This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer
File:                     DFBB164DBC72494619B08F0FA235F18F7F107520.cer (raw, json)
Hash identifier:          QjjZ2KVCmYvTkWLSQT0iLAJyLu/e5kMVnxg3x6THl+U=
Subject key identifier:   DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       58B2D979D454EF44E7469A835E61D8C5894A680C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Jan 2026 04:05:04 +0000
Certificate not after:    Tue 05 Jan 2027 04:10:04 +0000
Subordinate resources:    AS: 262541
                          IP: 177.72.48.0/21
                          IP: 2804:5c8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b2:d9:79:d4:54:ef:44:e7:46:9a:83:5e:61:d8:c5:89:4a:68:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  6 04:05:04 2026 GMT
            Not After : Jan  5 04:10:04 2027 GMT
        Subject: CN=DFBB164DBC72494619B08F0FA235F18F7F107520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f8:d3:d8:3b:b6:d2:00:f5:3c:d9:b3:36:f0:
                    37:5c:74:8c:a5:d3:4f:e4:16:4d:7d:8d:01:96:d5:
                    dc:78:36:54:3a:66:6a:ef:01:cd:ba:6b:aa:d5:4a:
                    6f:85:41:3b:20:c7:7e:ff:0e:74:48:4d:6a:90:fd:
                    a5:28:45:fa:ea:e1:48:4a:05:b0:bb:ea:f4:6c:25:
                    c2:d0:87:46:64:c1:75:1a:14:e5:5b:73:da:a4:dc:
                    57:74:57:4f:6c:10:9a:fc:70:23:35:8f:cf:8d:38:
                    8d:23:3e:f4:e4:32:ec:d0:f9:98:78:ae:78:d4:72:
                    77:09:c2:aa:62:c6:c2:42:21:2b:37:f2:82:79:be:
                    3c:cd:74:d2:be:81:f2:02:6c:dd:94:ae:72:59:6b:
                    ae:1e:da:21:7d:d9:07:7b:34:1d:16:2c:17:23:87:
                    f1:6e:ce:f3:2d:81:a9:2f:39:69:e5:ee:78:91:4f:
                    b5:ce:ca:10:94:2d:7c:94:a8:b7:57:b7:37:52:2a:
                    33:f5:b8:2f:c4:12:3f:08:a5:50:b2:f4:7c:ec:06:
                    cc:72:2a:f1:1f:df:36:87:6f:1b:f6:0d:6c:16:f1:
                    4f:d3:95:89:2d:84:36:eb:d5:5b:ce:1b:b0:a2:2a:
                    36:af:33:38:b5:02:05:d9:9a:46:92:8f:6a:bb:81:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.48.0/21
                IPv6:
                  2804:5c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262541

    Signature Algorithm: sha256WithRSAEncryption
         32:e3:29:b8:67:31:aa:c7:17:82:b1:3d:8d:9d:07:37:08:8c:
         45:fe:dc:71:a4:07:70:1e:8f:d7:04:7b:f0:ca:6d:af:b5:d6:
         93:d8:67:58:32:5f:83:99:c6:a1:65:01:ec:56:d8:e1:87:7b:
         ae:63:6e:2e:3f:e6:28:15:45:1e:1b:36:6b:52:bc:0e:23:8e:
         03:cc:54:e1:06:4d:6e:74:7e:7d:4a:27:8c:fa:ad:15:22:43:
         86:fb:41:1b:6b:86:7f:cb:4c:c0:2f:b0:05:4f:36:69:10:21:
         79:42:f2:12:7b:b4:b9:1f:e4:58:a5:e1:ba:54:85:60:f6:40:
         96:44:22:12:20:19:76:7f:c1:b7:74:0e:f2:cb:6d:59:33:a9:
         79:25:b6:33:b9:35:55:ec:48:90:39:41:44:47:f3:69:c2:f5:
         1f:e0:20:4e:f6:f4:17:40:a7:39:6b:e5:ad:71:58:6a:f4:43:
         ac:9e:bc:14:99:c2:25:6e:63:3f:28:87:de:ef:8f:b8:c9:62:
         d3:d5:e2:e9:a5:07:44:a7:0e:d4:b1:3c:ac:2e:48:47:bc:4f:
         f0:ea:98:51:5d:35:23:37:24:81:10:47:16:b1:21:5f:d9:9b:
         64:cf:d0:15:c1:a2:9b:c7:2d:ee:50:4d:0c:92:d4:45:18:d4:
         43:47:f6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----