This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.cer
File:                     F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.cer (raw, json)
Hash identifier:          xYXG54qz7BcVE0cgZpQa1wVXFbQ5C3SRLOe6loiBLd0=
Subject key identifier:   F8:DA:4F:77:39:BF:F5:C8:C9:C8:C8:E6:3B:8D:4D:C2:F6:43:56:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E0686B5405931DCFC042AB5FD6218E8DF64D025
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Jan 2026 19:47:27 +0000
Certificate not after:    Mon 11 Jan 2027 19:52:27 +0000
Subordinate resources:    AS: 271359
                          IP: 200.80.100.0/22
                          IP: 2804:7a44::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:06:86:b5:40:59:31:dc:fc:04:2a:b5:fd:62:18:e8:df:64:d0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 12 19:47:27 2026 GMT
            Not After : Jan 11 19:52:27 2027 GMT
        Subject: CN=F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:74:30:c4:15:71:0b:a9:40:0f:f4:11:1f:ea:
                    3f:d1:95:3f:cb:84:13:bb:06:31:91:96:26:56:37:
                    05:3f:98:ee:6e:50:9c:c9:d4:be:d8:0c:c1:3b:cc:
                    4b:dd:c6:d2:30:36:cd:ff:5e:d0:63:92:7a:de:72:
                    14:c5:38:c2:ad:e8:b5:bf:7b:f6:d1:a7:c5:a6:17:
                    82:b6:21:08:22:a4:df:eb:4c:d3:02:e4:36:8e:0e:
                    d9:65:9c:c2:35:07:65:92:7f:d2:18:0c:01:ce:a6:
                    55:38:3d:1e:b7:f5:49:ca:09:90:15:09:67:1d:67:
                    1c:34:7a:f6:b4:27:7b:a4:0b:d7:9d:fb:d7:34:83:
                    5f:c9:6a:47:f6:77:d9:f7:51:0c:48:d4:36:ac:e5:
                    23:f8:12:82:b3:d8:55:eb:30:ce:96:85:9a:f3:15:
                    c0:70:36:25:05:25:62:b1:fe:c2:c3:ce:bb:84:73:
                    18:b2:a3:01:e1:ee:57:3d:0f:f3:46:aa:91:96:6f:
                    6e:9f:79:6b:53:81:67:e3:a7:25:7d:71:33:84:92:
                    c5:c1:d0:bd:d6:00:60:ae:0f:bc:87:4d:db:6c:f1:
                    ba:62:4d:35:ba:b9:db:a8:b8:70:68:a7:48:e9:78:
                    15:05:f0:e6:d7:e8:69:1f:ee:93:ef:95:ee:fe:74:
                    6e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:DA:4F:77:39:BF:F5:C8:C9:C8:C8:E6:3B:8D:4D:C2:F6:43:56:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4A249vTWWhmntGi9DJR588BrCwL5ndNQrXpsq1y8NJgs/0/F8DA4F7739BFF5C8C9C8C8E63B8D4DC2F64356EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.100.0/22
                IPv6:
                  2804:7a44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271359

    Signature Algorithm: sha256WithRSAEncryption
         d4:59:51:40:db:86:54:0a:8c:6f:b7:34:8f:32:10:96:e1:74:
         55:45:22:32:e3:b5:3b:75:97:65:1d:39:e9:ce:cb:5b:43:c0:
         fc:c9:aa:e0:b2:eb:a5:de:96:c2:0e:0b:5c:a5:49:f2:26:71:
         18:a3:ac:64:8b:43:26:9e:55:e5:c9:bb:24:49:d6:e9:02:9e:
         06:f0:c1:38:5c:ac:dc:cb:39:a0:82:a8:bc:16:63:4a:e6:5c:
         18:37:9e:66:50:fe:06:be:5d:45:54:1b:a1:88:34:7e:d5:1a:
         5d:ec:22:5e:a5:d4:10:4b:28:3a:46:74:32:a9:8f:b5:df:ed:
         dd:2f:ab:ba:57:8b:c2:ab:ba:84:fe:35:ac:d9:87:6c:f9:f8:
         26:4f:06:14:1c:db:a7:2a:1d:b2:8c:ae:0c:18:69:15:1d:3e:
         7f:cd:85:a6:1c:51:0f:bd:11:b1:9e:c7:e8:e1:98:a5:54:61:
         03:1b:f2:88:b8:a0:7e:12:00:96:07:cd:d6:73:72:61:61:17:
         12:8f:67:34:75:96:89:19:33:5f:35:f1:da:eb:55:c5:13:24:
         78:2d:bc:16:f9:38:a3:a5:68:27:c0:d3:6d:5d:33:a1:d7:75:
         13:71:ea:6f:3f:d9:ae:95:65:90:40:2d:a3:16:99:1e:0d:be:
         67:60:27:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----