This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F78A1D8BE9AA3D70F99A3F21A974FF836EC0FE16.cer
File:                     F78A1D8BE9AA3D70F99A3F21A974FF836EC0FE16.cer (raw, json)
Hash identifier:          GzkoibGGwI7rHzFebklnLBADbLIv9OyBCUY/2JypcCA=
Subject key identifier:   F7:8A:1D:8B:E9:AA:3D:70:F9:9A:3F:21:A9:74:FF:83:6E:C0:FE:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77FDFACA313A195597775429481E3F7E34D9E0FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/F78A1D8BE9AA3D70F99A3F21A974FF836EC0FE16.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Jan 2026 16:29:28 +0000
Certificate not after:    Fri 15 Jan 2027 16:34:28 +0000
Subordinate resources:    AS: 271517
                          IP: 181.232.226.0/23
                          IP: 2804:7cc4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fd:fa:ca:31:3a:19:55:97:77:54:29:48:1e:3f:7e:34:d9:e0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 16 16:29:28 2026 GMT
            Not After : Jan 15 16:34:28 2027 GMT
        Subject: CN=F78A1D8BE9AA3D70F99A3F21A974FF836EC0FE16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:c0:68:ce:98:ea:f7:09:c5:f1:37:4d:3d:
                    8a:4b:5b:2f:e3:81:3d:3c:9f:6f:04:ce:00:2f:1b:
                    2e:a4:56:e7:19:14:9b:ee:12:49:6f:48:a0:55:7e:
                    54:b5:cb:82:ca:86:7e:44:6a:6f:60:27:30:39:6d:
                    cd:85:f5:7b:eb:45:15:28:26:be:fe:56:8c:30:99:
                    74:a1:bf:dc:47:7b:04:11:ff:f5:6e:c1:22:9e:49:
                    bc:75:22:62:72:37:8c:bc:e6:6b:be:2f:4f:0c:4c:
                    f7:8e:60:04:23:a6:2d:54:0c:92:9a:ad:9a:b6:f5:
                    91:48:2e:b9:7e:34:c1:e5:92:59:6b:10:b1:83:1b:
                    87:31:e1:fb:3f:70:d2:a3:db:48:69:99:85:e9:d9:
                    d6:e6:b1:89:a8:8e:6a:f2:a6:0f:08:7f:03:33:81:
                    9e:04:d8:84:d6:c7:68:52:b2:2f:16:c2:82:dc:87:
                    4f:a5:fa:9d:c7:a9:af:fb:18:e7:ff:3c:08:9e:40:
                    87:7f:44:05:14:dc:2b:2b:19:83:6b:ce:5c:c0:9f:
                    63:16:7b:e3:1e:e3:33:b6:c6:44:ec:35:e4:72:9d:
                    ba:3c:13:53:6f:3d:12:7f:c4:d4:8f:da:9b:14:13:
                    aa:67:d9:95:fe:75:bb:29:df:b8:80:0f:f3:65:2a:
                    ae:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:8A:1D:8B:E9:AA:3D:70:F9:9A:3F:21:A9:74:FF:83:6E:C0:FE:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/F78A1D8BE9AA3D70F99A3F21A974FF836EC0FE16.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.226.0/23
                IPv6:
                  2804:7cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271517

    Signature Algorithm: sha256WithRSAEncryption
         6f:9a:e7:66:71:c3:63:fa:cb:03:68:17:4c:3a:3e:24:1c:09:
         0b:27:29:6a:71:47:75:c5:f2:50:a0:38:95:56:d1:6b:cc:9b:
         84:0c:b6:17:3c:b1:0a:11:f6:67:28:3e:7a:5c:3e:3d:01:f3:
         1b:7a:ab:78:d9:9a:af:60:1c:d7:a9:ba:be:da:e2:82:14:45:
         56:22:da:37:60:ce:87:48:b4:6f:c0:cd:5d:a6:5b:38:77:5d:
         f0:8d:57:17:6d:8f:a6:fb:f4:02:21:72:00:d3:27:8c:12:2c:
         b4:a3:65:36:5e:96:4c:07:1f:52:31:db:6b:a2:f0:0e:62:3a:
         07:28:b4:ce:fb:73:ac:c3:c8:17:19:ef:98:49:95:79:5c:4e:
         67:fd:99:6e:05:6a:2c:95:72:03:f9:fd:72:7e:ae:b0:c3:dc:
         94:35:8d:6c:a5:44:96:13:ef:7b:77:33:2a:5e:8f:47:da:09:
         bb:2f:b6:1b:c4:21:67:d6:5b:cb:c3:77:ad:f5:2d:06:1d:04:
         3f:3d:6c:aa:80:c8:ab:28:bd:ba:a5:3d:3f:0f:2e:04:93:5d:
         2c:42:64:ee:6a:4c:4c:95:06:04:04:96:58:d4:72:5a:7c:13:
         c9:91:2f:a0:98:13:f9:72:2e:f1:bc:cb:da:94:d8:86:48:37:
         5a:89:36:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----