This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.cer
File:                     9A59E428DA1E76D55074AE4987DC8EDF84F610B6.cer (raw, json)
Hash identifier:          QzZ8iOO24VOSF2MeCQe6aSdRddDff/vGcCMDh3ES+Y0=
Subject key identifier:   9A:59:E4:28:DA:1E:76:D5:50:74:AE:49:87:DC:8E:DF:84:F6:10:B6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6AF009D25CE3890F9CE523D44516B63920135D2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Jan 2026 17:29:05 +0000
Certificate not after:    Sun 17 Jan 2027 17:34:05 +0000
Subordinate resources:    AS: 265315
                          IP: 138.121.208.0/22
                          IP: 168.121.176.0/22
                          IP: 2804:2df8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f0:09:d2:5c:e3:89:0f:9c:e5:23:d4:45:16:b6:39:20:13:5d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 18 17:29:05 2026 GMT
            Not After : Jan 17 17:34:05 2027 GMT
        Subject: CN=9A59E428DA1E76D55074AE4987DC8EDF84F610B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:88:0e:9c:bd:d9:d8:a9:73:6b:d7:19:92:
                    3b:de:1f:37:75:9f:b5:ab:8f:d3:19:2f:c1:bc:18:
                    b3:96:63:7f:87:cb:f8:b7:77:8e:d3:7c:7e:3a:74:
                    11:ca:ae:1e:80:a9:59:a9:f0:32:83:a4:a9:bd:cd:
                    0a:e2:d4:d7:e4:f7:e9:16:fe:a7:2a:7d:96:36:d8:
                    cb:9a:fe:37:71:15:28:0f:ea:b1:73:27:84:08:fd:
                    e8:37:b2:bf:07:eb:e7:8c:88:3c:72:88:e4:c3:2e:
                    b5:de:3d:5f:77:2b:d9:9d:69:cd:ac:1a:1f:e1:06:
                    0a:5d:a6:73:30:7f:bd:f5:ca:3d:70:26:5f:f6:1d:
                    9f:c2:e6:c7:13:af:b4:69:90:94:c3:ec:0b:ea:70:
                    bf:cb:b9:55:ae:17:1c:1c:ae:18:b7:b9:05:c2:c4:
                    cf:8b:ea:69:7e:3a:08:d0:af:06:32:08:b4:3d:fb:
                    f7:6e:1f:17:a9:e8:20:6b:33:9b:60:52:dc:f3:76:
                    92:1e:10:08:cd:0f:75:04:be:ab:ab:7b:12:1e:98:
                    02:51:8c:52:8d:f5:e6:c2:a3:42:d0:cf:0d:b7:a7:
                    a7:29:fe:40:63:d4:aa:37:58:e8:4d:9f:34:a5:85:
                    ea:e9:26:c7:79:c3:72:68:1c:04:9b:51:3d:d5:65:
                    bf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:59:E4:28:DA:1E:76:D5:50:74:AE:49:87:DC:8E:DF:84:F6:10:B6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.208.0/22
                  168.121.176.0/22
                IPv6:
                  2804:2df8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265315

    Signature Algorithm: sha256WithRSAEncryption
         d3:6d:7a:c2:70:86:83:1b:4a:6e:d9:06:9c:f6:51:42:65:18:
         f1:7e:8e:bf:f2:c4:c0:7a:2e:24:66:a7:cb:e0:24:6e:5a:b4:
         bc:50:89:7f:08:9d:be:bd:81:fb:6f:ce:6d:b2:82:e7:f5:f8:
         6a:5c:f3:48:7a:99:7b:40:cb:01:e9:11:17:63:05:86:15:90:
         ce:a2:5b:48:a2:1e:6c:05:2d:0e:2b:2e:dc:b2:51:a0:dc:d3:
         df:59:46:b7:d4:6d:38:d7:fd:54:4a:02:ef:ed:ee:00:a3:17:
         a6:2d:f8:8c:e3:94:51:84:f6:f8:24:e6:83:d2:19:32:d5:05:
         3e:8e:f8:a3:41:c4:f1:d7:d4:f5:5b:73:7e:bf:1c:01:61:6a:
         7f:37:bf:29:8b:e6:c7:43:20:eb:50:85:19:31:08:30:b1:1b:
         3d:9b:61:ea:bf:27:5d:56:a2:68:ac:f7:ce:15:2f:60:84:0a:
         9f:0f:dd:37:6a:90:72:91:2d:14:7c:04:ce:a6:fd:c5:72:c9:
         93:5e:55:3b:d9:d6:0a:4a:b8:c1:53:d3:4b:6d:bd:0c:75:ad:
         17:23:9d:4a:47:ae:88:50:21:57:c4:5b:7a:e3:96:33:7a:34:
         63:6c:33:b4:0e:b4:56:c1:25:5a:08:a2:3b:e1:e3:c6:d1:05:
         8f:bd:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----