This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F114ED2B0D889B3BC5C887C81681FF931A2B7FD3.cer
File:                     F114ED2B0D889B3BC5C887C81681FF931A2B7FD3.cer (raw, json)
Hash identifier:          PQg3qIpARoI8tVjw+2A9L/0sQSrOkWqC2c+ooQJdlM4=
Subject key identifier:   F1:14:ED:2B:0D:88:9B:3B:C5:C8:87:C8:16:81:FF:93:1A:2B:7F:D3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F48D6B154626C730A3285BDC0326F4AD5ECA1F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/F114ED2B0D889B3BC5C887C81681FF931A2B7FD3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Jan 2026 14:59:32 +0000
Certificate not after:    Fri 22 Jan 2027 15:04:32 +0000
Subordinate resources:    AS: 267560
                          IP: 181.191.216.0/22
                          IP: 2804:4348::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:48:d6:b1:54:62:6c:73:0a:32:85:bd:c0:32:6f:4a:d5:ec:a1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 23 14:59:32 2026 GMT
            Not After : Jan 22 15:04:32 2027 GMT
        Subject: CN=F114ED2B0D889B3BC5C887C81681FF931A2B7FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:76:be:67:b1:b2:84:de:df:05:3d:48:1d:57:
                    97:88:cd:63:98:7a:b6:05:3c:f4:87:4e:25:be:93:
                    11:2c:af:77:c6:b6:76:e6:77:b0:20:0e:ec:c3:ed:
                    dd:e2:a8:69:9e:a8:39:d2:36:16:bf:bd:d6:f9:df:
                    ce:4b:a0:b3:48:b1:25:fb:37:17:4a:58:c1:21:fc:
                    de:37:24:c3:b8:33:e8:15:a7:a3:62:60:df:ba:d7:
                    7a:1d:e0:72:06:9d:24:04:d8:7c:2f:6b:ad:7f:67:
                    67:bb:0c:08:3f:bc:7c:9a:3d:3b:ee:15:cc:fa:0d:
                    4e:ce:9c:7a:f2:69:c4:3a:7e:24:75:01:4a:9d:e5:
                    a1:a1:e9:fb:2d:ca:99:f4:0a:ea:bc:94:23:7e:72:
                    d9:7f:8d:a7:f9:33:4f:da:d3:1e:71:be:25:97:81:
                    73:a0:f1:8f:05:54:16:be:a7:f6:bf:5b:73:b1:16:
                    82:71:03:2c:61:b0:2d:5f:07:d4:4b:5f:0b:0c:0c:
                    28:51:4a:21:45:23:3b:ee:34:9d:67:51:48:22:5e:
                    ae:db:2d:f6:2c:ed:4a:84:50:9c:f2:e9:94:90:b8:
                    72:a8:4b:19:86:ea:83:34:41:31:7a:3d:1f:21:57:
                    2d:cd:f0:2c:06:07:25:7f:f0:7e:00:2c:50:20:5c:
                    c2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:14:ED:2B:0D:88:9B:3B:C5:C8:87:C8:16:81:FF:93:1A:2B:7F:D3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/F114ED2B0D889B3BC5C887C81681FF931A2B7FD3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.216.0/22
                IPv6:
                  2804:4348::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267560

    Signature Algorithm: sha256WithRSAEncryption
         21:6d:d1:b2:6e:a9:cc:02:fd:e4:0e:ad:f6:b8:6a:c4:e0:9d:
         9e:95:89:19:3f:ad:2a:07:b1:5e:ef:d9:2b:30:64:f1:8c:98:
         e7:c4:d1:56:7f:21:be:84:f3:90:9d:d6:b6:9f:91:cd:e7:d6:
         52:b8:1b:9b:33:8e:cf:3c:84:d0:62:c4:15:6f:9d:ed:5c:30:
         65:b8:87:ee:7d:50:11:b0:29:1f:84:29:56:3e:7a:5e:f5:cf:
         04:9e:42:3a:d2:a2:d1:59:21:5e:15:cc:29:33:44:7c:02:ce:
         02:30:b6:c4:b1:83:7e:c2:f0:8a:09:a9:31:f0:de:6c:62:fd:
         1e:e1:c1:fe:8f:b2:35:5e:2e:50:3f:7f:fd:55:10:85:d3:50:
         62:03:3e:69:3f:cf:ec:35:51:ae:aa:b8:bd:82:99:9b:80:94:
         9e:d2:84:09:65:ae:0e:07:c7:5a:43:5f:b6:be:31:39:bd:0b:
         c8:1b:47:70:0a:98:bd:57:ae:f7:94:15:28:0d:66:59:5c:8c:
         56:6e:2a:ff:bd:c1:5f:ca:d6:02:c2:e2:53:af:39:d8:5a:ab:
         81:73:e9:9d:4d:b4:b8:d2:0a:5a:56:92:78:66:d6:bf:6a:4b:
         7b:96:4f:e1:29:55:e5:16:8d:54:66:38:5c:81:68:16:0b:15:
         c1:20:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----