This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9BFF670A0A74B3B2422C208B200EB041C1A3479B.cer
File:                     9BFF670A0A74B3B2422C208B200EB041C1A3479B.cer (raw, json)
Hash identifier:          tWwwpy0Q2TeOW8ja5KVRfaxF1hyToor0CvOFvybaUpg=
Subject key identifier:   9B:FF:67:0A:0A:74:B3:B2:42:2C:20:8B:20:0E:B0:41:C1:A3:47:9B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4CF9C050EEF2D1AFC3B47521F8093A788B8620B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/9BFF670A0A74B3B2422C208B200EB041C1A3479B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Jan 2026 22:39:24 +0000
Certificate not after:    Wed 20 Jan 2027 22:44:24 +0000
Subordinate resources:    AS: 52700
                          IP: 177.73.84.0/22
                          IP: 191.240.160.0/22
                          IP: 2804:110c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f9:c0:50:ee:f2:d1:af:c3:b4:75:21:f8:09:3a:78:8b:86:20:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 22:39:24 2026 GMT
            Not After : Jan 20 22:44:24 2027 GMT
        Subject: CN=9BFF670A0A74B3B2422C208B200EB041C1A3479B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:17:5d:a7:c5:1b:f0:f2:67:9b:d6:1d:99:
                    ac:27:c3:2f:0d:9b:54:cb:0d:98:c0:fb:b9:2c:3e:
                    27:49:88:d9:16:08:1e:da:e5:67:1b:fa:71:c5:7d:
                    1d:a3:87:bf:7b:a3:d6:f0:21:db:62:bf:18:cc:52:
                    05:d5:3b:77:10:ce:06:f2:e0:ce:f2:8f:7e:06:cb:
                    45:90:b5:ff:59:ce:0a:60:bb:5e:e1:ec:90:4c:a8:
                    be:11:ba:14:d0:6f:7b:5b:a6:f4:d3:5a:ff:5f:56:
                    37:7b:c0:c4:23:f1:ef:fe:ea:2b:24:70:db:ab:89:
                    7e:08:c0:a5:b0:4e:4c:7c:4e:ae:87:6f:3d:6b:87:
                    46:ec:59:e8:77:9c:49:de:37:1b:2d:21:b9:d3:50:
                    f5:cf:d9:d8:c1:95:ea:e9:f3:72:1b:75:11:fe:0f:
                    f3:f5:13:03:63:6f:48:dd:04:2c:b0:d8:62:27:16:
                    52:2d:d2:40:91:34:59:10:68:96:41:d4:8c:e9:57:
                    ed:bd:aa:ac:cf:64:ab:b2:db:3d:ed:5e:a8:58:9b:
                    3e:27:f5:e8:eb:82:41:3e:7d:a2:7e:d0:7f:ab:6c:
                    40:4e:8b:d3:e1:ce:bf:15:bf:34:91:81:58:51:3f:
                    d8:fe:f9:52:00:2e:87:8f:93:7c:eb:e1:99:25:11:
                    b8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:FF:67:0A:0A:74:B3:B2:42:2C:20:8B:20:0E:B0:41:C1:A3:47:9B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/9BFF670A0A74B3B2422C208B200EB041C1A3479B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.84.0/22
                  191.240.160.0/22
                IPv6:
                  2804:110c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52700

    Signature Algorithm: sha256WithRSAEncryption
         a6:61:2e:dd:ee:91:e9:7a:7b:5a:66:d8:26:24:d2:c0:f3:80:
         31:e3:39:fa:f4:8f:5f:83:00:2a:52:10:66:ff:59:be:d3:48:
         a3:38:3b:9c:22:7e:d6:64:10:80:c6:2e:50:99:41:04:21:60:
         f4:7e:87:d8:06:cc:61:b7:65:98:91:4a:4b:53:d3:e4:f6:fb:
         1f:4d:32:53:b8:67:d6:6f:66:16:c8:ca:73:82:42:6e:94:11:
         7f:9c:ac:5a:a1:d2:4c:14:f2:46:f2:4f:af:7f:07:b6:45:f0:
         5f:f8:c5:fc:59:c9:ce:9a:4d:92:43:29:ac:95:54:26:4d:d2:
         e2:10:31:61:33:b7:40:ba:9c:67:bd:f2:e9:80:b9:09:b7:f9:
         db:ba:23:54:7a:db:76:5d:60:9b:f9:c7:d4:a8:f4:07:b9:fd:
         7c:63:5e:96:3d:dc:6b:3d:52:5e:e3:08:25:6c:44:41:f9:87:
         34:55:10:7c:d5:58:c0:0f:3d:52:40:02:e6:52:41:fd:89:12:
         1f:d5:df:fc:1e:85:e8:e3:e8:4c:2e:ce:5c:b4:6f:90:11:c1:
         eb:6f:37:f3:ec:2f:34:39:9d:2f:48:19:59:51:2a:6c:b8:dc:
         21:a3:7c:8b:81:15:4d:7a:95:ac:0c:56:f7:cc:b7:98:b4:e1:
         bb:67:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:17:48 2026 by rpki-client