This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.cer
File:                     CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.cer (raw, json)
Hash identifier:          FKGBhypxqweaNdQjg++yNbCJa+u2oMxK3cA2RMJHP68=
Subject key identifier:   CE:4A:49:5E:5B:66:07:AC:F5:01:EE:C8:AD:41:16:6B:A1:F8:09:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1272CDE906AE1A17B072650EFD07CDA20A3F4BE3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Jan 2026 14:01:01 +0000
Certificate not after:    Sun 17 Jan 2027 14:06:01 +0000
Subordinate resources:    AS: 270632
                          IP: 189.126.80.0/22
                          IP: 2804:6f00::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:72:cd:e9:06:ae:1a:17:b0:72:65:0e:fd:07:cd:a2:0a:3f:4b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 18 14:01:01 2026 GMT
            Not After : Jan 17 14:06:01 2027 GMT
        Subject: CN=CE4A495E5B6607ACF501EEC8AD41166BA1F809FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4c:41:d2:0b:31:3c:10:b5:e9:66:b2:27:20:
                    1a:ec:7e:bf:33:95:fc:95:49:63:c1:94:4e:53:02:
                    06:85:04:dd:54:34:39:8d:76:d3:71:35:cf:59:a9:
                    a7:14:11:ae:c2:55:de:96:73:21:97:d6:45:4a:16:
                    21:49:5c:73:e2:d7:f7:cb:6e:50:4b:9d:d7:95:ee:
                    1a:69:e1:9a:e7:70:ce:68:f5:b3:c3:54:a4:c8:7e:
                    9d:0d:27:a8:ac:c7:d1:74:46:d8:0e:28:0d:c5:34:
                    dc:f7:14:0c:55:b8:49:bd:f2:a4:09:ee:dd:a8:8d:
                    4f:32:f5:26:38:64:07:7e:7c:a0:a3:05:e9:8c:7b:
                    cd:a5:7c:3a:71:96:5b:d3:bf:09:61:b4:c6:5b:f5:
                    4d:96:c2:4b:ea:db:83:aa:ef:5f:c9:82:f9:2d:6b:
                    08:bf:37:05:dc:ed:6f:39:57:66:87:52:65:7f:c2:
                    44:22:0e:12:fa:da:96:e2:8f:71:a2:72:74:24:55:
                    53:19:ea:f0:b5:65:8f:91:fb:ef:0a:e9:64:14:67:
                    8e:6f:42:fe:ae:ee:07:a1:74:ea:1c:e3:94:93:22:
                    ee:5a:a9:57:09:fa:e6:7e:b5:a9:67:78:43:78:47:
                    bf:17:da:70:c5:67:4f:d6:01:64:0e:48:e6:8d:9a:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:4A:49:5E:5B:66:07:AC:F5:01:EE:C8:AD:41:16:6B:A1:F8:09:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.80.0/22
                IPv6:
                  2804:6f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270632

    Signature Algorithm: sha256WithRSAEncryption
         3a:92:41:61:b8:e6:a0:3d:55:68:79:62:c6:1c:9a:e3:d2:b8:
         d7:78:ab:88:5b:1c:bc:50:e1:eb:45:08:97:eb:57:f9:fd:d2:
         a9:72:ab:2a:cf:84:f1:02:68:e7:27:e7:27:32:b4:27:cf:f5:
         41:92:bc:0e:d3:4a:ce:1b:e3:24:9c:a3:89:71:23:a3:77:43:
         93:ae:5c:de:56:f4:19:42:3c:c4:1c:45:a8:78:96:19:a5:dc:
         2a:34:6d:db:14:1b:94:39:45:f3:bc:a9:f6:3d:fd:0f:94:29:
         f0:28:6a:bf:c2:b1:6e:db:21:fc:4e:b2:9f:f5:41:9c:c1:0f:
         1a:9b:9f:07:d8:0f:81:60:aa:2d:93:7f:a3:7c:8d:45:bf:2c:
         73:c9:b1:00:20:0a:ae:4e:3d:1f:b6:b2:aa:e6:a3:28:b8:df:
         88:59:61:a6:47:21:f1:05:ef:45:9d:d9:98:01:11:20:fb:4f:
         92:58:32:99:28:3d:c4:6e:26:37:83:af:59:ec:57:10:51:6f:
         aa:95:b3:cd:cc:33:4d:88:c1:c9:69:d4:d8:18:0c:d8:4e:62:
         58:a5:c0:9e:c6:1d:6d:6d:52:6c:52:cf:0c:44:7d:a0:f4:ad:
         bc:37:5e:f8:43:8c:51:25:5c:2a:c9:77:08:7b:01:63:d5:f5:
         ca:4a:f3:50
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUEnLN6QauGhewcmUO/QfNogo/S+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMTgxNDAxMDFaFw0yNzAxMTcxNDA2MDFaMDMxMTAvBgNV
BAMTKENFNEE0OTVFNUI2NjA3QUNGNTAxRUVDOEFENDExNjZCQTFGODA5RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTEHSCzE8ELXpZrInIBrsfr8z
lfyVSWPBlE5TAgaFBN1UNDmNdtNxNc9ZqacUEa7CVd6WcyGX1kVKFiFJXHPi1/fL
blBLndeV7hpp4ZrncM5o9bPDVKTIfp0NJ6isx9F0RtgOKA3FNNz3FAxVuEm98qQJ
7t2ojU8y9SY4ZAd+fKCjBemMe82lfDpxllvTvwlhtMZb9U2Wwkvq24Oq71/Jgvkt
awi/NwXc7W85V2aHUmV/wkQiDhL62pbij3GicnQkVVMZ6vC1ZY+R++8K6WQUZ45v
Qv6u7gehdOoc45STIu5aqVcJ+uZ+talneEN4R78X2nDFZ0/WAWQOSOaNmkNrAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOSkleW2YHrPUB
7sitQRZrofgJ/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkRB
RkNHTUdzZ3J1MWV5RGtleTNwSGRDWEtZYzMyVXd5MVR3cTd2QWlza2EvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pE
QUZDR01Hc2dydTFleURrZXkzcEhkQ1hLWWMzMlV3eTFUd3E3dkFpc2thLzAvQ0U0
QTQ5NUU1QjY2MDdBQ0Y1MDFFRUM4QUQ0MTE2NkJBMUY4MDlGQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvX5QMA0EAgACMAcDBQAoBG8AMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQhKDANBgkqhkiG9w0BAQsFAAOCAQEAOpJBYbjmoD1VaHli
xhya49K413iriFscvFDh60UIl+tX+f3SqXKrKs+E8QJo5yfnJzK0J8/1QZK8DtNK
zhvjJJyjiXEjo3dDk65c3lb0GUI8xBxFqHiWGaXcKjRt2xQblDlF87yp9j39D5Qp
8Chqv8Kxbtsh/E6yn/VBnMEPGpufB9gPgWCqLZN/o3yNRb8sc8mxACAKrk49H7ay
quajKLjfiFlhpkch8QXvRZ3ZmAERIPtPklgymSg9xG4mN4OvWexXEFFvqpWzzcwz
TYjByWnU2BgM2E5iWKXAnsYdbW1SbFLPDER9oPStvDde+EOMUSVcKsl3CHsBY9X1
ykrzUA==
-----END CERTIFICATE-----