This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.cer
File:                     C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.cer (raw, json)
Hash identifier:          8SfcFRfyj3qKTW9kaWJnrV/9s1nEogtmJJLEyYMfM6g=
Subject key identifier:   C4:B0:46:63:F9:DE:2C:28:14:BA:90:68:A5:3C:9D:70:64:FD:CC:F0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4E7388988135626488D9EAB0EE40BB78ED69882C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Jan 2026 20:58:20 +0000
Certificate not after:    Thu 14 Jan 2027 21:03:20 +0000
Subordinate resources:    AS: 273459
                          IP: 2804:8ef8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:73:88:98:81:35:62:64:88:d9:ea:b0:ee:40:bb:78:ed:69:88:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 15 20:58:20 2026 GMT
            Not After : Jan 14 21:03:20 2027 GMT
        Subject: CN=C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:bc:13:3f:ff:fd:6a:78:6d:41:fd:f7:d1:
                    ec:6f:7d:c8:57:2e:f0:16:4f:ee:f1:0f:a1:df:36:
                    a3:12:7d:8e:37:be:44:48:13:58:f6:4d:1a:9c:e7:
                    78:5b:8f:f3:7b:d8:bf:f6:32:b4:aa:4f:ef:41:61:
                    b7:a2:34:9f:80:ee:da:fc:41:95:db:47:53:01:64:
                    d9:9a:84:9a:58:3a:cc:de:cd:cf:85:61:4b:65:d9:
                    f1:96:2b:47:f3:eb:d4:7f:b3:b2:95:d1:f5:53:4c:
                    0a:ba:b9:71:25:e1:10:28:41:b2:7b:f6:77:4c:8b:
                    f6:26:ba:d6:d0:dc:a2:c4:a3:22:51:0c:fc:37:ff:
                    26:c7:7b:74:a2:7f:1f:1e:3f:ea:07:95:ac:b8:2c:
                    50:0a:a7:49:4e:4b:55:2b:be:bf:2d:35:ca:ba:26:
                    cc:70:f7:52:70:ab:62:78:f8:5c:ab:3f:77:7c:8e:
                    9d:eb:48:d6:dd:ca:12:8a:1f:ad:f9:b7:22:51:9e:
                    f7:0f:1c:db:f0:a0:59:54:38:36:75:59:9d:43:32:
                    54:c3:88:89:99:e6:ee:06:ab:ab:20:bf:66:63:e3:
                    70:32:06:b3:b8:37:e0:cd:9c:4d:8d:6a:b0:af:ea:
                    40:99:11:84:de:87:cc:e1:3c:e6:eb:65:d3:87:55:
                    03:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:B0:46:63:F9:DE:2C:28:14:BA:90:68:A5:3C:9D:70:64:FD:CC:F0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273459

    Signature Algorithm: sha256WithRSAEncryption
         31:3a:ce:87:61:75:2a:e1:5d:48:7d:38:9d:c8:3f:d2:37:20:
         f5:3c:c0:e3:bc:69:4e:5f:5b:4b:d7:43:b5:1b:16:a2:ed:0d:
         5f:49:1b:9f:dc:c0:9a:db:fc:8d:ea:90:fc:00:85:9e:42:97:
         af:ab:36:c4:67:24:84:c9:1c:f3:10:ee:c9:b8:b2:4c:66:07:
         65:65:0a:3b:2a:b7:b3:2b:f9:1f:65:9c:a4:1f:c5:99:26:2d:
         9a:7f:7a:88:1e:d1:e6:28:1b:b2:d7:9f:11:aa:d3:99:b8:a3:
         5d:7c:3f:2b:e4:05:28:a1:36:5d:1b:95:b0:7c:4e:10:d4:f6:
         48:1b:e6:d9:6c:a7:91:14:d4:d2:bb:70:55:66:96:a4:6b:64:
         73:89:5d:1c:ec:e5:4a:71:59:b2:e2:66:6c:3d:4f:7b:6d:af:
         c2:ec:ce:2e:14:8e:bf:3a:f4:ae:c1:07:40:d8:2e:c9:23:0e:
         42:92:33:d8:90:6e:9e:9e:3a:e3:0d:4d:ae:3c:4a:d2:0c:54:
         99:ff:75:67:d8:84:62:a5:8c:3e:94:8f:cf:ec:8b:7d:49:dd:
         6f:3a:52:3d:32:01:97:14:a0:8a:b5:fe:9b:9b:9b:65:16:65:
         92:69:d6:b6:68:80:a9:53:63:fe:14:2f:30:64:5b:89:2f:91:
         b0:96:6b:7e
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIUTnOImIE1YmSI2eqw7kC7eO1piCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMTUyMDU4MjBaFw0yNzAxMTQyMTAzMjBaMDMxMTAvBgNV
BAMTKEM0QjA0NjYzRjlERTJDMjgxNEJBOTA2OEE1M0M5RDcwNjRGRENDRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+cbwTP//9anhtQf330exvfchX
LvAWT+7xD6HfNqMSfY43vkRIE1j2TRqc53hbj/N72L/2MrSqT+9BYbeiNJ+A7tr8
QZXbR1MBZNmahJpYOszezc+FYUtl2fGWK0fz69R/s7KV0fVTTAq6uXEl4RAoQbJ7
9ndMi/YmutbQ3KLEoyJRDPw3/ybHe3Sifx8eP+oHlay4LFAKp0lOS1Urvr8tNcq6
Jsxw91Jwq2J4+FyrP3d8jp3rSNbdyhKKH635tyJRnvcPHNvwoFlUODZ1WZ1DMlTD
iImZ5u4Gq6sgv2Zj43AyBrO4N+DNnE2NarCv6kCZEYTeh8zhPObrZdOHVQMvAgMB
AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTEsEZj+d4sKBS6
kGilPJ1wZP3M8DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWHNt
ZnFkd25DTFNaWlo2TWlEOVVmUmQxcUVIOVJDVjhneHl2QjhrREVFVC8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWHNt
ZnFkd25DTFNaWlo2TWlEOVVmUmQxcUVIOVJDVjhneHl2QjhrREVFVC8wL0M0QjA0
NjYzRjlERTJDMjgxNEJBOTA2OEE1M0M5RDcwNjRGRENDRjAubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEjvgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCwz
MA0GCSqGSIb3DQEBCwUAA4IBAQAxOs6HYXUq4V1IfTidyD/SNyD1PMDjvGlOX1tL
10O1Gxai7Q1fSRuf3MCa2/yN6pD8AIWeQpevqzbEZySEyRzzEO7JuLJMZgdlZQo7
KrezK/kfZZykH8WZJi2af3qIHtHmKBuy158RqtOZuKNdfD8r5AUooTZdG5WwfE4Q
1PZIG+bZbKeRFNTSu3BVZpaka2RziV0c7OVKcVmy4mZsPU97ba/C7M4uFI6/OvSu
wQdA2C7JIw5CkjPYkG6enjrjDU2uPErSDFSZ/3Vn2IRipYw+lI/P7It9Sd1vOlI9
MgGXFKCKtf6bm5tlFmWSada2aICpU2P+FC8wZFuJL5Gwlmt+
-----END CERTIFICATE-----