This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
File:                     D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer (raw, json)
Hash identifier:          zslQPHlAbW6y/fXLk5VfInk985wod6PRIS/PYRTLBgg=
Subject key identifier:   D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7ADF2AE88A1181D60CCE328BF8E95D8C5A8CA1E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Jan 2026 17:20:53 +0000
Certificate not after:    Mon 11 Jan 2027 17:25:53 +0000
Subordinate resources:    AS: 268289
                          IP: 45.237.200.0/22
                          IP: 170.233.20.0/22
                          IP: 2804:4ee4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:df:2a:e8:8a:11:81:d6:0c:ce:32:8b:f8:e9:5d:8c:5a:8c:a1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 12 17:20:53 2026 GMT
            Not After : Jan 11 17:25:53 2027 GMT
        Subject: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:7f:82:eb:79:c7:19:23:16:1f:61:49:1b:
                    3c:df:ea:b7:64:61:74:b1:85:0e:42:77:8b:a8:7b:
                    be:1a:a4:c0:45:6b:73:0e:c1:7e:7e:bc:84:06:b9:
                    d0:71:3c:46:6f:1a:58:e0:b8:24:42:9d:dc:0b:1d:
                    1d:ee:0c:e6:0b:bd:2d:a7:47:0f:11:37:82:77:6d:
                    df:99:ad:88:03:56:eb:31:88:b7:bc:be:d5:e5:c7:
                    8d:ef:2b:5a:f1:7e:63:ef:ed:a8:1a:e6:cf:66:77:
                    eb:9a:aa:3b:cc:a1:56:06:48:46:e8:36:10:23:e8:
                    99:76:5e:35:0c:50:28:83:2a:b8:17:64:1f:41:d3:
                    23:75:d2:2d:e8:25:ed:9a:bf:65:59:53:51:e0:b8:
                    a9:a9:1d:b6:79:4d:34:54:67:3d:8f:94:55:88:3a:
                    a1:56:9b:28:3b:75:fc:2c:be:06:e0:b4:a8:9f:b4:
                    c6:1f:10:d4:0d:ff:83:b1:16:40:1c:8b:64:f9:1e:
                    c1:12:f9:f9:d3:a6:35:67:95:07:5e:45:31:45:04:
                    7a:79:b0:0b:5b:0f:b1:4c:35:5d:35:d6:a0:82:ed:
                    e1:ae:25:8d:62:8a:0b:52:19:01:7e:65:3e:8e:ae:
                    b9:e3:3e:59:31:39:92:1c:96:1d:f7:51:20:aa:75:
                    91:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.200.0/22
                  170.233.20.0/22
                IPv6:
                  2804:4ee4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268289

    Signature Algorithm: sha256WithRSAEncryption
         cc:7f:7d:c2:d7:19:3c:77:19:af:1a:40:3c:e1:88:f9:ca:bb:
         26:cf:2a:27:7b:43:0e:0c:ca:89:fb:e2:94:54:ec:32:a4:7e:
         e7:46:ab:75:29:47:53:1a:bc:27:0f:dd:1e:0d:32:79:68:49:
         e0:8f:b1:24:66:39:47:92:e4:88:19:63:4e:2f:df:5b:42:4f:
         65:21:bb:9e:a3:b4:d6:65:e2:ff:88:80:2b:48:bd:91:33:f5:
         22:76:11:22:b1:74:22:95:98:46:bf:a0:d5:7b:27:d9:a0:8b:
         1f:d4:7c:60:ed:00:1d:26:6a:ad:3c:ea:57:55:36:92:65:46:
         2e:f3:d0:16:eb:e9:11:03:64:29:2b:c1:c0:5a:99:cc:72:44:
         99:ab:39:46:c0:dc:00:70:67:19:27:d8:b1:a4:79:91:3a:42:
         0f:17:fb:2f:23:f7:5c:f0:29:e8:8c:8d:a9:b9:4a:dd:ff:77:
         7e:5e:1d:a4:c4:ff:0c:e9:73:20:14:98:64:ba:8a:38:c8:8c:
         21:99:70:d1:1c:bf:f5:c9:75:bd:59:fa:6c:f1:95:5c:57:b5:
         df:09:a6:0a:95:35:c8:2f:41:9f:4c:e6:35:bd:7f:48:2b:7a:
         58:84:86:10:fa:3a:92:58:91:9e:ea:e9:f0:33:0b:91:1d:d7:
         27:f2:de:37
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUet8q6IoRgdYMzjKL+OldjFqMoeMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMTIxNzIwNTNaFw0yNzAxMTExNzI1NTNaMDMxMTAvBgNV
BAMTKEQ4QkE3QzM1QTVDMjQyMDU4OUIzMEMzM0Q5Q0YxMzc0NTA1RjNEQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0DH+C63nHGSMWH2FJGzzf6rdk
YXSxhQ5Cd4uoe74apMBFa3MOwX5+vIQGudBxPEZvGljguCRCndwLHR3uDOYLvS2n
Rw8RN4J3bd+ZrYgDVusxiLe8vtXlx43vK1rxfmPv7aga5s9md+uaqjvMoVYGSEbo
NhAj6Jl2XjUMUCiDKrgXZB9B0yN10i3oJe2av2VZU1HguKmpHbZ5TTRUZz2PlFWI
OqFWmyg7dfwsvgbgtKiftMYfENQN/4OxFkAci2T5HsES+fnTpjVnlQdeRTFFBHp5
sAtbD7FMNV011qCC7eGuJY1iigtSGQF+ZT6OrrnjPlkxOZIclh33USCqdZGnAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYunw1pcJCBYmz
DDPZzxN0UF89vDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNU5X
Z0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVO
V2dHVG55UEpUdnZoQllXNDhWaVRuMVdLaDhpY3lTdFZlY3hxN3lUelZ0LzAvRDhC
QTdDMzVBNUMyNDIwNTg5QjMwQzMzRDlDRjEzNzQ1MDVGM0RCQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCLe3IAwQCqukUMA0EAgACMAcDBQAoBE7kMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQYATANBgkqhkiG9w0BAQsFAAOCAQEAzH99wtcZ
PHcZrxpAPOGI+cq7Js8qJ3tDDgzKifvilFTsMqR+50ardSlHUxq8Jw/dHg0yeWhJ
4I+xJGY5R5LkiBljTi/fW0JPZSG7nqO01mXi/4iAK0i9kTP1InYRIrF0IpWYRr+g
1Xsn2aCLH9R8YO0AHSZqrTzqV1U2kmVGLvPQFuvpEQNkKSvBwFqZzHJEmas5RsDc
AHBnGSfYsaR5kTpCDxf7LyP3XPAp6IyNqblK3f93fl4dpMT/DOlzIBSYZLqKOMiM
IZlw0Ry/9cl1vVn6bPGVXFe13wmmCpU1yC9Bn0zmNb1/SCt6WISGEPo6kliRnurp
8DMLkR3XJ/LeNw==
-----END CERTIFICATE-----