This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.cer
File:                     F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.cer (raw, json)
Hash identifier:          mJLNbWD0fR+Iez79JFwkc3kUMuLUYPjZyEV+12Tb7vI=
Subject key identifier:   F2:F6:6C:72:DE:DB:E3:3A:E6:FD:B7:E2:31:A0:76:66:B8:0E:06:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A26D54043F8921FC489ADEEAC57CACB9FAFB35E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Jan 2026 17:58:05 +0000
Certificate not after:    Mon 11 Jan 2027 18:03:05 +0000
Subordinate resources:    AS: 52593
                          IP: 170.83.208.0/22
                          IP: 177.87.232.0/22
                          IP: 2804:d10::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:26:d5:40:43:f8:92:1f:c4:89:ad:ee:ac:57:ca:cb:9f:af:b3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 12 17:58:05 2026 GMT
            Not After : Jan 11 18:03:05 2027 GMT
        Subject: CN=F2F66C72DEDBE33AE6FDB7E231A07666B80E0690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9b:a1:7b:75:71:f7:49:66:b5:cf:c1:44:9c:
                    fe:b3:dc:33:d3:0f:72:b0:5d:9e:21:84:7f:ae:9b:
                    ca:64:1f:5d:96:74:5a:bc:4e:74:78:fe:f1:fc:77:
                    ce:72:f3:03:fd:60:27:eb:19:35:07:17:b5:e5:b2:
                    6f:08:ec:da:54:24:94:1e:c4:04:2b:c1:cc:3f:2e:
                    dd:b3:6f:1f:96:1d:6d:2c:03:cb:cb:18:10:c8:a1:
                    e8:65:21:b4:1f:32:54:66:cf:7d:d8:c8:74:e4:86:
                    9f:cf:b2:15:fb:bb:49:cd:48:0b:6b:4c:eb:5c:67:
                    27:14:70:7d:93:0f:06:f7:2f:0e:c6:30:7f:13:a6:
                    92:1d:d9:06:fc:da:c1:af:e4:21:e8:72:7a:17:e1:
                    4e:06:44:88:5c:f3:24:53:2a:61:e4:96:22:5a:09:
                    87:6a:f6:02:fb:b6:30:8b:9b:7a:05:a0:47:38:2e:
                    f0:c9:6c:7f:66:01:6d:b0:41:4f:bc:83:c0:8d:8f:
                    82:3a:fa:d9:61:a9:3c:24:40:36:d9:a3:82:f3:aa:
                    14:ed:d2:9b:f3:3f:2a:51:87:38:c0:89:3e:1c:c0:
                    1c:09:da:28:64:ba:af:97:57:1e:74:d9:85:5b:64:
                    b6:8d:8c:70:29:7c:4c:04:85:45:b9:2f:55:22:24:
                    5a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:F6:6C:72:DE:DB:E3:3A:E6:FD:B7:E2:31:A0:76:66:B8:0E:06:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.208.0/22
                  177.87.232.0/22
                IPv6:
                  2804:d10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52593

    Signature Algorithm: sha256WithRSAEncryption
         45:f7:7b:59:d9:8e:cf:b8:fa:6b:2c:ac:0a:bd:1b:36:fa:35:
         3f:36:68:50:2b:67:8c:f5:d7:09:8d:28:57:f5:27:ae:bf:3f:
         49:3a:cd:cd:41:e6:96:d7:85:d7:06:99:e3:01:ef:82:7b:ab:
         e2:25:25:f9:42:c3:8e:39:46:76:b6:f8:0f:0d:6d:f0:c1:cd:
         85:e5:98:ce:45:ac:0a:c8:18:9e:76:c2:17:5e:a4:d3:9f:a0:
         85:f7:d5:06:bc:69:a3:8e:03:86:15:55:5a:fa:f8:d8:2a:e9:
         b6:00:a8:fe:8c:59:bd:37:4a:8a:cf:a6:af:71:44:ae:67:36:
         0a:ae:6b:22:bf:7e:34:71:fc:da:55:66:8d:6e:5e:60:d1:d1:
         1a:08:21:2c:5e:ef:bb:63:ea:16:96:7d:8e:d2:fb:11:b2:64:
         37:73:8f:21:e5:86:e3:c3:13:22:aa:5f:8b:bc:60:f0:f7:82:
         0e:d6:05:cf:b1:04:23:3b:67:a0:9b:6c:87:a2:c6:c6:9b:97:
         b4:7f:ae:8f:06:22:91:c7:e7:60:f8:50:0d:c1:99:a1:30:cb:
         85:8f:c3:69:82:1e:4f:91:7d:e7:00:d4:7b:e3:35:5b:fb:d5:
         00:00:7e:1f:6c:ec:2d:d8:3a:7d:af:9b:0e:d8:fc:24:75:87:
         e4:b1:6f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:02:45 2026 by rpki-client