                    28:62:e5:d0:0b:bd:b2:b3:f2:4c:74:0d:0e:19:b8:
                    ca:b8:8f:91:64:b1:b6:87:a6:50:51:48:7b:fa:e8:
                    92:54:75:74:75:bd:5f:89:c7:32:34:a3:78:19:d5:
                    77:ab:d4:fe:b3:4f:70:5c:62:be:d5:ff:3d:b7:d7:
                    29:b2:88:96:32:df:58:ec:47:11:a7:6b:71:ef:c5:
                    fd:fb:75:11:1f:71:2a:ef:ee:3c:57:b3:13:30:44:
                    9c:8d:e5:8d:9c:1b:68:7f:24:69:cc:69:1f:a0:11:
                    70:c2:47:45:38:4d:47:ef:ca:54:f7:53:13:89:be:
                    54:f2:be:b4:4c:73:cd:8b:c6:43:66:f3:24:86:b5:
                    4b:00:68:9d:f6:29:c9:da:e9:de:5f:b6:33:b8:48:
                    4e:2e:5c:de:38:32:90:24:da:e8:76:e8:1c:57:16:
                    62:3d:9f:63:e4:ab:3c:f4:62:d1:7e:57:96:af:44:
                    dd:51:e9:9c:39:cd:d5:70:23:17:37:c7:fa:c3:c2:
                    c8:56:83:ec:de:fc:c2:dc:98:6e:ef:53:45:37:07:
                    49:be:26:02:8b:87:c4:a7:c4:f9:7f:a3:fd:9d:04:
                    1c:1e:98:87:35:4c:0e:c8:11:f8:57:22:e2:60:ae:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:D2:95:BF:46:2F:3B:D9:83:FA:79:14:BB:46:EC:5E:C8:AC:C9:D8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.gns.net.br/repo/Gns/0/
                RPKI Manifest - URI:rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.mft
                RPKI Notify - URI:https://rpki.gns.net.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.64.0/22
                IPv6:
                  2804:614::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53026

    Signature Algorithm: sha256WithRSAEncryption
         40:40:96:3a:cd:b7:27:a7:0a:55:85:62:d4:7d:31:bd:9c:56:
         37:64:b2:d2:4b:01:9e:1d:3a:cd:53:79:aa:a4:d7:46:1c:78:
         fe:52:6e:87:6f:1a:c1:6c:16:10:a5:84:13:d2:bd:9e:40:55:
         cb:98:71:83:6a:f1:9e:06:dd:71:34:a3:fc:b8:fe:64:82:3b:
         77:94:38:61:ba:55:ce:0f:7f:36:c5:73:0d:7b:5a:42:c0:c2:
         52:8b:cd:50:a2:a2:37:c7:8b:a0:d9:35:9d:b6:9a:71:2d:0d:
         f3:ca:3a:ae:05:bc:fe:93:2f:55:4a:cd:a9:7b:2f:84:6d:e9:
         e9:20:a6:d6:5a:07:66:7f:74:a7:6a:a3:2c:82:6e:63:22:68:
         e6:26:9e:cb:9f:49:b0:21:c7:17:03:17:b2:c2:3b:22:84:ec:
         d0:28:80:4e:bd:70:47:d2:c3:c2:9e:4d:b8:08:2e:02:61:52:
         76:28:ce:38:be:41:9f:79:a2:a0:9e:2f:2d:89:f8:63:30:b8:
         35:b0:9f:88:72:c1:c0:2c:4e:98:88:88:fc:1c:59:4a:0f:15:
         46:96:29:67:48:4c:89:3c:57:92:0b:26:fb:2e:40:63:d7:2c:
         9b:79:9f:ca:5e:15:ba:8c:94:71:50:ee:37:8a:28:95:37:b0:
         dd:1e:62:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:08:51 2026 by rpki-client