This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.cer
File:                     DC39D96A742EE8C695115CC7A4D907F8D5BF3129.cer (raw, json)
Hash identifier:          +Kg++8WvrKe98K6E50NMggjycHGRm46wx/11IkfRI7M=
Subject key identifier:   DC:39:D9:6A:74:2E:E8:C6:95:11:5C:C7:A4:D9:07:F8:D5:BF:31:29
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F2787E11D0F81D4DC49FD05A187D9D074CC1A95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Jan 2026 06:35:36 +0000
Certificate not after:    Wed 20 Jan 2027 06:40:36 +0000
Subordinate resources:    AS: 266266
                          IP: 45.65.180.0/22
                          IP: 2804:3d4c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:27:87:e1:1d:0f:81:d4:dc:49:fd:05:a1:87:d9:d0:74:cc:1a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 06:35:36 2026 GMT
            Not After : Jan 20 06:40:36 2027 GMT
        Subject: CN=DC39D96A742EE8C695115CC7A4D907F8D5BF3129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:c0:c7:fe:c1:f5:5d:06:7d:ae:f0:b0:68:
                    72:21:61:1d:b6:c0:79:1b:99:2a:e9:15:81:c6:b1:
                    2c:c7:b3:3a:8a:90:46:b6:9a:5a:a5:d5:69:f7:a3:
                    0a:28:71:40:31:13:30:ef:2a:a2:5f:70:96:9c:33:
                    e7:fb:db:11:f6:01:fa:b9:f3:6a:5f:93:79:70:4e:
                    0e:99:85:7e:5c:75:e2:56:69:10:25:f1:72:a6:e0:
                    c0:80:c5:91:46:31:4e:76:18:da:93:8d:64:77:fd:
                    09:c8:9e:cf:31:10:9c:28:9e:ac:2e:4a:15:e9:34:
                    18:70:25:ba:4f:f9:4d:d4:65:a8:8e:2a:08:ec:ac:
                    89:96:68:e4:da:e3:2a:48:2b:a3:e7:79:dd:77:e2:
                    62:e7:8e:53:f2:ea:a3:46:9f:6c:ba:c3:c9:9c:d0:
                    9c:30:e4:4d:53:bd:18:c5:23:a4:8a:3a:19:ed:70:
                    a1:51:2f:f5:57:e4:38:9c:4d:46:c1:43:b2:4c:d2:
                    74:41:07:df:a6:2e:96:3c:c8:1d:ea:37:17:75:f7:
                    19:7f:db:f0:bd:5c:f1:a4:ea:c0:dc:bf:a3:2d:b1:
                    eb:cb:4d:b8:33:31:08:55:5c:b5:a0:7b:53:da:1c:
                    95:cb:b3:cd:54:0a:b6:b1:b6:1e:c3:7d:b8:c0:c7:
                    22:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:39:D9:6A:74:2E:E8:C6:95:11:5C:C7:A4:D9:07:F8:D5:BF:31:29
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/DC39D96A742EE8C695115CC7A4D907F8D5BF3129.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.180.0/22
                IPv6:
                  2804:3d4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266266

    Signature Algorithm: sha256WithRSAEncryption
         0d:54:41:7a:68:be:7c:22:e3:fd:c3:f4:e4:fe:d3:35:8e:e9:
         61:ff:c7:57:2a:ad:bb:de:32:e6:49:6f:ff:a6:5c:15:dd:6e:
         07:5c:7a:e6:f6:3e:a4:3d:1e:61:8a:43:e8:c6:9d:1c:46:3a:
         aa:02:5e:b2:f2:fd:8d:28:08:32:dd:5b:2d:b0:62:34:65:39:
         27:85:a3:fe:44:97:9b:0d:ef:ff:73:09:11:ee:6a:3c:18:f3:
         7f:96:0c:b5:42:20:70:12:b9:f0:f3:4d:33:c1:61:ee:46:d2:
         b5:54:41:25:d0:a4:b9:ed:3e:ef:fc:2a:09:5d:44:e6:87:58:
         8e:26:ca:68:ed:4c:0b:34:73:1d:64:24:92:dc:bb:f6:35:6c:
         53:af:d4:af:1c:c0:74:dd:6f:29:9a:14:96:9d:4b:44:81:bf:
         03:de:58:99:ea:a8:dd:ca:23:0b:4f:e7:de:f0:21:a6:35:26:
         6a:bd:9f:57:d1:04:c4:9d:2c:31:8a:0d:c2:f1:2f:24:8e:b2:
         ba:e0:5d:85:9a:e8:34:2b:58:45:ab:4c:b3:0a:5c:9f:7c:19:
         25:94:f6:15:bb:64:69:6e:3b:23:d5:da:45:ca:43:8f:38:cd:
         41:b8:46:ea:b6:b4:f0:58:b2:15:d7:45:49:42:07:0a:ce:08:
         c1:71:a9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----