This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.cer
File:                     915ECA06E18624E9B2A7BDE729503B7ACD819F05.cer (raw, json)
Hash identifier:          pSzE4a677ItuCYB/4w0SIJiRkpuoz7S++QviFOljzUQ=
Subject key identifier:   91:5E:CA:06:E1:86:24:E9:B2:A7:BD:E7:29:50:3B:7A:CD:81:9F:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7E4624146DFB88CBB17CD94C164C4AC7454CD019
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Jan 2026 15:44:56 +0000
Certificate not after:    Sat 23 Jan 2027 15:49:56 +0000
Subordinate resources:    AS: 270708
                          IP: 189.127.160.0/22
                          IP: 2804:7024::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:46:24:14:6d:fb:88:cb:b1:7c:d9:4c:16:4c:4a:c7:45:4c:d0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 24 15:44:56 2026 GMT
            Not After : Jan 23 15:49:56 2027 GMT
        Subject: CN=915ECA06E18624E9B2A7BDE729503B7ACD819F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:46:4b:f6:fa:00:3a:45:26:61:5a:55:df:
                    de:0b:c7:24:67:f8:53:8e:b4:cd:fa:7d:31:03:47:
                    78:70:9a:d0:7a:4b:12:9c:c5:a6:77:8b:a6:b9:e6:
                    94:83:36:b1:1f:09:99:10:3e:74:73:33:25:8b:ef:
                    65:7f:fe:1c:66:cd:1a:1b:3b:e6:5b:e2:8b:c5:67:
                    34:aa:f5:b8:20:e5:68:5f:91:e2:a9:9d:96:6e:e3:
                    cd:4a:a6:26:27:57:40:d4:07:02:73:d9:90:91:90:
                    97:8b:b1:90:a6:19:72:0c:c2:cc:4f:5c:64:56:e0:
                    b8:27:a4:c9:e4:db:6a:3c:59:8a:75:84:cc:56:2b:
                    33:94:98:bd:9f:fd:30:3b:3b:95:79:55:8c:d9:4a:
                    54:61:d2:10:00:a8:84:ba:6b:fe:a8:0e:1a:c0:9f:
                    06:7b:f0:fc:52:be:8c:09:01:e0:2b:60:f5:20:c9:
                    ed:af:04:a0:72:5d:10:c0:00:61:83:89:ba:f5:6e:
                    6f:81:7c:67:87:48:a5:80:42:87:89:56:77:6e:b8:
                    75:b4:cc:43:78:51:f1:29:95:0d:2f:dd:f6:fa:dc:
                    7a:df:3e:89:60:e8:0e:f3:83:db:a1:c0:a1:3b:b4:
                    82:a7:97:cf:18:fd:03:a3:36:89:f1:67:88:44:c9:
                    50:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:5E:CA:06:E1:86:24:E9:B2:A7:BD:E7:29:50:3B:7A:CD:81:9F:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.160.0/22
                IPv6:
                  2804:7024::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270708

    Signature Algorithm: sha256WithRSAEncryption
         90:17:86:c6:25:c2:0b:df:be:07:6e:06:b7:7f:80:af:db:5b:
         81:49:c1:be:7c:c1:16:e5:a5:15:bf:b8:a2:33:d4:90:cd:2d:
         1b:b3:16:cc:2c:83:78:3d:ac:b5:e8:bc:da:5b:28:ef:ac:95:
         11:d6:40:8f:b2:7e:d2:2b:e2:7f:76:bd:1c:b6:75:e0:48:ef:
         6b:53:ff:6d:c6:7f:db:5a:eb:e1:5d:31:22:67:5a:00:6b:88:
         09:e8:d4:c2:7d:ca:2c:24:ab:bb:e7:d9:d7:35:66:b4:ef:48:
         bb:67:0f:5e:10:74:62:c8:86:a6:7d:44:ad:ef:cb:b7:9a:28:
         7d:92:64:cf:de:68:49:3f:9e:8b:32:59:b1:41:20:9e:2b:f9:
         d3:2f:ee:0f:98:51:bb:50:c3:4a:fd:2c:be:59:11:07:b9:b8:
         45:a7:1f:fd:66:65:e1:4b:6f:6e:84:53:94:7e:73:2c:7d:60:
         5d:14:3f:97:b7:d0:c9:25:eb:70:31:60:8e:5d:f6:9c:b3:30:
         86:38:2c:f1:80:4e:d6:5d:42:ea:b3:26:a0:9e:30:15:65:24:
         4b:bd:d3:70:36:ba:db:ac:69:90:ec:94:73:1e:39:6f:8f:bb:
         6b:fb:dd:14:8e:41:00:5a:95:32:10:86:9c:af:ad:7b:32:78:
         7b:24:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----