This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D57E60B6D121559190E71D8B78977B6B3567A1F3.cer
File:                     D57E60B6D121559190E71D8B78977B6B3567A1F3.cer (raw, json)
Hash identifier:          dhEaT542ElcfOxx9EBg/Difeidy4pFPrrl2WNiLeFXU=
Subject key identifier:   D5:7E:60:B6:D1:21:55:91:90:E7:1D:8B:78:97:7B:6B:35:67:A1:F3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7ED036ABF6A2A2740428DC36C18CC29B4CFAA1E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/D57E60B6D121559190E71D8B78977B6B3567A1F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Jan 2026 15:23:49 +0000
Certificate not after:    Fri 22 Jan 2027 15:28:49 +0000
Subordinate resources:    AS: 269167
                          IP: 45.180.92.0/22
                          IP: 138.118.188.0/22
                          IP: 2804:6070::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 03:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d0:36:ab:f6:a2:a2:74:04:28:dc:36:c1:8c:c2:9b:4c:fa:a1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 23 15:23:49 2026 GMT
            Not After : Jan 22 15:28:49 2027 GMT
        Subject: CN=D57E60B6D121559190E71D8B78977B6B3567A1F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:7f:3c:57:7c:9a:23:7f:2f:d2:ac:05:90:
                    e3:13:ff:e0:6f:bf:01:65:e6:41:9f:28:90:a6:25:
                    20:fd:62:e1:9a:93:f9:cc:56:e3:33:e1:7d:b5:99:
                    55:ff:fb:3b:4e:42:45:4e:de:77:86:f0:d7:89:94:
                    3e:9b:4a:e9:26:3b:a7:2b:53:87:3d:72:bf:c3:ec:
                    35:dc:d5:c6:b6:b1:73:4a:3b:99:a0:11:ae:ea:78:
                    3d:e3:7f:29:23:5c:a3:0a:93:88:57:22:4c:9b:f3:
                    67:d9:89:fd:af:41:53:f3:38:2d:ff:b9:60:15:29:
                    d5:03:ac:9a:92:b4:20:f1:9f:b0:26:b5:e6:df:d8:
                    68:69:81:30:a0:1f:cb:d7:0e:e5:ec:53:da:6c:f4:
                    c4:42:bc:e1:c9:f3:a6:24:71:4b:1d:51:22:91:7b:
                    21:41:9d:3c:60:b1:28:26:c7:d3:84:4f:95:33:54:
                    0d:9b:ea:a6:e2:3d:00:d3:d8:35:3a:3d:94:3c:4e:
                    f5:05:34:85:c8:a5:7b:54:f4:2b:6d:e0:93:3f:c6:
                    34:d0:84:b2:a7:59:36:8b:21:c4:4b:9c:87:c1:3e:
                    87:0b:e5:b4:21:ad:8c:6f:c9:4f:3b:70:4b:5a:3c:
                    d7:9c:21:e5:00:8e:79:a5:9a:ed:25:14:c5:6a:b1:
                    10:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:7E:60:B6:D1:21:55:91:90:E7:1D:8B:78:97:7B:6B:35:67:A1:F3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/D57E60B6D121559190E71D8B78977B6B3567A1F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.92.0/22
                  138.118.188.0/22
                IPv6:
                  2804:6070::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269167

    Signature Algorithm: sha256WithRSAEncryption
         bd:cc:be:18:a6:6f:c8:1a:43:c3:5d:04:d6:44:5a:7b:15:7a:
         35:68:e8:05:78:54:e7:df:f9:4c:b0:75:f6:db:f1:f1:bc:51:
         9e:f1:bb:56:26:f7:d0:73:4f:c3:19:db:07:5f:91:b2:fa:9a:
         b1:db:a6:d4:2f:a7:3a:98:d2:0b:0a:b9:0f:a2:03:85:04:1d:
         b5:66:ca:33:0a:39:ea:cc:cc:be:0b:ee:40:86:b0:d9:42:a6:
         f9:ca:55:23:dd:78:85:86:9d:88:44:ce:c5:e5:1d:da:c1:05:
         b7:87:42:e8:37:80:c2:94:f9:47:8d:6b:c8:9c:8f:dc:a5:9a:
         66:28:bf:84:31:f9:8a:0a:c9:fc:9c:25:54:c6:b9:03:17:4d:
         b2:e7:0b:00:3b:b4:f3:7f:a0:bb:5d:ac:3c:40:75:c8:62:8f:
         6d:55:8d:8d:b2:cc:7c:28:51:19:5d:82:99:b7:de:67:79:6e:
         10:0a:e6:26:c7:17:bc:c4:38:8d:ff:5c:60:33:f6:fd:91:dc:
         65:08:c8:77:c5:95:72:ea:8a:da:f3:d5:96:04:82:0f:21:ef:
         d4:c8:d1:f5:1a:c0:14:a1:b9:e4:9e:16:79:df:43:8d:dd:f6:
         e5:77:e6:40:79:c4:28:d9:31:99:d0:b6:d9:df:67:bc:a6:9a:
         34:e3:f6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:26:05 2026 by rpki-client