This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D37C4A3F93D03DD215E03306519BD8C784C71CB4.cer
File:                     D37C4A3F93D03DD215E03306519BD8C784C71CB4.cer (raw, json)
Hash identifier:          2xnrargv6tx91HH1m6X7MRdF3Wp1CtXy1HXTd+GTIZ8=
Subject key identifier:   D3:7C:4A:3F:93:D0:3D:D2:15:E0:33:06:51:9B:D8:C7:84:C7:1C:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       66F8D072E0E767EBFD97C37924ECE78A523C3574
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/D37C4A3F93D03DD215E03306519BD8C784C71CB4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Jan 2026 09:20:07 +0000
Certificate not after:    Mon 11 Jan 2027 09:25:07 +0000
Subordinate resources:    AS: 268055
                          IP: 45.168.112.0/22
                          IP: 2804:5744::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f8:d0:72:e0:e7:67:eb:fd:97:c3:79:24:ec:e7:8a:52:3c:35:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 12 09:20:07 2026 GMT
            Not After : Jan 11 09:25:07 2027 GMT
        Subject: CN=D37C4A3F93D03DD215E03306519BD8C784C71CB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:42:da:84:1a:b4:a3:18:5f:ed:5f:2a:d6:38:
                    ed:35:ee:a3:40:4a:6b:2f:51:d4:c6:44:cd:14:83:
                    27:b2:6d:61:07:50:eb:b6:f3:92:a7:47:dd:85:e5:
                    8f:bd:3a:78:b0:9c:3a:26:5e:d7:8c:0c:ff:5f:99:
                    02:32:5e:21:a3:b7:5e:dd:d9:fd:d4:d3:c0:e0:b9:
                    f4:43:97:57:d1:5f:13:ee:ea:39:a2:da:f6:32:e7:
                    d8:cb:b2:3a:b8:e6:da:86:ab:30:c4:1d:6d:86:6d:
                    5b:c8:f3:40:93:75:30:c4:a4:e6:41:85:71:e0:35:
                    a1:50:58:c1:f9:50:2b:08:5d:5b:ad:71:c7:f8:65:
                    be:9c:c2:b5:03:77:79:12:aa:db:4f:83:c3:94:81:
                    c1:f6:61:b5:ba:5f:47:6d:b4:2b:11:8a:85:e8:0d:
                    bc:fe:0e:3b:1c:f7:fb:fb:49:69:a7:74:c9:ef:9b:
                    a1:4c:23:94:8c:c5:21:d7:bd:60:0b:7b:ed:02:92:
                    3d:2f:e6:53:be:00:1b:31:5c:6b:cc:d5:66:05:90:
                    44:97:7d:92:1e:28:fb:88:05:70:b9:ef:20:b4:3b:
                    0e:29:28:93:02:93:7e:4d:ea:74:fe:c5:49:a0:2a:
                    76:ad:bb:67:33:98:2a:a9:14:83:4d:f6:c8:c7:f1:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:7C:4A:3F:93:D0:3D:D2:15:E0:33:06:51:9B:D8:C7:84:C7:1C:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/D37C4A3F93D03DD215E03306519BD8C784C71CB4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.112.0/22
                IPv6:
                  2804:5744::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268055

    Signature Algorithm: sha256WithRSAEncryption
         b6:9e:87:48:63:c9:da:ff:00:b8:4c:bf:e6:23:2d:0b:95:a8:
         43:e4:94:6d:1e:db:f2:fa:53:22:d6:ab:64:c4:4c:ea:49:da:
         32:58:cf:8e:a1:f2:fd:02:72:53:d1:22:22:26:02:3f:19:47:
         16:91:f9:a7:a0:98:ae:58:b8:f6:76:81:4c:27:7e:7a:d4:38:
         a8:86:e3:e7:29:6a:c4:e2:2e:52:8f:c5:59:9a:91:8d:72:a8:
         ee:df:ee:7c:a5:45:f7:36:6c:18:c8:ff:19:17:ad:50:5b:69:
         31:26:2b:f7:b3:95:6b:39:20:72:67:fd:42:ef:e8:0d:d0:42:
         9e:c0:d9:07:e3:94:06:c7:6b:4d:e5:d7:1d:a1:95:d0:20:30:
         41:61:4a:60:23:ca:2f:e3:13:73:2e:43:c5:25:b8:6f:1f:6b:
         80:c3:44:31:f8:eb:2c:eb:ca:14:31:23:7a:b7:81:67:1f:e4:
         f9:06:a5:32:3b:78:04:de:db:ed:da:f7:cc:ff:d6:06:2b:85:
         d1:24:23:9b:30:98:c8:a5:55:56:53:1f:6c:90:ec:33:4d:e4:
         29:71:12:17:58:48:4b:06:2d:ef:db:a8:fe:e9:fd:f2:01:ce:
         0b:d4:b0:42:0f:f3:a7:36:64:be:af:98:2a:3d:c3:a0:73:9b:
         f8:2b:ec:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----