This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
File:                     DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer (raw, json)
Hash identifier:          pslO8zccVP5nX1yC3e0M9FEGEL1FnwhaaKHigLUJMdE=
Subject key identifier:   DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       69E2AAB5F711D51DE6128F9980C722EAB19F096C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
caRepository:             rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Jan 2026 09:11:37 +0000
Certificate not after:    Sat 23 Jan 2027 09:16:37 +0000
Subordinate resources:    AS: 271673
                          IP: 131.255.130.0/24
                          IP: 190.9.127.0/24
                          IP: 201.218.190.0/23
                          IP: 2804:7f34::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e2:aa:b5:f7:11:d5:1d:e6:12:8f:99:80:c7:22:ea:b1:9f:09:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 24 09:11:37 2026 GMT
            Not After : Jan 23 09:16:37 2027 GMT
        Subject: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2e:5e:42:40:0a:e8:10:16:43:e7:bf:c0:4f:
                    01:5a:41:02:17:ab:11:ac:cb:35:63:bd:77:56:c4:
                    69:b7:fc:93:99:f5:ef:42:30:ef:2b:99:eb:73:3e:
                    fd:83:84:c6:64:d2:2c:27:bf:29:3c:f9:c5:80:7e:
                    cc:b1:2f:d6:fb:43:c9:88:db:e1:5c:7d:ca:c4:2a:
                    04:84:f2:95:df:8b:2d:23:7c:22:d1:c4:8e:01:4f:
                    16:38:9d:e7:93:2e:60:a9:c0:79:79:89:e8:27:bc:
                    4c:2e:82:7a:24:56:01:f6:da:2a:37:97:fd:e9:02:
                    92:19:6f:e6:16:c4:8e:45:c3:c2:39:dd:c6:53:82:
                    71:89:0e:b9:f9:2f:2e:cc:9b:3d:76:a9:0a:11:f8:
                    83:f4:67:ef:28:98:68:e8:61:ac:54:49:db:96:fa:
                    a7:01:fe:7e:9f:60:99:24:4e:e6:08:ee:b9:9f:a0:
                    6e:27:c8:91:c0:cc:ba:bb:76:fe:3e:3e:a9:e5:1c:
                    d6:c5:c4:28:eb:83:2f:53:d0:36:d5:21:c4:63:28:
                    ef:23:23:3b:fd:e8:19:ee:c0:91:24:0a:f2:6d:e9:
                    d9:57:e5:a8:0c:3b:70:64:d1:30:af:98:63:d7:3a:
                    d0:0b:07:29:0a:3a:b5:bc:aa:6d:92:8f:a0:b9:1b:
                    00:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.130.0/24
                  190.9.127.0/24
                  201.218.190.0/23
                IPv6:
                  2804:7f34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271673

    Signature Algorithm: sha256WithRSAEncryption
         96:d4:cb:1a:7f:9c:15:37:7c:9c:c6:78:cd:63:fc:e4:c7:d2:
         35:05:11:3e:ef:ed:75:5b:b4:d7:3e:6d:26:38:3e:46:84:12:
         3d:17:f6:3e:49:d7:5e:ff:43:6b:17:3b:6e:3c:e6:fd:22:f8:
         da:fc:0c:70:b1:b0:ec:da:6b:70:6d:be:75:16:98:d0:97:86:
         ed:78:fb:0c:4c:f8:2a:0e:65:f4:ac:76:70:23:a5:f2:5e:17:
         1c:43:a4:3a:cb:90:c4:df:e8:9f:48:03:88:8e:24:1e:51:d2:
         1f:86:c0:77:b2:b6:e4:f3:37:6d:6d:38:53:ec:5e:6e:8e:db:
         04:3e:81:72:11:fd:80:1e:7f:6b:0b:77:13:40:c4:74:a3:1d:
         00:00:48:aa:aa:fc:d7:70:88:9e:0a:f9:2f:fa:42:17:ac:5f:
         00:cb:43:7a:ef:81:8b:e0:50:a1:cb:80:23:2c:6b:cf:0f:5b:
         73:d3:08:93:21:8c:4a:01:9b:94:65:4f:e9:8a:d3:80:90:58:
         db:62:4e:bf:03:5b:60:19:dd:8b:d9:01:82:fc:3c:5c:9d:4a:
         9b:ea:e0:e1:4c:f7:3a:e3:4e:41:f1:f0:c9:06:4f:90:75:6b:
         66:77:15:82:5f:0b:73:e3:c0:ee:e4:79:93:86:27:0d:11:b0:
         ab:98:28:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:09:57 2026 by rpki-client