This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF68367BA9C194E56265EA3689DA1A2E695ABC42.cer
File:                     BF68367BA9C194E56265EA3689DA1A2E695ABC42.cer (raw, json)
Hash identifier:          4Qojm9LVrHMIxVgsmsB+s0uJ+vWWAe9CJ+fCi1rd7HE=
Subject key identifier:   BF:68:36:7B:A9:C1:94:E5:62:65:EA:36:89:DA:1A:2E:69:5A:BC:42
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5FBDE60ACE509C57A0F96AE65B9AF397A034F302
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Jan 2026 05:35:15 +0000
Certificate not after:    Sun 17 Jan 2027 05:40:15 +0000
Subordinate resources:    AS: 271550
                          IP: 181.232.240.0/22
                          IP: 2804:7d44::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bd:e6:0a:ce:50:9c:57:a0:f9:6a:e6:5b:9a:f3:97:a0:34:f3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 18 05:35:15 2026 GMT
            Not After : Jan 17 05:40:15 2027 GMT
        Subject: CN=BF68367BA9C194E56265EA3689DA1A2E695ABC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0a:63:e4:d7:b2:3e:a1:d3:83:94:f4:5e:49:
                    65:e1:dd:63:e5:9b:99:ea:1e:d2:88:4a:23:ce:09:
                    2d:15:27:cb:38:84:59:4f:da:e0:59:8f:e9:af:a6:
                    0e:0f:a3:9b:88:84:20:f8:79:32:3f:16:f0:af:a9:
                    3d:ea:a4:1e:19:37:3a:90:cb:84:14:12:6f:20:02:
                    46:96:58:73:84:fe:97:ab:6d:32:f6:f3:06:bd:23:
                    e2:e3:6a:6d:7e:9b:fa:a5:a4:34:38:cb:13:c3:a7:
                    20:86:4a:f6:78:22:7f:55:3e:a7:e3:73:09:ea:29:
                    44:e2:4f:e9:38:ea:cb:5c:81:98:f0:b5:cf:46:3b:
                    ee:ac:04:f6:1f:b3:90:f9:9b:88:03:51:a3:71:49:
                    68:65:6d:bc:d9:63:f6:e6:d9:8d:3b:7f:8c:a3:3f:
                    c2:29:af:ae:a7:bf:7c:16:d6:62:0e:fd:b6:07:8f:
                    ae:00:be:57:cb:d6:c3:b5:c9:7f:83:f5:47:49:25:
                    53:9f:7a:63:9d:f5:f4:44:41:e5:ed:a0:0b:5f:a7:
                    07:4b:02:d4:52:31:a0:0e:19:94:46:39:09:97:29:
                    ed:4e:3b:90:08:7d:72:3b:04:c2:fc:ce:88:c2:6e:
                    06:29:aa:85:f2:22:2f:43:28:79:b0:a0:50:16:b2:
                    43:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:68:36:7B:A9:C1:94:E5:62:65:EA:36:89:DA:1A:2E:69:5A:BC:42
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.240.0/22
                IPv6:
                  2804:7d44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271550

    Signature Algorithm: sha256WithRSAEncryption
         6c:65:83:79:4a:0b:be:64:69:f0:dc:45:0d:d0:ed:95:dd:4b:
         c0:1f:00:f4:98:22:97:5e:6e:78:b3:c5:6a:41:95:32:4b:45:
         8b:f4:de:4d:20:35:37:66:18:47:06:b3:e6:9c:53:60:63:c9:
         18:ed:d7:12:51:3a:d2:ba:58:b7:da:db:fb:c8:a0:ca:1a:2a:
         f4:bb:ab:7b:bf:33:3c:75:25:1b:b4:a3:42:30:7a:49:c6:28:
         b9:04:d0:b0:54:b0:b0:9a:77:02:d5:58:d8:7e:66:e1:a4:64:
         af:b9:dc:fa:bf:23:5e:e8:cc:23:0a:a2:49:84:7c:85:18:de:
         55:af:8e:84:81:f4:47:6a:73:9a:ea:79:bf:79:f7:74:13:e7:
         df:75:bd:05:c9:38:59:ad:af:76:93:e1:85:ba:c6:af:d1:35:
         61:5c:9b:dc:d1:64:f8:9f:58:91:3c:68:54:f5:6d:71:3d:2a:
         46:16:ca:f2:d3:02:4d:cc:df:5c:e8:eb:01:54:3a:64:23:45:
         d5:fc:7c:a5:a0:61:70:13:31:20:69:f2:ef:4c:d2:4a:dd:42:
         e4:12:b5:0c:6f:b8:e9:59:b4:68:ba:ec:de:38:94:f8:16:b4:
         13:d1:a9:7e:f8:04:7e:97:9a:8a:85:0d:d2:e7:6a:37:ad:34:
         11:83:08:7d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUX73mCs5QnFeg+WrmW5rzl6A08wIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMTgwNTM1MTVaFw0yNzAxMTcwNTQwMTVaMDMxMTAvBgNV
BAMTKEJGNjgzNjdCQTlDMTk0RTU2MjY1RUEzNjg5REExQTJFNjk1QUJDNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcCmPk17I+odODlPReSWXh3WPl
m5nqHtKISiPOCS0VJ8s4hFlP2uBZj+mvpg4Po5uIhCD4eTI/FvCvqT3qpB4ZNzqQ
y4QUEm8gAkaWWHOE/perbTL28wa9I+Ljam1+m/qlpDQ4yxPDpyCGSvZ4In9VPqfj
cwnqKUTiT+k46stcgZjwtc9GO+6sBPYfs5D5m4gDUaNxSWhlbbzZY/bm2Y07f4yj
P8Ipr66nv3wW1mIO/bYHj64AvlfL1sO1yX+D9UdJJVOfemOd9fREQeXtoAtfpwdL
AtRSMaAOGZRGOQmXKe1OO5AIfXI7BML8zojCbgYpqoXyIi9DKHmwoFAWskOtAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/aDZ7qcGU5WJl
6jaJ2houaVq8QjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnpj
WHhtNjg4VWR6VG5IQ0tQazQ5ZlNDVjZUYzU4VFRIS3VBNWtrZWRrWFIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ6
Y1h4bTY4OFVkelRuSENLUGs0OWZTQ1Y2VGM1OFRUSEt1QTVra2Vka1hSLzAvQkY2
ODM2N0JBOUMxOTRFNTYyNjVFQTM2ODlEQTFBMkU2OTVBQkM0Mi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCtejwMA0EAgACMAcDBQAoBH1EMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQkvjANBgkqhkiG9w0BAQsFAAOCAQEAbGWDeUoLvmRp8NxF
DdDtld1LwB8A9Jgil15ueLPFakGVMktFi/TeTSA1N2YYRwaz5pxTYGPJGO3XElE6
0rpYt9rb+8igyhoq9Lure78zPHUlG7SjQjB6ScYouQTQsFSwsJp3AtVY2H5m4aRk
r7nc+r8jXujMIwqiSYR8hRjeVa+OhIH0R2pzmup5v3n3dBPn33W9Bck4Wa2vdpPh
hbrGr9E1YVyb3NFk+J9YkTxoVPVtcT0qRhbK8tMCTczfXOjrAVQ6ZCNF1fx8paBh
cBMxIGny70zSSt1C5BK1DG+46Vm0aLrs3jiU+Ba0E9GpfvgEfpeaioUN0udqN600
EYMIfQ==
-----END CERTIFICATE-----