This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer
File:                     8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer (raw, json)
Hash identifier:          QceBnB17FDn+VEHFIdTanAbSZINbyAkz0AWtOlThkCM=
Subject key identifier:   8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0DCEA6E1DC259B7EEC5B93A426EBEBB15F123B71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Jan 2026 19:25:41 +0000
Certificate not after:    Thu 07 Jan 2027 19:30:41 +0000
Subordinate resources:    AS: 274746
                          IP: 2804:92f8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ce:a6:e1:dc:25:9b:7e:ec:5b:93:a4:26:eb:eb:b1:5f:12:3b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  8 19:25:41 2026 GMT
            Not After : Jan  7 19:30:41 2027 GMT
        Subject: CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6e:09:f2:ff:43:a5:9b:d4:c4:fd:78:36:75:
                    10:c9:f3:b5:44:6b:f5:03:ca:2a:ab:a6:6f:51:b7:
                    a2:4f:d5:f0:d5:46:5b:91:ed:41:18:09:8a:f6:ed:
                    75:b8:72:b8:c7:fc:c9:6a:40:ad:2d:1e:d3:17:fa:
                    8d:7e:c9:d8:67:92:9f:73:c5:cd:41:60:04:7d:8d:
                    04:c7:fe:60:70:1c:fd:25:80:4b:fc:cb:bc:9b:e5:
                    8e:8f:c4:e2:c9:b6:24:4e:69:26:1e:83:58:90:a0:
                    48:ca:8e:8a:e4:5a:ae:17:56:03:f5:e9:14:38:d7:
                    8f:a3:d3:32:c7:06:7c:77:cc:2e:31:3e:1a:44:c2:
                    0b:9d:8a:b9:16:a3:5d:bc:60:68:ea:d5:00:8c:f5:
                    b1:e8:f6:98:4c:1e:e6:88:0b:21:dd:1f:2e:15:2e:
                    9a:70:57:bb:1f:24:16:40:f5:90:a5:0b:50:86:3d:
                    b6:85:2e:17:f1:53:2e:38:2a:cf:49:bc:94:47:e0:
                    c2:73:03:85:cc:24:73:51:de:33:a7:ce:af:91:19:
                    9d:82:fa:bb:4f:db:a4:d4:10:03:14:c2:1c:f2:c6:
                    a7:37:43:13:e6:7f:85:1e:dc:02:99:46:12:e1:bf:
                    07:a2:a1:9f:5f:9e:f6:02:4e:2a:0c:31:d1:22:da:
                    8f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274746

    Signature Algorithm: sha256WithRSAEncryption
         dc:8c:e4:42:ce:d7:f0:a0:5b:91:cb:68:39:66:12:48:e9:9e:
         64:e4:69:15:80:d1:21:f2:d0:4d:bb:fd:81:c2:f5:ef:83:42:
         ef:cd:1e:2f:e0:be:5c:18:67:dc:c6:f0:cd:d0:99:60:de:0b:
         16:9f:c0:fb:99:77:ab:a1:1b:23:4c:52:0c:b3:95:b2:c6:af:
         b9:71:71:4a:8f:d6:2a:8c:3f:eb:cd:64:e2:0e:55:f5:4a:d4:
         a3:54:55:fd:df:b3:92:34:65:bd:b7:24:2b:42:07:48:60:cf:
         50:53:59:6b:23:09:01:29:91:72:5f:d1:87:1d:63:68:a2:a2:
         33:a5:7a:cf:83:86:f4:53:26:69:97:6e:f0:1a:61:e8:da:30:
         3c:d4:85:6c:2d:3c:77:dd:da:9c:11:11:22:a3:bd:72:fd:5f:
         c8:30:8b:b4:8a:dc:66:55:6d:ec:27:41:f7:ee:77:23:2e:e9:
         2b:eb:80:b7:ec:88:25:0c:c1:6f:50:72:6b:a8:95:9b:54:8f:
         e9:0f:0d:b1:fb:51:b4:96:64:ce:a1:b6:4a:a6:36:ce:f0:8d:
         07:50:8d:16:41:ca:8f:fd:e9:18:2f:6f:e0:3b:2e:ef:c0:eb:
         ad:d3:2d:2b:56:53:5a:91:43:fa:52:cb:13:9f:93:b8:72:a9:
         ac:e7:ab:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----