This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.cer
File:                     BF8ED8F6E25060930593D3682BBEAA1A08356BAC.cer (raw, json)
Hash identifier:          R1cIEt8LfhrVWS/pTQcOS/HTvzkQw3w5KP/8NYdSaoQ=
Subject key identifier:   BF:8E:D8:F6:E2:50:60:93:05:93:D3:68:2B:BE:AA:1A:08:35:6B:AC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       65F5BBF735B21B7DC671EEAE7FAE7DA6DAEBD09D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Jan 2026 12:29:20 +0000
Certificate not after:    Wed 06 Jan 2027 12:34:20 +0000
Subordinate resources:    AS: 269526
                          IP: 45.186.244.0/22
                          IP: 2804:65fc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f5:bb:f7:35:b2:1b:7d:c6:71:ee:ae:7f:ae:7d:a6:da:eb:d0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  7 12:29:20 2026 GMT
            Not After : Jan  6 12:34:20 2027 GMT
        Subject: CN=BF8ED8F6E25060930593D3682BBEAA1A08356BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7b:7f:cb:28:37:02:df:7e:8b:e7:b4:1b:df:
                    60:d3:30:fc:10:a9:a7:1b:1c:46:2e:86:e3:41:bc:
                    ca:6d:7b:34:59:7b:5a:ae:b2:16:48:1b:51:8e:1f:
                    2b:16:18:f1:b3:06:9c:13:91:4d:1a:ab:82:b9:1f:
                    c2:0b:10:da:2e:dd:0b:ea:50:99:ea:fb:98:c4:74:
                    12:4c:94:ba:af:36:dd:61:9f:9e:c6:66:e5:fe:79:
                    e6:ab:67:d4:ca:70:01:4c:b5:90:f0:11:87:d6:de:
                    af:72:4e:24:3a:8c:ad:7e:b2:68:d4:ee:02:09:a9:
                    4f:8a:25:6e:77:66:8e:fd:8e:65:8f:a6:fc:ce:4d:
                    31:38:6d:14:48:9e:95:b1:b4:5e:6a:6e:f5:10:66:
                    fd:90:e8:85:79:9d:1c:25:56:38:92:4b:9e:6e:d1:
                    7c:e9:8a:86:7f:09:67:64:59:c8:a5:18:1a:4d:b2:
                    b3:74:ab:3e:2b:85:d3:72:bf:00:04:ac:6d:c0:f7:
                    7f:4d:bc:0f:a4:b6:84:c9:f7:b8:f4:c6:34:15:d3:
                    89:11:c6:21:e1:56:77:f0:3c:52:ab:fa:f8:91:77:
                    d1:cf:11:7f:19:d8:fa:3d:97:8b:76:c8:65:92:9d:
                    8a:bd:26:44:02:2c:7d:14:0e:49:1e:89:48:a5:6a:
                    c0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:8E:D8:F6:E2:50:60:93:05:93:D3:68:2B:BE:AA:1A:08:35:6B:AC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.244.0/22
                IPv6:
                  2804:65fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269526

    Signature Algorithm: sha256WithRSAEncryption
         99:9a:ac:87:c6:14:bf:4a:b6:51:b5:38:f0:9d:54:3f:f4:41:
         79:4d:a8:e2:e1:fc:cf:1d:9c:8c:3a:b6:be:e0:3e:42:32:4c:
         b8:b9:ab:3f:e1:63:d8:a3:92:30:19:e8:88:73:cf:e6:b8:bf:
         5e:65:8f:c7:fd:b1:82:58:a4:a8:9f:47:92:55:1f:b9:e6:70:
         9b:53:d9:5c:b5:0b:5c:55:67:b0:e8:1d:1a:dc:e9:9d:dd:8e:
         26:5b:a3:f9:92:a5:a9:8f:a2:9b:bc:5f:3e:f3:ab:ce:ee:aa:
         8d:3e:e9:82:00:89:12:5f:f9:4d:02:d0:5a:c3:af:7b:da:5a:
         fa:db:9b:e3:64:d4:e9:a4:50:a2:c5:e7:f1:15:94:ea:e8:2e:
         c3:a9:2b:9c:f4:11:3b:2f:9d:f9:5d:84:f6:bf:c7:e5:68:02:
         dc:14:29:84:b8:8d:58:c2:9c:51:a7:76:d8:dd:2a:00:20:72:
         39:c3:92:a1:2f:a8:cb:d9:92:4f:b6:b1:3b:61:94:24:82:2e:
         c7:ec:73:18:0b:d0:16:7a:37:02:c7:5c:88:f1:0f:73:52:48:
         36:89:dc:f8:ec:bd:5d:8d:2a:6f:b4:8d:32:40:bb:c4:75:37:
         0d:35:2c:65:90:2a:88:43:03:0e:71:81:5d:91:88:42:74:58:
         b4:68:96:30
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUZfW79zWyG33Gce6uf659ptrr0J0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMDcxMjI5MjBaFw0yNzAxMDYxMjM0MjBaMDMxMTAvBgNV
BAMTKEJGOEVEOEY2RTI1MDYwOTMwNTkzRDM2ODJCQkVBQTFBMDgzNTZCQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPe3/LKDcC336L57Qb32DTMPwQ
qacbHEYuhuNBvMptezRZe1qushZIG1GOHysWGPGzBpwTkU0aq4K5H8ILENou3Qvq
UJnq+5jEdBJMlLqvNt1hn57GZuX+eearZ9TKcAFMtZDwEYfW3q9yTiQ6jK1+smjU
7gIJqU+KJW53Zo79jmWPpvzOTTE4bRRInpWxtF5qbvUQZv2Q6IV5nRwlVjiSS55u
0XzpioZ/CWdkWcilGBpNsrN0qz4rhdNyvwAErG3A939NvA+ktoTJ97j0xjQV04kR
xiHhVnfwPFKr+viRd9HPEX8Z2Po9l4t2yGWSnYq9JkQCLH0UDkkeiUilasDhAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/jtj24lBgkwWT
02grvqoaCDVrrDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0x4
cDh1d25GYU5na1F5VXlYcE1DdzZxV0p0cjFaaVFyZUtHb2ZKZVZ4cGcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NM
eHA4dXduRmFOZ2tReVV5WHBNQ3c2cVdKdHIxWmlRcmVLR29mSmVWeHBnLzAvQkY4
RUQ4RjZFMjUwNjA5MzA1OTNEMzY4MkJCRUFBMUEwODM1NkJBQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbr0MA0EAgACMAcDBQAoBGX8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQc1jANBgkqhkiG9w0BAQsFAAOCAQEAmZqsh8YUv0q2UbU4
8J1UP/RBeU2o4uH8zx2cjDq2vuA+QjJMuLmrP+Fj2KOSMBnoiHPP5ri/XmWPx/2x
glikqJ9HklUfueZwm1PZXLULXFVnsOgdGtzpnd2OJluj+ZKlqY+im7xfPvOrzu6q
jT7pggCJEl/5TQLQWsOve9pa+tub42TU6aRQosXn8RWU6uguw6krnPQROy+d+V2E
9r/H5WgC3BQphLiNWMKcUad22N0qACByOcOSoS+oy9mST7axO2GUJIIux+xzGAvQ
Fno3AsdciPEPc1JINonc+Oy9XY0qb7SNMkC7xHU3DTUsZZAqiEMDDnGBXZGIQnRY
tGiWMA==
-----END CERTIFICATE-----