This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8F66558670F52B216CF1A300EE9109FB19CBD795.cer
File:                     8F66558670F52B216CF1A300EE9109FB19CBD795.cer (raw, json)
Hash identifier:          VrnEuFu9bpUmcECuQpDV0CI7w7zdyUu4yg0/rXVa8TQ=
Subject key identifier:   8F:66:55:86:70:F5:2B:21:6C:F1:A3:00:EE:91:09:FB:19:CB:D7:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       298817C3DAB92398C95E17A620AC1C545D8D4D41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/8F66558670F52B216CF1A300EE9109FB19CBD795.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Jan 2026 03:34:12 +0000
Certificate not after:    Thu 21 Jan 2027 03:39:12 +0000
Subordinate resources:    AS: 265466
                          IP: 168.196.176.0/22
                          IP: 2804:3494::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 06:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:88:17:c3:da:b9:23:98:c9:5e:17:a6:20:ac:1c:54:5d:8d:4d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 22 03:34:12 2026 GMT
            Not After : Jan 21 03:39:12 2027 GMT
        Subject: CN=8F66558670F52B216CF1A300EE9109FB19CBD795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:0e:1b:c8:96:4c:77:91:27:ec:01:ca:f8:
                    1f:bc:5a:a0:96:6a:af:21:9e:e8:d3:bf:9b:5b:5f:
                    2a:69:7c:9c:4e:ea:45:9d:12:a2:bc:f6:f7:93:34:
                    87:e2:4b:69:e8:3a:a3:69:c6:99:3b:20:b9:62:f4:
                    df:af:9e:e9:82:96:f7:bc:3a:84:92:5b:b3:b9:03:
                    62:d4:bc:be:1c:3c:7a:57:bd:2d:3f:ad:d0:3a:d2:
                    33:79:ed:eb:db:af:e5:84:cd:b3:ad:49:9b:bf:c1:
                    03:05:50:97:6b:0b:74:b6:ab:68:1e:75:e9:33:05:
                    b9:4f:75:cc:2d:89:d4:18:df:3d:03:97:24:e4:ad:
                    4e:dd:b1:05:35:32:1b:f9:5b:84:f9:a8:7f:5b:df:
                    6c:c9:fa:e9:f7:6e:9f:46:0c:2e:42:90:e4:2d:60:
                    54:df:4b:c4:f3:ce:cd:9b:f2:c4:72:63:53:97:5c:
                    22:d9:cc:dd:cb:f9:af:8c:1d:5a:57:47:af:14:7d:
                    86:0f:c8:24:72:3f:b7:16:1f:88:95:7a:7b:30:a7:
                    e3:9d:b3:91:aa:09:e0:32:87:dd:79:10:98:b8:ee:
                    21:72:9c:78:0a:38:36:03:3c:ce:80:97:e5:46:c3:
                    0c:65:07:c4:93:70:b2:32:4f:59:75:0c:e7:cb:13:
                    1b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:66:55:86:70:F5:2B:21:6C:F1:A3:00:EE:91:09:FB:19:CB:D7:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/8F66558670F52B216CF1A300EE9109FB19CBD795.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.176.0/22
                IPv6:
                  2804:3494::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265466

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:ae:fa:07:a6:0a:2e:95:90:df:2c:4a:5f:de:49:20:b9:
         01:b1:62:2e:ba:53:e4:3d:50:75:72:be:4f:9f:1b:e6:d8:4f:
         2e:7e:40:94:77:6a:f9:64:32:a7:55:a2:bc:c4:66:27:84:29:
         aa:b0:cd:84:9a:48:9a:71:bc:e7:d8:92:44:63:ff:b0:79:2f:
         87:30:0f:a6:2e:b4:72:86:b7:7d:f8:5b:fc:13:0d:7f:e4:70:
         87:30:9d:99:6f:67:b7:fe:32:df:46:40:97:68:6f:19:79:10:
         d1:dc:ef:39:96:46:c9:39:da:ab:61:2b:6a:44:ea:75:26:65:
         05:25:2e:d0:33:02:2d:57:d4:70:ff:17:26:21:a2:c5:ad:0c:
         0b:aa:1c:45:16:20:70:98:87:77:76:8c:37:eb:e4:14:f7:43:
         97:67:6b:c9:41:36:e7:3f:59:65:4e:2b:f0:b4:cd:1d:a6:1f:
         47:cb:84:a4:6b:97:49:08:31:f7:07:0f:c6:8a:03:a6:42:af:
         1b:84:a4:5b:37:94:d0:c1:5e:98:a1:f0:74:c6:64:2f:81:b8:
         6f:40:50:55:db:5c:90:33:1d:22:d6:68:e1:3e:8a:f1:5d:d3:
         c4:1d:e9:ed:b6:5a:d2:35:da:08:0c:d5:51:2d:ee:ff:8c:fc:
         9b:5f:26:5c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUKYgXw9q5I5jJXhemIKwcVF2NTUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMjIwMzM0MTJaFw0yNzAxMjEwMzM5MTJaMDMxMTAvBgNV
BAMTKDhGNjY1NTg2NzBGNTJCMjE2Q0YxQTMwMEVFOTEwOUZCMTlDQkQ3OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmVA4byJZMd5En7AHK+B+8WqCW
aq8hnujTv5tbXyppfJxO6kWdEqK89veTNIfiS2noOqNpxpk7ILli9N+vnumClve8
OoSSW7O5A2LUvL4cPHpXvS0/rdA60jN57evbr+WEzbOtSZu/wQMFUJdrC3S2q2ge
dekzBblPdcwtidQY3z0DlyTkrU7dsQU1Mhv5W4T5qH9b32zJ+un3bp9GDC5CkOQt
YFTfS8Tzzs2b8sRyY1OXXCLZzN3L+a+MHVpXR68UfYYPyCRyP7cWH4iVenswp+Od
s5GqCeAyh915EJi47iFynHgKODYDPM6Al+VGwwxlB8STcLIyT1l1DOfLExtRAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPZlWGcPUrIWzx
owDukQn7GcvXlTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEV0
TkJ4VWVvdTVoS20zRWdGV3JLdGdOb3N4ajJBQ2ZTQjFxQWg1WEhOOUMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRF
dE5CeFVlb3U1aEttM0VnRldyS3RnTm9zeGoyQUNmU0IxcUFoNVhITjlDLzAvOEY2
NjU1ODY3MEY1MkIyMTZDRjFBMzAwRUU5MTA5RkIxOUNCRDc5NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqMSwMA0EAgACMAcDBQAoBDSUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQM+jANBgkqhkiG9w0BAQsFAAOCAQEAL9Gu+gemCi6VkN8s
Sl/eSSC5AbFiLrpT5D1QdXK+T58b5thPLn5AlHdq+WQyp1WivMRmJ4QpqrDNhJpI
mnG859iSRGP/sHkvhzAPpi60coa3ffhb/BMNf+RwhzCdmW9nt/4y30ZAl2hvGXkQ
0dzvOZZGyTnaq2ErakTqdSZlBSUu0DMCLVfUcP8XJiGixa0MC6ocRRYgcJiHd3aM
N+vkFPdDl2dryUE25z9ZZU4r8LTNHaYfR8uEpGuXSQgx9wcPxooDpkKvG4SkWzeU
0MFemKHwdMZkL4G4b0BQVdtckDMdItZo4T6K8V3TxB3p7bZa0jXaCAzVUS3u/4z8
m18mXA==
-----END CERTIFICATE-----