This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.cer
File:                     AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.cer (raw, json)
Hash identifier:          mIdAsJHTrg9IxNos9kFPAnNEb0FiQwuqK5J5dXAqQsY=
Subject key identifier:   AE:79:3E:3F:B8:E1:E7:F9:17:2E:5E:9E:E5:8E:B4:D2:29:37:44:3D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F202BB33BA6EE5B155356EC6CDC306B56A91945
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Jan 2026 22:18:45 +0000
Certificate not after:    Thu 14 Jan 2027 22:23:45 +0000
Subordinate resources:    AS: 268151
                          IP: 45.170.76.0/22
                          IP: 138.59.152.0/22
                          IP: 2804:58d0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:20:2b:b3:3b:a6:ee:5b:15:53:56:ec:6c:dc:30:6b:56:a9:19:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 15 22:18:45 2026 GMT
            Not After : Jan 14 22:23:45 2027 GMT
        Subject: CN=AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:a7:fe:67:5e:bd:78:b0:34:f2:4a:a2:d6:
                    ef:5c:42:1e:2f:31:01:fd:d0:ac:e0:65:ef:c4:db:
                    15:7f:e3:b9:dd:70:f3:d6:5e:90:40:0e:03:a2:00:
                    25:a5:c4:39:d0:f2:cf:90:f8:27:87:1a:de:e9:1f:
                    43:a9:14:da:17:48:04:58:6b:6a:4b:58:90:69:d7:
                    dd:3a:17:6c:55:1f:6b:3e:0c:78:f2:79:ce:df:69:
                    f2:19:93:2d:69:61:b3:68:68:cc:0f:a0:f7:cf:5e:
                    aa:29:18:c6:e3:cd:a1:9f:6e:4d:c5:8c:26:0b:b1:
                    a9:fe:47:99:bb:11:85:01:33:ab:fd:99:7b:d3:8d:
                    4f:fb:e1:fd:f5:56:a6:85:67:e7:3b:2a:68:84:07:
                    a3:fa:5e:32:9a:5d:ea:3b:cd:f9:b6:33:92:13:20:
                    06:77:0c:a9:5a:cf:2a:27:fb:06:28:5f:fd:7a:5b:
                    b5:b6:ec:c8:58:6a:79:8d:fe:17:58:0a:19:c4:90:
                    b3:aa:ff:c2:a0:51:be:d2:1a:5d:b8:ae:ce:b1:2e:
                    a5:16:48:d3:c6:1b:a7:58:45:9e:54:81:20:8e:8d:
                    45:39:40:83:b6:38:ca:3a:84:9c:d7:71:24:6f:81:
                    ba:12:12:bc:bd:6a:76:8d:84:47:3f:aa:4d:f2:67:
                    de:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:79:3E:3F:B8:E1:E7:F9:17:2E:5E:9E:E5:8E:B4:D2:29:37:44:3D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.76.0/22
                  138.59.152.0/22
                IPv6:
                  2804:58d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268151

    Signature Algorithm: sha256WithRSAEncryption
         1e:c4:19:40:eb:f4:0e:a8:0d:1f:07:77:04:db:b8:7d:a5:66:
         9c:43:1f:45:62:ed:4a:2c:68:59:05:42:41:ec:de:24:ae:b0:
         b4:57:a7:c0:16:28:87:fc:85:c0:fb:2d:95:b3:42:19:5f:8e:
         b1:55:c8:e7:b0:c2:7e:8a:fe:58:ec:5e:e9:42:26:9e:12:eb:
         db:9b:9b:88:85:5b:da:c0:25:a1:26:f1:e0:35:a4:a7:af:75:
         cb:3b:a5:4e:4e:83:71:32:5d:be:85:7a:2f:70:d2:ba:76:64:
         dd:f1:b7:a1:25:62:d1:ec:5a:7e:d8:f2:d0:83:83:9b:5b:27:
         b6:f4:81:b2:a2:3f:33:ca:5a:01:33:82:40:25:8b:fa:9d:63:
         34:6e:e6:bb:de:c3:f4:a7:54:c6:76:3c:bb:13:58:41:0d:f5:
         18:83:30:f4:ee:15:10:3d:5a:b5:f3:d5:6c:a5:73:8d:55:13:
         94:ac:28:35:ae:fa:0f:f4:91:6d:18:f5:f7:18:57:a1:95:7a:
         2d:e1:13:d3:ca:3b:72:d5:f5:c0:4e:6f:09:21:b0:40:85:42:
         3b:3c:c6:45:4b:3f:bb:80:da:c9:3f:13:61:fe:ee:21:42:3e:
         dd:66:bb:5a:5d:f9:8a:07:0a:96:ad:db:b5:07:b5:59:f5:1c:
         9b:5e:57:b9
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIULyArszum7lsVU1bsbNwwa1apGUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMTUyMjE4NDVaFw0yNzAxMTQyMjIzNDVaMDMxMTAvBgNV
BAMTKEFFNzkzRTNGQjhFMUU3RjkxNzJFNUU5RUU1OEVCNEQyMjkzNzQ0M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLeaf+Z169eLA08kqi1u9cQh4v
MQH90KzgZe/E2xV/47ndcPPWXpBADgOiACWlxDnQ8s+Q+CeHGt7pH0OpFNoXSARY
a2pLWJBp1906F2xVH2s+DHjyec7fafIZky1pYbNoaMwPoPfPXqopGMbjzaGfbk3F
jCYLsan+R5m7EYUBM6v9mXvTjU/74f31VqaFZ+c7KmiEB6P6XjKaXeo7zfm2M5IT
IAZ3DKlazyon+wYoX/16W7W27MhYanmN/hdYChnEkLOq/8KgUb7SGl24rs6xLqUW
SNPGG6dYRZ5UgSCOjUU5QIO2OMo6hJzXcSRvgboSEry9anaNhEc/qk3yZ94XAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSueT4/uOHn+Rcu
Xp7ljrTSKTdEPTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGFG
SDhISHJvaWZDQjVlTGZmSmpTSHM4TDREa3pvVG1DS3dtRG9YYWZxWW0vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhh
Rkg4SEhyb2lmQ0I1ZUxmZkpqU0hzOEw0RGt6b1RtQ0t3bURvWGFmcVltLzAvQUU3
OTNFM0ZCOEUxRTdGOTE3MkU1RTlFRTU4RUI0RDIyOTM3NDQzRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCLapMAwQCijuYMA0EAgACMAcDBQAoBFjQMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQXdzANBgkqhkiG9w0BAQsFAAOCAQEAHsQZQOv0
DqgNHwd3BNu4faVmnEMfRWLtSixoWQVCQezeJK6wtFenwBYoh/yFwPstlbNCGV+O
sVXI57DCfor+WOxe6UImnhLr25ubiIVb2sAloSbx4DWkp691yzulTk6DcTJdvoV6
L3DSunZk3fG3oSVi0exaftjy0IODm1sntvSBsqI/M8paATOCQCWL+p1jNG7mu97D
9KdUxnY8uxNYQQ31GIMw9O4VED1atfPVbKVzjVUTlKwoNa76D/SRbRj19xhXoZV6
LeET08o7ctX1wE5vCSGwQIVCOzzGRUs/u4DayT8TYf7uIUI+3Wa7Wl35igcKlq3b
tQe1WfUcm15XuQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:48:37 2026 by rpki-client