This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/95C8D065FA30EFE1A5136CFF8A3B88E925859DA5.cer
File:                     95C8D065FA30EFE1A5136CFF8A3B88E925859DA5.cer (raw, json)
Hash identifier:          /xdnDPdB/ZyztShf3pUFaBx7IY17JAoMiI1B62FjYgg=
Subject key identifier:   95:C8:D0:65:FA:30:EF:E1:A5:13:6C:FF:8A:3B:88:E9:25:85:9D:A5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1415D0709F80C05991CC009A7DB4522AF3CF4CB7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/95C8D065FA30EFE1A5136CFF8A3B88E925859DA5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Jan 2026 22:15:03 +0000
Certificate not after:    Fri 08 Jan 2027 22:20:03 +0000
Subordinate resources:    AS: 271363
                          IP: 181.189.36.0/22
                          IP: 2804:7a4c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:15:d0:70:9f:80:c0:59:91:cc:00:9a:7d:b4:52:2a:f3:cf:4c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  9 22:15:03 2026 GMT
            Not After : Jan  8 22:20:03 2027 GMT
        Subject: CN=95C8D065FA30EFE1A5136CFF8A3B88E925859DA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1f:28:39:3c:65:3e:f1:b2:8d:0f:5c:e8:dd:
                    9e:d6:f7:41:ae:a7:35:1e:42:4d:e2:3d:80:50:86:
                    6a:04:55:36:4b:c7:01:b7:d9:27:44:b8:0d:8c:60:
                    ac:93:56:0e:e7:91:ee:1d:cf:40:a0:fd:32:d5:01:
                    30:80:3c:1a:6c:63:a2:ab:10:89:a8:2e:2a:9a:06:
                    cd:91:8e:66:99:e1:48:bb:b8:0d:dd:41:eb:fe:c7:
                    fd:c0:ba:09:ec:24:c3:5c:db:51:ef:b3:c5:6a:db:
                    bb:e8:10:c9:ac:f7:ac:91:6a:09:6b:d7:ff:9c:b2:
                    b2:94:40:81:78:71:4b:44:87:02:c3:b0:57:aa:c5:
                    00:be:b0:26:23:f7:56:b6:64:94:53:34:3a:dd:b6:
                    9d:62:fe:2f:dc:cc:74:b7:71:cd:7b:30:98:25:ac:
                    c3:c4:72:6e:70:f2:9f:6a:55:5b:87:81:67:d0:55:
                    4c:92:3c:fc:75:90:f2:42:79:a5:a5:e7:68:3c:3f:
                    ea:b0:62:da:a6:29:f1:35:3e:9c:7e:18:c1:66:17:
                    8a:19:ff:ce:77:9f:cb:d1:fa:86:88:b9:a1:58:2c:
                    0a:d7:ca:61:3f:1e:79:c1:f5:f4:d8:29:2e:20:87:
                    4a:30:b3:5d:e2:89:23:86:5c:db:17:08:89:21:d4:
                    0f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:C8:D0:65:FA:30:EF:E1:A5:13:6C:FF:8A:3B:88:E9:25:85:9D:A5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/95C8D065FA30EFE1A5136CFF8A3B88E925859DA5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.36.0/22
                IPv6:
                  2804:7a4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271363

    Signature Algorithm: sha256WithRSAEncryption
         1d:cd:4e:5f:ca:c4:2d:9c:05:2e:b8:e1:70:0a:0a:80:c5:14:
         1d:b5:f2:42:de:30:30:63:e7:48:c1:4c:88:57:1c:6f:97:ad:
         63:02:db:1d:a7:48:ea:aa:75:21:58:25:2d:97:29:49:7a:c7:
         92:ee:45:12:d4:58:10:16:07:93:e0:a3:37:f7:62:b4:e1:01:
         24:c9:ea:9e:11:5c:47:2e:87:e8:8f:a7:0f:54:0b:67:9c:e6:
         97:59:eb:db:47:3c:1a:07:4e:eb:79:1e:81:b8:ab:2e:73:ae:
         a1:6a:70:88:a9:ea:61:d7:d0:7b:ce:65:c6:4d:e8:66:4c:81:
         1d:8c:4e:f8:fa:2c:d3:b5:6e:6a:b7:63:1f:aa:26:23:3b:58:
         68:87:26:b8:52:54:6c:76:aa:4d:a5:a1:f8:02:a3:e6:1a:1e:
         02:92:bf:ef:19:ba:2d:0d:b0:13:d8:11:ec:4e:6d:f5:73:8c:
         df:00:72:42:63:a7:12:99:45:38:34:a2:75:1c:b2:51:20:5c:
         b5:96:ce:f3:a4:81:2a:ae:57:c5:37:ec:e7:b6:7f:9a:44:68:
         f1:f2:56:37:af:8f:3d:b9:e5:78:41:7b:6a:e3:b2:8b:24:13:
         7c:36:86:63:7e:d2:f0:54:ea:7b:cf:07:06:b1:52:4d:47:a2:
         3f:b7:23:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----