This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.cer
File:                     87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.cer (raw, json)
Hash identifier:          xFhVdU7WoHrZqCpgEdecqj1yrVrkmfHPrHZ5o1qLTd4=
Subject key identifier:   87:FA:D8:F8:5A:28:4E:3B:30:5B:EB:86:54:4D:28:40:BE:A7:FA:2F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D25C6D6D11C4C204224C727FCA1A8F2F19827CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Jan 2026 17:00:02 +0000
Certificate not after:    Fri 15 Jan 2027 17:05:02 +0000
Subordinate resources:    AS: 268158
                          IP: 45.170.112.0/22
                          IP: 2804:58ec::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:25:c6:d6:d1:1c:4c:20:42:24:c7:27:fc:a1:a8:f2:f1:98:27:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 16 17:00:02 2026 GMT
            Not After : Jan 15 17:05:02 2027 GMT
        Subject: CN=87FAD8F85A284E3B305BEB86544D2840BEA7FA2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f2:47:b1:ac:e2:10:5a:27:58:eb:34:fb:70:
                    ab:4c:63:60:39:d5:2c:ca:07:6d:2c:26:2d:2c:58:
                    5f:76:c7:19:a4:3a:f9:99:32:94:48:57:48:35:df:
                    56:51:c2:14:54:56:8a:5c:8f:bd:b9:8a:4d:26:8f:
                    11:d2:48:1a:7e:df:ec:55:8c:6a:1e:f0:68:10:97:
                    b3:04:5e:0e:ca:e0:3d:77:f9:e8:1e:d5:4b:2e:6e:
                    02:dd:46:b8:96:11:7a:34:e3:12:77:5d:42:5b:ca:
                    2d:3f:27:d6:6d:d3:54:f6:6e:3c:8c:52:1b:28:7e:
                    4a:6d:00:71:b2:bd:07:f7:30:b1:bc:66:a4:ff:b0:
                    cd:47:d1:91:44:cf:1a:31:49:ad:39:22:e5:75:28:
                    37:b4:c2:4a:55:ee:3c:37:28:e6:be:86:05:ab:85:
                    0b:6a:93:62:35:e1:ad:c4:00:1d:04:63:55:d2:94:
                    56:48:49:40:b4:cf:0e:5c:b8:cc:3a:31:65:60:2c:
                    dc:6a:5a:6d:66:d1:eb:b3:16:45:f4:6c:56:a0:ee:
                    b0:fc:40:08:49:d7:58:83:5f:00:a4:43:39:b1:01:
                    4c:28:62:f8:67:ca:a8:08:86:2a:34:23:84:de:ad:
                    4a:c4:07:76:9b:60:a9:80:6b:25:3f:52:1d:dc:e0:
                    d3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:FA:D8:F8:5A:28:4E:3B:30:5B:EB:86:54:4D:28:40:BE:A7:FA:2F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.112.0/22
                IPv6:
                  2804:58ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268158

    Signature Algorithm: sha256WithRSAEncryption
         72:e8:5c:09:3c:26:b4:ab:6d:67:5e:21:00:bc:97:95:9a:b8:
         c4:56:04:88:7c:e6:07:d3:6d:34:a9:d1:db:c4:35:b4:d0:26:
         84:a7:4f:c2:47:95:db:44:8d:f6:1d:b4:44:59:ad:ca:2e:0a:
         11:f5:15:75:c9:84:da:db:f1:b1:c1:9a:7f:a8:66:8f:9e:6e:
         59:97:19:00:2e:9a:aa:20:37:61:a8:e2:d7:17:31:c7:9b:cb:
         15:ca:f1:6b:84:90:14:1b:db:8c:97:fa:ce:88:3f:98:95:be:
         e9:8c:0c:62:c1:27:14:16:87:17:61:0d:cf:f3:25:a1:7b:83:
         ef:a3:e6:c1:3b:bf:15:77:53:84:94:11:f4:4a:c4:01:e4:0b:
         b9:c2:2b:ff:5b:c5:d1:e2:7b:d8:0b:b6:6e:1f:d6:07:38:9d:
         f4:61:f7:51:8f:88:6e:24:e5:e9:b4:4e:bc:01:c8:11:2c:74:
         c3:88:91:d4:07:8f:e3:6d:2e:26:b6:e7:56:cf:28:15:25:ce:
         15:ef:41:7b:12:5a:69:9b:11:83:f1:ea:ce:e2:40:52:25:2f:
         40:94:af:f5:23:60:5a:22:d7:fc:a2:ad:ab:ea:3d:1e:37:6b:
         52:2a:89:dd:59:38:78:21:91:e0:b5:af:0c:7b:d9:3a:71:e4:
         4c:69:c0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----