This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
File:                     A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer (raw, json)
Hash identifier:          mHoQ0V7f17qBQldVs06oV9k9uxxeYu36mDrgYnX68Nw=
Subject key identifier:   A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4BA691F2C8A19B5D7FC4617CA1265FAF093E0CD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 25 Jan 2026 02:02:07 +0000
Certificate not after:    Sun 24 Jan 2027 02:07:07 +0000
Subordinate resources:    AS: 28349
                          AS: 28647
                          AS: 53008
                          AS: 53067
                          AS: 53143
                          AS: 262420
                          AS: 265021
                          AS: 266206
                          AS: 267203
                          AS: 267452
                          AS: 267484
                          IP: 45.161.148.0/22
                          IP: 45.163.96.0/22
                          IP: 45.179.0.0/22
                          IP: 45.187.236.0/22
                          IP: 45.231.136.0/22
                          IP: 131.0.84.0/22
                          IP: 131.100.68.0/22
                          IP: 168.195.236.0/22
                          IP: 170.0.160.0/22
                          IP: 177.84.176.0/21
                          IP: 177.154.64.0/20
                          IP: 177.185.160.0/19
                          IP: 179.107.0.0/21
                          IP: 181.191.76.0/22
                          IP: 186.193.112.0/20
                          IP: 186.194.224.0/20
                          IP: 186.219.96.0/20
                          IP: 187.85.192.0/19
                          IP: 187.86.112.0/20
                          IP: 187.87.64.0/20
                          IP: 189.51.128.0/19
                          IP: 189.113.192.0/20
                          IP: 189.113.216.0/21
                          IP: 189.126.160.0/19
                          IP: 200.71.68.0/22
                          IP: 201.76.224.0/19
                          IP: 2804:554::/32
                          IP: 2804:a50::/32
                          IP: 2804:b1c::/32
                          IP: 2804:e50::/32
                          IP: 2804:1a68::/32
                          IP: 2804:3184::/32
                          IP: 2804:3c5c::/32
                          IP: 2804:41b8::/32
                          IP: 2804:4230::/32
                          IP: 2804:49c8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a6:91:f2:c8:a1:9b:5d:7f:c4:61:7c:a1:26:5f:af:09:3e:0c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 25 02:02:07 2026 GMT
            Not After : Jan 24 02:07:07 2027 GMT
        Subject: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:ea:b3:be:9d:5a:c2:20:eb:4c:5e:09:04:
                    cc:91:2e:15:d3:40:c0:a3:3a:db:cd:1d:54:88:7d:
                    d2:4e:db:56:21:18:09:ed:83:f6:88:b0:38:f4:2d:
                    6d:b4:a3:72:d7:8d:e5:e5:5c:f6:34:17:9c:ec:59:
                    23:8d:64:ed:d8:df:ad:1d:8b:c8:cf:65:dc:1d:b7:
                    66:ae:49:57:22:97:75:db:61:5f:e6:f0:ad:57:de:
                    fe:b6:8e:1d:5e:04:d8:29:98:79:6c:3f:3a:54:7d:
                    ca:92:7f:7d:86:40:75:94:7e:75:fd:05:04:55:83:
                    bc:41:65:92:38:a9:17:69:6c:b8:b2:37:e7:ef:41:
                    58:c1:35:d7:15:a8:0d:f7:7a:5e:03:fa:ab:5d:87:
                    97:32:84:75:57:1f:16:a7:58:d2:93:6e:c9:cb:c3:
                    7e:dc:11:a2:dd:8f:25:8b:2d:53:54:b6:94:d9:ed:
                    49:c1:da:ac:45:93:c0:f5:9c:1b:68:60:cb:38:5a:
                    69:73:8d:23:7a:02:17:80:50:76:c2:0d:12:cd:fa:
                    d3:b6:56:99:cd:bc:ea:05:94:f0:a7:a0:4d:4d:d3:
                    e9:d1:80:a5:17:a3:62:d8:d4:94:87:38:5d:4c:79:
                    39:dd:f4:5e:fe:1b:59:e6:82:90:de:a7:0b:75:78:
                    ca:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.148.0/22
                  45.163.96.0/22
                  45.179.0.0/22
                  45.187.236.0/22
                  45.231.136.0/22
                  131.0.84.0/22
                  131.100.68.0/22
                  168.195.236.0/22
                  170.0.160.0/22
                  177.84.176.0/21
                  177.154.64.0/20
                  177.185.160.0/19
                  179.107.0.0/21
                  181.191.76.0/22
                  186.193.112.0/20
                  186.194.224.0/20
                  186.219.96.0/20
                  187.85.192.0/19
                  187.86.112.0/20
                  187.87.64.0/20
                  189.51.128.0/19
                  189.113.192.0/20
                  189.113.216.0/21
                  189.126.160.0/19
                  200.71.68.0/22
                  201.76.224.0/19
                IPv6:
                  2804:554::/32
                  2804:a50::/32
                  2804:b1c::/32
                  2804:e50::/32
                  2804:1a68::/32
                  2804:3184::/32
                  2804:3c5c::/32
                  2804:41b8::/32
                  2804:4230::/32
                  2804:49c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28349
                  28647
                  53008
                  53067
                  53143
                  262420
                  265021
                  266206
                  267203
                  267452
                  267484

    Signature Algorithm: sha256WithRSAEncryption
         16:18:e4:2a:9d:d4:cf:3f:9c:0e:56:35:63:f0:54:d9:29:06:
         81:fe:9d:bb:02:ce:68:3d:6f:f5:48:65:9f:91:01:cd:fb:18:
         06:2f:d3:e7:35:0e:e2:09:c0:2e:5b:51:ef:cd:ed:0b:d3:66:
         44:ff:bc:71:43:cc:02:00:26:89:d6:8f:13:3a:24:64:5f:81:
         4b:82:64:2f:bd:e9:91:3f:0e:15:35:92:8b:00:fe:ea:82:d6:
         c8:06:8c:22:19:47:01:9c:e3:e6:79:85:25:2c:b0:1b:99:e3:
         e4:a3:a2:3f:ed:a7:81:1e:5c:d3:dc:33:ed:67:d1:d5:8a:1a:
         56:6d:51:40:f2:4a:00:5e:f2:40:01:c3:1b:93:3f:18:61:d0:
         46:ad:e2:0b:f4:83:49:8d:20:43:d5:0e:d6:bd:2a:61:4f:c9:
         d7:56:b5:4f:9c:0c:cb:be:d4:aa:75:ae:db:c0:1f:70:cc:1b:
         20:01:0e:5f:9a:7e:75:5e:ce:c9:e0:7b:4c:c7:c8:f7:de:65:
         e7:57:31:88:48:ac:d2:70:a2:e8:e1:36:cd:7a:97:97:4b:4e:
         1b:48:17:fd:4c:8f:51:60:24:8e:c2:ac:e1:73:54:08:23:8f:
         0a:42:83:b6:c2:ca:4f:49:79:09:82:55:15:c0:1b:34:61:8f:
         23:45:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:43 2026 by rpki-client