This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B3D9B5FC4A61D9ED08CD952521684C1D0C718C76.cer
File:                     B3D9B5FC4A61D9ED08CD952521684C1D0C718C76.cer (raw, json)
Hash identifier:          4MIwka7f82LfpGQx0ZeqIzkowrjzOALadW4ebZQ4L+0=
Subject key identifier:   B3:D9:B5:FC:4A:61:D9:ED:08:CD:95:25:21:68:4C:1D:0C:71:8C:76
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57025AF23236A47650EF1B32114DBCD18CC0DF13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/B3D9B5FC4A61D9ED08CD952521684C1D0C718C76.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Jan 2026 17:53:06 +0000
Certificate not after:    Fri 08 Jan 2027 17:58:06 +0000
Subordinate resources:    AS: 273334
                          IP: 2804:8d18::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:02:5a:f2:32:36:a4:76:50:ef:1b:32:11:4d:bc:d1:8c:c0:df:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  9 17:53:06 2026 GMT
            Not After : Jan  8 17:58:06 2027 GMT
        Subject: CN=B3D9B5FC4A61D9ED08CD952521684C1D0C718C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:f5:1c:59:6f:17:ef:14:5d:8d:87:cd:a0:
                    0f:ff:2e:18:d2:e7:43:5f:99:1d:fd:13:1e:a7:70:
                    7b:7e:4e:ac:80:95:d1:c8:03:2b:f7:d4:a9:27:3d:
                    99:f0:b9:df:60:5e:cb:b0:e0:00:bb:2e:69:25:fd:
                    c0:8b:7e:2f:03:00:82:c7:99:c2:f2:aa:05:e2:6d:
                    9f:7a:85:3d:fe:53:3a:d7:74:df:3b:eb:f9:9f:37:
                    52:03:39:e7:87:71:34:93:39:0c:7e:04:82:e3:e4:
                    53:ab:98:4b:14:27:6a:41:3d:89:c7:03:40:86:90:
                    12:5e:d3:d2:cb:0b:80:ed:f0:03:ee:77:57:c7:87:
                    93:23:cf:07:16:c4:10:a7:02:bc:0b:43:93:3d:7a:
                    68:ea:68:e9:12:a7:83:c5:ed:02:c2:9e:10:17:5b:
                    ba:bd:d7:8c:fe:27:13:40:bd:0a:af:9a:42:fd:39:
                    cf:69:03:69:76:4d:fc:6e:74:c0:00:aa:21:5d:73:
                    6f:1a:04:7e:cc:64:ce:05:39:87:18:d2:ce:51:dd:
                    74:2d:be:66:f8:68:5a:08:29:b8:f7:e2:7d:9d:c1:
                    05:cc:fb:07:f1:9b:a7:4e:5a:2c:e1:6e:49:9e:c3:
                    0e:ee:ef:de:3a:1a:a2:b0:81:52:56:a7:e9:20:dd:
                    17:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:D9:B5:FC:4A:61:D9:ED:08:CD:95:25:21:68:4C:1D:0C:71:8C:76
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/B3D9B5FC4A61D9ED08CD952521684C1D0C718C76.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273334

    Signature Algorithm: sha256WithRSAEncryption
         2b:35:0d:05:71:9e:4e:7a:a6:b7:10:1f:56:b2:6c:d7:ae:b8:
         d4:56:b1:16:1a:f8:c6:6d:5b:88:e5:02:05:3f:4c:7f:b4:2c:
         9e:28:76:d7:59:65:c3:e2:7b:0a:63:4e:53:33:d2:4a:54:93:
         1b:d1:02:c1:f9:63:d2:3d:ea:7b:8f:bb:dd:2f:05:fe:0c:b1:
         3b:3e:ff:36:58:2e:4b:21:c3:65:63:ac:4c:91:bc:4b:b8:86:
         ef:5b:6e:aa:64:c2:0a:a0:4d:91:0c:dd:34:de:bf:8f:98:50:
         4c:81:0f:54:04:17:03:53:e0:f4:36:1d:5a:ff:bf:58:12:70:
         7a:5b:02:b1:1e:3b:0f:e6:e7:4d:e6:91:9f:ea:de:dd:f9:1a:
         b0:65:a4:af:d2:55:c9:cc:e7:20:03:59:e5:e1:fc:3a:e7:83:
         91:fa:03:2d:95:40:df:d6:80:86:b4:32:59:dc:3f:50:84:3b:
         25:05:44:d3:7c:b6:a1:a7:5b:51:6a:21:bc:dc:e7:21:3c:66:
         fd:b1:72:55:fb:6d:6d:96:66:f6:21:e2:d6:a5:92:c6:90:83:
         44:9d:d9:d8:39:61:95:24:10:52:84:12:49:87:5c:a0:0d:ac:
         f2:59:2f:06:4e:69:2e:60:49:38:59:15:23:65:f0:e0:6c:1e:
         ab:49:6e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----