This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D0C3927791F8468E41A472151D0B19223D07DFB7.cer
File:                     D0C3927791F8468E41A472151D0B19223D07DFB7.cer (raw, json)
Hash identifier:          sUe870QbwW4BrS39CX7YgFv/hIMZc0Y7T0/Jx4YgCs4=
Subject key identifier:   D0:C3:92:77:91:F8:46:8E:41:A4:72:15:1D:0B:19:22:3D:07:DF:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3CC588D1BAEFBDC5DB62BD9986FACE7E0C5D6820
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/D0C3927791F8468E41A472151D0B19223D07DFB7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 22:02:30 +0000
Certificate not after:    Mon 18 Jan 2027 22:07:30 +0000
Subordinate resources:    AS: 274772
                          IP: 2804:935c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c5:88:d1:ba:ef:bd:c5:db:62:bd:99:86:fa:ce:7e:0c:5d:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 19 22:02:30 2026 GMT
            Not After : Jan 18 22:07:30 2027 GMT
        Subject: CN=D0C3927791F8468E41A472151D0B19223D07DFB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:be:72:a0:9c:f9:7c:d9:ce:1c:b5:c5:48:
                    18:e6:f8:4d:2d:2a:8d:07:eb:92:c1:02:4f:a5:5d:
                    ca:c6:92:ff:40:b1:35:03:71:be:55:4c:c7:26:be:
                    3f:5b:1f:72:74:95:a2:3f:a1:b9:c3:f1:71:1d:fb:
                    4e:73:6a:bc:1f:de:0d:35:eb:9f:6a:61:c7:3a:c1:
                    b1:d6:87:9c:12:a5:3a:eb:79:b5:10:f7:03:86:d5:
                    9d:73:f7:f6:11:29:86:f4:32:75:03:48:2d:ba:35:
                    4a:be:ad:1f:7d:5d:4f:74:34:e5:8d:f4:26:0b:99:
                    a3:4f:91:e7:d3:90:61:7f:a4:6d:29:57:b0:91:0d:
                    9d:65:e1:33:52:32:61:c3:da:44:79:18:1b:d9:d1:
                    ff:6d:65:82:ac:c9:68:ed:00:2e:06:02:8c:51:32:
                    84:63:a7:22:57:12:8e:76:bf:5e:52:a1:0b:b9:d0:
                    04:ca:8c:f2:8f:67:b4:0a:64:32:a0:0c:35:de:09:
                    8d:c6:86:5c:af:ec:49:5c:73:1f:77:f2:7a:aa:51:
                    05:65:4b:ab:be:c4:71:77:07:e8:6b:c9:6c:fc:53:
                    f7:0b:94:e4:e5:85:e0:9e:2f:b5:22:f0:3d:c7:69:
                    d8:ba:93:e6:fc:9a:6f:b2:e4:aa:41:fd:5e:4b:ab:
                    99:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:C3:92:77:91:F8:46:8E:41:A4:72:15:1D:0B:19:22:3D:07:DF:B7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/D0C3927791F8468E41A472151D0B19223D07DFB7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:935c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274772

    Signature Algorithm: sha256WithRSAEncryption
         4d:14:67:2e:43:f3:37:c2:fa:e1:64:07:35:3b:61:42:eb:5f:
         14:b1:e9:40:aa:ae:f8:19:61:42:fa:d6:61:14:07:1b:b2:ff:
         26:8c:b0:31:f1:c9:56:1c:ed:ac:09:f1:ba:f0:39:e0:e3:7e:
         05:8f:0b:5b:99:c9:c2:49:c9:87:ea:47:3d:2f:59:de:a4:a6:
         cc:2b:7f:8e:a0:06:95:3f:d9:0d:e1:40:c2:7d:5d:e8:82:7e:
         2e:c5:18:33:9f:78:29:e6:ce:18:87:4f:ca:c1:f5:2a:41:d2:
         46:fa:65:ed:d3:e9:af:29:fa:3c:e8:10:c1:f4:0a:f8:60:91:
         6e:c0:bb:83:63:f0:43:ed:c6:c1:ff:21:bd:8c:34:7a:53:a0:
         f6:2e:1e:92:54:69:d3:7d:1c:ad:0e:8b:73:24:d7:22:f7:59:
         07:75:a5:81:bb:73:17:fd:0e:87:6f:5c:ac:50:c1:c1:6e:e1:
         3c:c8:74:06:3b:7f:99:57:87:48:ca:60:f0:55:30:7c:73:c1:
         fe:1e:ea:08:f3:ca:5a:f3:5f:22:35:aa:81:f9:0b:ab:69:60:
         aa:4e:40:f9:28:5c:96:ac:3b:81:a2:fc:10:ef:02:5c:cd:67:
         f6:cd:12:16:49:7e:59:56:3f:dc:bc:20:59:20:fa:10:10:85:
         6d:76:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----