This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.cer
File:                     B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.cer (raw, json)
Hash identifier:          H7SSOXvYNUhWhWL26RbCuuRnM9o829jAZ4+t6UgP4YQ=
Subject key identifier:   B7:2B:02:84:F2:12:27:22:80:2D:B9:B2:3E:ED:E6:D2:F1:B7:EB:88
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       76D84B1E5B2AB711640E4FC3929CBB2D45254A3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Jan 2026 20:01:01 +0000
Certificate not after:    Tue 19 Jan 2027 20:06:01 +0000
Subordinate resources:    AS: 264932
                          IP: 168.232.12.0/22
                          IP: 2804:3024::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d8:4b:1e:5b:2a:b7:11:64:0e:4f:c3:92:9c:bb:2d:45:25:4a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 20 20:01:01 2026 GMT
            Not After : Jan 19 20:06:01 2027 GMT
        Subject: CN=B72B0284F2122722802DB9B23EEDE6D2F1B7EB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f1:95:06:17:26:2d:86:51:99:15:31:ff:6f:
                    95:fe:da:93:43:f5:aa:91:cf:68:47:53:00:7f:b9:
                    11:7c:17:54:7e:bf:ce:70:77:26:80:c5:91:67:35:
                    2d:7d:5f:4b:58:04:f3:15:0c:09:55:e4:ed:2f:bd:
                    48:6a:18:2b:fd:d0:dd:70:82:da:d8:cb:1f:99:5b:
                    e9:fe:dc:49:37:45:b1:a1:b8:76:87:f6:c3:a8:ea:
                    29:c5:cf:c6:e0:f3:b9:cb:94:33:db:08:d1:2b:9c:
                    e7:ac:80:87:d7:ce:17:2c:94:45:78:ed:c7:44:ba:
                    5e:be:29:5a:8d:8f:79:67:7b:4c:b7:05:7e:e0:e6:
                    4d:fa:a7:46:85:e4:5a:95:98:31:34:44:d0:c6:ae:
                    1e:c2:34:ca:26:95:97:7b:d8:38:12:73:0c:66:b1:
                    25:4e:62:b9:c3:39:01:d4:f1:13:27:0b:18:62:df:
                    a3:f0:6e:9d:50:5d:d8:29:a2:98:9a:19:d1:15:f1:
                    b7:6f:75:2d:e4:f6:79:89:af:75:53:79:2f:87:45:
                    51:26:e0:ec:5c:cd:f1:2d:5c:a4:c0:56:e3:0d:d2:
                    77:03:df:21:2c:c7:5e:70:9b:a3:c7:23:67:ae:fe:
                    09:c2:52:60:c8:65:89:a9:6d:84:f0:81:2a:97:20:
                    0b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:2B:02:84:F2:12:27:22:80:2D:B9:B2:3E:ED:E6:D2:F1:B7:EB:88
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.12.0/22
                IPv6:
                  2804:3024::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264932

    Signature Algorithm: sha256WithRSAEncryption
         10:40:46:e5:81:7e:a8:b4:98:29:c4:ed:10:45:e4:24:fa:53:
         f6:d0:7c:ec:0e:ef:eb:ec:b5:d9:5d:1e:e0:27:25:02:f2:6c:
         46:0a:fc:f9:21:c4:c6:3e:6c:b8:84:27:3d:52:24:b5:d5:32:
         1d:cb:63:31:a3:a2:33:17:5c:75:59:b0:aa:14:71:9e:3f:b5:
         0e:a3:b3:fa:3f:19:08:8f:fe:24:6d:96:dc:6b:22:14:76:cd:
         83:6f:03:45:25:24:e5:0c:06:8b:cd:a3:a1:24:2b:8f:5d:7a:
         54:db:e5:45:7a:04:d7:1a:1e:af:8e:1d:1c:72:85:7b:83:50:
         20:2a:b7:90:02:5c:17:f2:4f:c1:23:92:d6:aa:25:4f:84:c5:
         a0:0b:fb:2b:ef:60:37:16:d1:e0:0d:c9:8f:88:90:c9:4b:4c:
         49:dc:d8:eb:af:0b:8d:ac:c0:8d:06:4f:a0:b5:f2:67:a0:19:
         0f:aa:d5:a7:86:40:93:f9:0d:21:7b:7b:24:95:ae:83:b0:6e:
         59:61:14:88:40:e1:08:33:c7:8f:14:7a:9f:03:61:03:61:ef:
         34:d4:bf:05:34:3b:32:90:24:6d:ff:2d:5d:7d:81:aa:76:40:
         91:f7:df:7e:54:bd:4e:b7:90:65:ed:70:ad:2c:b5:e6:7f:2f:
         8d:50:89:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----