This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.cer
File:                     9D382AC121626FCAD8CF3A3959C2979F23FCA68C.cer (raw, json)
Hash identifier:          HCnPDEjTveN9roe05iNaySyOQoIWrwK4IAGvNtzuaPw=
Subject key identifier:   9D:38:2A:C1:21:62:6F:CA:D8:CF:3A:39:59:C2:97:9F:23:FC:A6:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       266D2B277D93DA4891A6326B00E78D760A136EE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Jan 2026 17:34:58 +0000
Certificate not after:    Sun 17 Jan 2027 17:39:58 +0000
Subordinate resources:    AS: 263849
                          IP: 138.185.200.0/22
                          IP: 2804:26b0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6d:2b:27:7d:93:da:48:91:a6:32:6b:00:e7:8d:76:0a:13:6e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 18 17:34:58 2026 GMT
            Not After : Jan 17 17:39:58 2027 GMT
        Subject: CN=9D382AC121626FCAD8CF3A3959C2979F23FCA68C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:8e:33:4e:cf:b2:16:46:8a:c0:d9:22:7b:
                    18:a3:36:6f:e9:4c:86:c4:08:26:99:6e:8e:d0:1f:
                    c7:72:51:a8:4b:3d:d4:b7:53:3b:ef:28:1b:8f:cd:
                    39:a8:14:4c:8d:67:f6:e7:90:33:ed:85:80:75:48:
                    3c:65:ae:37:ea:b2:fa:44:46:a8:65:ab:2d:a1:8c:
                    ee:20:23:cb:83:dd:ba:b7:45:2c:22:2f:21:7b:6b:
                    f3:85:ab:4c:8f:05:a7:f1:42:24:eb:b6:7a:0c:6a:
                    b5:b1:88:3f:db:1e:a9:24:c2:38:85:21:28:83:3b:
                    99:2e:5e:51:0d:ae:a8:f2:e3:0b:f1:f4:ef:d5:e8:
                    b2:52:56:9e:a1:6d:0f:dd:f0:18:56:41:89:90:62:
                    da:49:21:04:66:5e:8c:e6:41:80:50:a3:64:ea:4c:
                    2c:ed:a2:f9:70:01:60:e2:a0:c9:f4:93:8b:4d:06:
                    97:20:5f:46:4d:82:2e:fe:61:38:4b:c9:75:92:b0:
                    ac:91:9b:60:a9:51:19:9d:ef:2b:8b:00:f4:5b:b2:
                    f6:03:1c:f8:2c:8a:58:0c:1c:ee:60:30:c7:2e:62:
                    2b:d9:8b:d8:30:ec:96:be:c2:ba:0e:bf:db:fa:62:
                    57:cb:1f:9c:55:0b:c7:aa:26:61:8e:09:09:e9:fe:
                    74:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:38:2A:C1:21:62:6F:CA:D8:CF:3A:39:59:C2:97:9F:23:FC:A6:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.200.0/22
                IPv6:
                  2804:26b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263849

    Signature Algorithm: sha256WithRSAEncryption
         ab:c7:b3:90:6c:9c:be:af:9b:a9:60:24:7f:51:8a:d4:87:c1:
         37:9b:45:33:4d:2b:ba:2c:03:f6:d8:51:b6:d5:59:7a:ef:bb:
         68:fb:09:2c:39:97:6d:17:fb:f0:2e:ab:29:98:51:4d:71:28:
         75:7f:e6:91:76:21:b2:71:22:a3:d0:40:90:8c:72:5e:e1:1d:
         08:ad:b9:da:53:18:ce:e8:02:07:3f:43:06:e8:1e:c1:1b:41:
         9b:43:27:f0:47:aa:40:64:31:87:de:65:22:91:32:0e:39:dd:
         7c:25:17:b8:82:2c:e0:2f:35:9c:9e:2e:23:2d:07:a4:da:d3:
         06:ef:4e:10:9a:b4:ae:47:9e:d5:22:44:9a:d0:39:7d:fe:72:
         6e:7b:dd:19:ad:c6:84:69:fe:7b:91:94:67:b8:02:40:01:3f:
         c2:80:15:a3:1d:6f:1c:63:6e:ce:a4:fd:3a:26:e7:bf:68:4c:
         44:86:83:cb:18:4f:91:3d:5b:d8:0e:a3:d0:bf:2b:57:65:ff:
         a0:61:24:77:b5:e6:a4:fc:04:28:c6:de:97:87:be:df:fb:2a:
         1e:62:3c:7c:b0:89:e4:a4:cf:4a:0a:04:d2:49:3f:0a:f1:8f:
         94:bd:77:ed:5f:ce:73:d6:10:e3:7d:1c:44:36:97:64:1e:b7:
         e4:d8:4b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:09:22 2026 by rpki-client