This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
File:                     A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer (raw, json)
Hash identifier:          Cn13uRdAq5uB4v+HeLxKC5XnxCCaaoZuxg23KbHCt4E=
Subject key identifier:   A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       244D08EA0949985524C9E6572F3C6E8E9DA3DD92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Jan 2026 00:31:55 +0000
Certificate not after:    Wed 13 Jan 2027 00:36:55 +0000
Subordinate resources:    AS: 271466
                          IP: 201.49.176.0/21
                          IP: 2804:7bf8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4d:08:ea:09:49:98:55:24:c9:e6:57:2f:3c:6e:8e:9d:a3:dd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 14 00:31:55 2026 GMT
            Not After : Jan 13 00:36:55 2027 GMT
        Subject: CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:a4:bd:01:88:1b:e0:66:fb:6c:d7:6a:b1:
                    5c:72:62:39:b3:53:05:61:b9:e5:6c:83:f0:a2:19:
                    96:e7:d7:5a:91:ef:74:d3:1c:7c:0a:79:c2:46:47:
                    3f:23:2b:d1:5c:f0:a6:87:8a:84:85:88:5b:63:de:
                    25:1a:67:57:6e:b5:9d:0a:7c:f4:c0:9a:a2:ac:2f:
                    ed:00:74:bb:c5:85:61:7f:90:4c:97:8b:24:6b:47:
                    77:19:2d:b1:9b:7b:64:64:42:c9:a8:31:8c:37:a3:
                    13:2c:7a:05:19:3b:69:7f:e6:59:eb:ed:33:22:49:
                    db:4e:84:b7:54:bc:4e:e0:b6:a6:31:e9:b2:96:1a:
                    67:c0:2d:8e:44:c0:07:0b:0b:1b:26:df:e3:c7:a7:
                    9f:39:f3:d3:46:e7:e2:57:03:af:72:6a:12:ff:69:
                    f6:8d:3e:e9:d6:ad:81:f2:58:66:6e:b6:f4:ed:c6:
                    a2:69:3f:21:82:f6:79:f2:93:7d:59:c4:ae:10:44:
                    a0:6b:99:53:f3:40:ae:27:11:68:8e:3d:9f:50:0d:
                    f5:54:7b:1f:22:e6:8e:15:f9:fc:66:16:37:b4:62:
                    fb:0c:41:8a:62:8b:e4:50:19:21:8d:43:b0:bc:9a:
                    3d:f0:cf:84:08:39:b9:bb:2d:92:d2:b0:ba:26:e3:
                    79:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.176.0/21
                IPv6:
                  2804:7bf8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271466

    Signature Algorithm: sha256WithRSAEncryption
         2b:6e:c7:7c:f8:49:74:49:88:88:3a:0d:fa:2a:44:03:0b:9d:
         f3:c2:7f:1e:33:19:43:51:52:4b:27:fc:d8:12:ac:0b:54:1b:
         ff:e3:bf:9f:ac:60:6b:ad:9e:8b:06:a4:dc:dd:21:0d:6b:35:
         d7:8b:e8:ae:4c:ed:e5:7d:e0:15:3e:27:1c:17:88:c4:b1:aa:
         30:48:a2:0b:01:45:73:31:cf:51:92:18:27:ce:63:1a:b5:b4:
         a5:df:12:09:47:75:90:c3:8e:07:83:93:f7:8a:24:f5:a4:3d:
         3c:dd:8f:3d:82:0c:93:5e:11:a2:7b:f6:18:86:df:9f:af:3d:
         06:6b:8a:4b:45:c0:d8:3a:92:51:f7:fe:7b:9e:1c:8b:7d:c7:
         38:45:e8:8c:4c:82:58:86:9e:99:84:60:fd:2c:f8:d2:ad:d0:
         9f:42:26:ca:3f:3d:5e:0b:ac:b7:39:fb:df:5b:02:e0:75:c4:
         df:af:f7:5e:cf:70:88:f4:b2:d8:57:15:ce:86:15:6a:6a:38:
         c8:b7:f7:0e:89:50:5b:8a:92:48:eb:43:b0:56:cc:42:3a:ce:
         b5:42:33:64:03:43:63:7a:3a:b6:1e:d7:c9:8e:c2:8a:3f:04:
         62:9c:26:d9:3a:68:10:40:70:7a:86:8f:6c:d2:34:31:82:55:
         f0:30:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:07:59 2026 by rpki-client