This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
File:                     8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer (raw, json)
Hash identifier:          EtbbIVFAjYoa7pp4Sdw7k+O2Wii+uaAkLNbXrDCR2gM=
Subject key identifier:   84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       78ACEC0E541E2FCA873F39060618C8AD44521345
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Jan 2026 18:25:28 +0000
Certificate not after:    Thu 21 Jan 2027 18:30:28 +0000
Subordinate resources:    AS: 268080
                          IP: 45.169.4.0/22
                          IP: 2804:57b0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ac:ec:0e:54:1e:2f:ca:87:3f:39:06:06:18:c8:ad:44:52:13:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 22 18:25:28 2026 GMT
            Not After : Jan 21 18:30:28 2027 GMT
        Subject: CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:01:bd:d8:42:e9:b1:6a:99:41:cb:9e:67:
                    51:e3:67:e4:2e:52:89:cd:e7:c0:c4:45:e1:90:8b:
                    ca:7e:d0:06:af:c7:52:b2:33:6d:05:ee:54:f2:6e:
                    4d:69:ec:71:30:68:4d:76:5f:e6:bd:12:c6:cb:3e:
                    eb:ca:20:65:b1:a4:33:18:8a:b2:c8:9d:65:2a:e2:
                    38:f5:95:46:d9:e0:35:ff:b6:3f:59:52:61:f4:78:
                    92:e1:87:c3:c6:08:cf:91:a3:eb:06:b3:50:6d:1d:
                    f2:65:13:ec:0f:80:25:23:1b:5f:17:0d:4c:22:be:
                    a7:59:35:2c:81:d9:ff:30:0d:97:7f:5f:c6:63:69:
                    ad:18:fe:f9:e1:12:31:42:70:cb:df:2d:c2:e0:08:
                    31:87:05:57:22:f5:49:5a:83:36:8a:a2:a0:2e:f2:
                    73:20:42:46:c3:49:4b:5b:d5:4e:52:28:a0:14:b9:
                    52:2c:0b:ef:82:a4:7c:1e:12:cd:5b:da:31:89:bd:
                    fb:19:dc:21:6f:d2:3a:5b:c9:ba:6d:a5:0f:5a:8c:
                    94:83:34:59:89:f9:0a:2f:28:6c:2c:c9:b3:9d:94:
                    a8:09:c2:f3:62:f5:08:4a:1b:d2:80:97:76:5f:30:
                    98:80:c1:f0:18:68:06:47:36:48:d2:33:19:98:14:
                    c0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.4.0/22
                IPv6:
                  2804:57b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268080

    Signature Algorithm: sha256WithRSAEncryption
         87:95:10:d6:da:dd:c1:df:29:f7:7b:79:ff:0b:07:fc:33:3a:
         eb:46:38:14:e0:67:13:e6:75:20:50:10:d2:29:2d:c0:d7:ef:
         f1:d9:d4:f2:9e:60:39:fc:96:2d:f1:ba:26:9d:0b:e6:89:61:
         fa:55:10:5f:7b:2a:c2:31:e7:86:ae:4e:13:ea:af:31:6b:a6:
         9c:0f:a6:91:a6:80:07:7e:d0:0f:bd:a4:5d:5b:92:7f:87:9d:
         02:24:ae:64:a0:d6:29:c9:95:46:b2:62:02:f5:46:a7:17:63:
         d2:32:76:db:3f:73:ef:d5:4d:6e:85:a6:8b:b5:52:8f:e7:9f:
         a2:f3:82:cc:61:55:e5:61:88:d0:da:d7:e4:e6:a7:6f:66:7e:
         cd:f8:53:f5:7a:cf:a6:bb:6f:f2:ce:8d:5a:69:a2:e4:4e:1c:
         a3:ae:08:d5:5b:82:ea:e1:af:52:4b:2c:03:3e:1c:c0:48:11:
         ab:90:22:97:8f:17:af:c3:ae:1a:45:fe:87:b8:df:ab:65:c5:
         96:71:5f:5f:bd:16:d6:a9:38:08:d5:32:4d:a6:7e:b4:b5:59:
         f4:37:20:ae:f0:db:27:18:c1:fb:a9:eb:01:e3:e6:a5:3c:c0:
         a6:02:29:07:cd:25:b5:c8:09:28:03:3d:d5:2b:e6:d0:54:c5:
         0f:51:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----