This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.cer
File:                     8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.cer (raw, json)
Hash identifier:          rr4QTHAJo9YXdd4JN+hm9LAZ9q79iQ/ZOq0TOO7TWVU=
Subject key identifier:   8C:FA:E2:B8:80:F5:0C:AE:44:5E:D2:38:F6:DB:F5:3F:BA:13:F2:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3FDD450B595930AD97500E746945050CF9BE5099
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 17:56:54 +0000
Certificate not after:    Mon 18 Jan 2027 18:01:54 +0000
Subordinate resources:    AS: 265305
                          IP: 168.121.8.0/22
                          IP: 2804:2dd0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:dd:45:0b:59:59:30:ad:97:50:0e:74:69:45:05:0c:f9:be:50:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 19 17:56:54 2026 GMT
            Not After : Jan 18 18:01:54 2027 GMT
        Subject: CN=8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0a:da:af:ce:31:1b:45:72:bb:ed:b3:6d:ec:
                    be:b6:37:c2:45:8d:ec:f8:e2:da:a9:4d:7d:bb:15:
                    76:c2:12:52:b1:fa:3d:fb:32:cf:86:18:c0:81:f3:
                    2f:44:16:24:bf:f1:53:24:d2:af:55:ca:09:85:d4:
                    c1:fd:12:07:4a:db:f1:f1:b5:54:f0:a6:77:f5:57:
                    72:17:8a:3d:98:73:b1:63:d0:9d:35:39:ab:fc:13:
                    96:27:3b:0b:a8:9e:2d:3f:68:20:e2:b1:fa:4c:76:
                    a7:4f:18:cc:6f:08:45:05:dd:16:e2:cc:a1:1e:ae:
                    c2:28:b3:49:bf:27:8c:ea:96:04:c7:7f:1c:ab:9f:
                    0f:76:05:88:9b:fe:15:77:de:c5:0a:09:db:0f:9d:
                    ed:31:ec:f3:7d:09:25:46:91:ad:ea:1b:2e:d8:54:
                    8f:a2:f4:86:be:0a:28:03:fe:20:d5:98:76:e8:73:
                    dd:b6:94:33:75:4a:69:57:21:24:9c:f0:26:c8:1d:
                    af:25:c2:d9:0b:bc:1b:7c:ac:36:50:46:39:34:ee:
                    15:c1:28:f0:f0:86:f5:2b:2e:e6:a7:84:c3:94:74:
                    f1:9e:59:ba:30:51:23:16:9f:1b:7a:43:f7:a2:b2:
                    f2:c2:11:48:ad:7f:1e:77:0e:25:d7:2b:cc:fd:28:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:FA:E2:B8:80:F5:0C:AE:44:5E:D2:38:F6:DB:F5:3F:BA:13:F2:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.8.0/22
                IPv6:
                  2804:2dd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265305

    Signature Algorithm: sha256WithRSAEncryption
         8e:3a:6a:15:47:cb:13:f2:76:bc:f8:fe:a0:97:8f:8e:66:a3:
         00:48:b2:09:0c:5c:81:c4:f6:a2:f1:57:3e:a4:e3:25:0e:e0:
         8a:9c:ed:12:ff:2f:0b:bd:86:6d:e6:23:88:6c:90:f6:a4:86:
         53:55:44:78:99:e4:18:57:48:e4:ad:7a:50:87:dc:be:6d:fe:
         11:b5:bb:2b:37:a7:af:16:dc:d6:10:9a:6a:23:dd:49:cb:20:
         1b:e1:42:ad:38:fe:bc:53:e5:cb:e9:4c:4f:76:88:12:c5:20:
         61:a2:87:6c:88:21:65:04:7a:51:93:d1:af:2d:04:e4:97:6b:
         43:ab:a3:fe:80:95:47:60:a4:c3:ed:d2:0d:94:ff:6f:bb:f1:
         de:40:51:31:93:0e:dc:be:37:bb:d6:ea:f0:1b:80:47:57:69:
         a9:4e:be:f4:d8:06:0a:e7:84:b9:d7:10:78:fa:53:80:44:64:
         34:7c:a6:69:ce:e4:4e:ad:6e:d3:bf:a3:c7:c0:48:54:31:7f:
         81:19:88:df:8b:92:74:f2:2b:b9:f1:af:3f:8e:33:9e:74:d8:
         ad:c8:fb:57:14:37:5e:34:0b:dd:7d:d3:58:80:85:55:25:7d:
         d8:c2:5f:e9:5e:5a:f3:f9:6b:29:a0:f5:f4:0f:f9:8c:77:f2:
         d0:5a:d4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----