This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
File:                     E93268A3714096FCDDC12A8EEEA393524021C87B.cer (raw, json)
Hash identifier:          P1NkqJKhRZKweiu/GAdgXVXgtc1E97BFC8wluYmFblQ=
Subject key identifier:   E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C6FA3DEDBA102838738B4CC9527709538933E5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Jan 2026 18:56:23 +0000
Certificate not after:    Thu 21 Jan 2027 19:01:23 +0000
Subordinate resources:    AS: 262713
                          IP: 186.208.0.0/20
                          IP: 2804:640::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6f:a3:de:db:a1:02:83:87:38:b4:cc:95:27:70:95:38:93:3e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 22 18:56:23 2026 GMT
            Not After : Jan 21 19:01:23 2027 GMT
        Subject: CN=E93268A3714096FCDDC12A8EEEA393524021C87B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:5b:3d:59:b0:52:c5:3a:3f:f8:12:bf:5f:
                    e6:54:3b:b7:e0:8a:cf:98:ee:1a:b7:8f:71:07:5b:
                    70:7f:aa:91:c5:27:a6:1c:d6:f1:7a:85:80:c7:f3:
                    86:8f:c2:90:13:8b:f5:81:fc:70:08:b6:e7:b4:e8:
                    02:8c:f8:68:0e:bd:86:58:37:05:3b:4d:1e:6c:dc:
                    9e:13:55:26:66:ea:16:b2:02:bb:cb:a2:d2:8f:da:
                    02:4d:be:be:8c:51:14:45:c4:fc:f3:0f:f3:a2:40:
                    8e:c4:47:74:4c:18:b0:17:5e:09:a5:d8:cd:5d:ed:
                    24:c3:25:d0:b6:97:06:1d:8a:8d:11:6f:15:8a:82:
                    55:2d:f6:bb:5c:62:d1:f7:67:49:8d:f1:db:4c:6c:
                    5e:3e:a5:4f:eb:b5:5e:d9:40:8b:28:90:aa:dc:05:
                    4f:0d:4f:f1:54:de:50:cb:ea:3b:a8:b3:1d:be:b1:
                    70:25:93:09:fb:9b:b1:2e:dd:e6:88:d2:80:67:43:
                    19:67:03:b5:e6:83:95:2c:b1:af:1c:ce:4d:b1:f6:
                    87:57:9c:96:e1:c1:6b:1e:ea:26:50:da:9e:a1:6d:
                    be:56:02:1b:7a:56:1a:ae:7a:36:3c:eb:2a:26:e7:
                    df:6a:66:ab:b1:13:b3:b9:0a:b4:a3:57:32:d7:1a:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.0.0/20
                IPv6:
                  2804:640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262713

    Signature Algorithm: sha256WithRSAEncryption
         91:b9:21:95:c5:14:8d:bb:b6:68:f9:52:51:f0:72:a3:3f:81:
         e9:35:07:53:ea:bc:b5:b7:c5:80:1e:ac:88:67:69:e8:1d:6e:
         24:4b:c4:9f:2e:60:15:58:a2:9f:9c:d3:32:85:59:bf:c9:ac:
         3a:3c:a3:d7:d0:25:54:1e:d6:72:f2:80:73:04:f5:b2:a6:ef:
         ca:52:6b:b7:42:c3:1e:23:46:ed:dc:16:a2:74:bc:89:9e:25:
         7b:b2:1e:72:92:9a:97:73:b1:11:dc:26:56:cb:ff:20:87:a9:
         58:7b:51:fa:46:3a:e3:4c:ee:9e:a5:11:22:40:b7:fc:e3:6a:
         f4:ba:db:b7:92:ac:09:74:6e:d7:2d:73:a0:ac:b6:eb:36:0a:
         c7:6a:e3:34:96:df:f8:3e:2d:a5:9f:b4:03:a3:a0:d6:4f:c8:
         bd:e3:bc:a1:43:85:4b:a2:64:36:db:19:97:45:93:fc:ed:63:
         0b:6f:06:d5:03:84:f3:4b:94:86:71:8f:48:96:12:4b:4b:8d:
         a2:3c:7f:72:e6:3b:f2:c4:e5:1f:53:96:43:7e:49:bf:6a:22:
         74:d7:0c:e4:92:08:d1:f4:f2:d5:c5:d6:06:3d:7c:4f:bc:36:
         8f:47:5d:2d:7f:7c:ad:a3:14:15:15:e9:45:92:14:d4:c0:a2:
         2d:d7:f5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----