This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C383962F0CB0251601C519176CC875B435E4DD12.cer
File:                     C383962F0CB0251601C519176CC875B435E4DD12.cer (raw, json)
Hash identifier:          CgEDxu4ND2nb3NVLgi+1qBV9PCY9bnDr7o+YLOHciZU=
Subject key identifier:   C3:83:96:2F:0C:B0:25:16:01:C5:19:17:6C:C8:75:B4:35:E4:DD:12
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       190E1BE53BA1C65EC2579F4CCB87D31D0A65CF53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/C383962F0CB0251601C519176CC875B435E4DD12.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Jan 2026 04:58:24 +0000
Certificate not after:    Tue 19 Jan 2027 05:03:24 +0000
Subordinate resources:    AS: 264178
                          IP: 138.99.72.0/22
                          IP: 2804:23b4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0e:1b:e5:3b:a1:c6:5e:c2:57:9f:4c:cb:87:d3:1d:0a:65:cf:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 20 04:58:24 2026 GMT
            Not After : Jan 19 05:03:24 2027 GMT
        Subject: CN=C383962F0CB0251601C519176CC875B435E4DD12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:82:41:f9:b4:0d:13:9b:67:a0:3c:69:cf:
                    c5:d8:22:98:8d:b8:c7:25:58:d0:55:bf:eb:c1:13:
                    67:07:1a:6f:c2:53:8e:76:80:06:28:54:97:c8:aa:
                    b9:66:fa:67:83:63:fc:60:37:cc:ad:40:c7:05:aa:
                    dd:a0:7a:23:eb:bc:69:a2:4d:75:b8:8d:b5:e4:77:
                    7f:57:91:a9:7d:77:62:54:d9:22:07:a6:a5:f5:c8:
                    aa:55:ff:43:8a:56:8d:88:79:c9:1e:f0:08:27:42:
                    94:7d:41:ad:c7:67:a5:03:69:c1:e9:c5:2e:93:35:
                    d2:5e:64:e6:31:c2:1b:99:6b:aa:bb:7d:6f:c5:d9:
                    38:0a:3e:63:b7:02:94:59:f5:51:55:71:b2:05:1c:
                    cb:5d:e6:1f:86:54:a0:ac:6e:1a:53:05:2b:d2:3e:
                    15:39:6d:04:a0:32:d8:47:38:2a:c6:bc:a0:55:6b:
                    9b:db:c7:83:76:9b:64:14:52:9b:c1:b8:72:fa:8d:
                    ad:c4:ff:e8:c1:e6:63:f6:ce:69:97:8b:a8:50:b3:
                    d7:50:8a:45:65:af:15:0e:30:2b:a1:b7:d3:af:04:
                    b6:de:31:30:d2:92:0c:d0:d6:f9:cc:ed:cb:f1:a4:
                    8a:a7:5f:7f:8e:ec:44:6d:06:0a:12:7d:63:99:0f:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:83:96:2F:0C:B0:25:16:01:C5:19:17:6C:C8:75:B4:35:E4:DD:12
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/C383962F0CB0251601C519176CC875B435E4DD12.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.72.0/22
                IPv6:
                  2804:23b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264178

    Signature Algorithm: sha256WithRSAEncryption
         61:67:17:31:f7:57:bb:14:cd:af:3e:31:cd:18:9c:f9:26:90:
         ae:5c:54:fa:f7:c8:f3:9b:d7:d2:7d:3b:cf:fd:e2:23:62:fd:
         14:8a:3e:5c:70:94:97:01:8e:fb:21:87:22:e9:f6:aa:43:4e:
         b7:bb:35:ac:6c:82:97:f3:3d:e1:fb:73:e4:34:5d:57:76:11:
         71:da:41:e9:c8:3a:c8:f7:ed:eb:cf:a3:29:31:67:a7:c1:bd:
         f5:4f:a8:ea:1a:07:73:7e:18:02:f7:25:63:b3:c2:f5:85:e1:
         05:89:6d:80:1c:fb:50:d4:3b:ed:ff:ca:bc:1b:b9:a5:a3:a6:
         d6:ff:5a:a9:39:46:94:83:b3:03:0f:50:63:0e:46:6b:5a:c5:
         70:29:ef:a4:60:1d:e7:7d:e4:c4:4e:68:ba:72:d1:dc:4a:4c:
         f4:82:a4:79:3c:c3:41:74:85:03:9c:38:bf:35:5d:6e:b5:69:
         d1:fc:3b:99:28:e1:63:6f:2c:2b:0b:1f:1b:86:fa:24:60:14:
         88:da:bc:37:fd:ac:7b:b3:6a:be:01:cf:5d:54:b4:08:0d:8b:
         90:e8:f7:4e:92:9a:01:fa:89:fb:4d:3c:45:d2:dc:b3:2e:1d:
         c5:d5:82:84:de:52:97:22:e5:7b:84:8b:73:62:67:7c:a0:e4:
         35:02:dd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----