This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FAB287B5E62AECE651D89597FB0C5EE6A8707015.cer
File:                     FAB287B5E62AECE651D89597FB0C5EE6A8707015.cer (raw, json)
Hash identifier:          u3pZJ85VktxAvlfK05NhMd62XqCcsgW13ZP8wCRn5D0=
Subject key identifier:   FA:B2:87:B5:E6:2A:EC:E6:51:D8:95:97:FB:0C:5E:E6:A8:70:70:15
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       64D016DA8D514A3ADA86B43A87FCB48716149E5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/FAB287B5E62AECE651D89597FB0C5EE6A8707015.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Jan 2026 11:52:16 +0000
Certificate not after:    Sat 09 Jan 2027 11:57:16 +0000
Subordinate resources:    AS: 61827
                          IP: 201.140.232.0/22
                          IP: 2804:19ec::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d0:16:da:8d:51:4a:3a:da:86:b4:3a:87:fc:b4:87:16:14:9e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 10 11:52:16 2026 GMT
            Not After : Jan  9 11:57:16 2027 GMT
        Subject: CN=FAB287B5E62AECE651D89597FB0C5EE6A8707015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1c:0b:40:93:61:cd:d0:e5:12:ad:7d:16:bf:
                    0b:a1:d7:10:6c:c2:2b:d7:e9:81:d5:2d:d7:d1:d3:
                    91:36:4e:b5:55:4a:01:d9:1f:3b:3a:50:37:a6:19:
                    e0:74:26:5b:d0:aa:df:9a:fb:7f:9f:7d:d5:a9:c1:
                    14:ef:e1:e2:98:09:ef:e5:82:c4:1d:ea:1b:1d:46:
                    48:4c:84:cc:99:de:25:ec:be:81:25:42:b3:7b:60:
                    51:02:92:ec:c5:1d:82:fc:19:18:f0:49:16:50:19:
                    2e:4f:69:b0:f5:b4:0c:c3:eb:6f:63:d3:46:6b:c1:
                    51:ad:13:4a:f2:dc:fd:42:9f:e3:2d:6d:49:d3:3a:
                    f3:13:e2:b7:51:16:d5:d8:d7:ad:4e:9e:7f:0b:92:
                    ef:5e:95:e6:91:fe:51:3c:19:d0:58:7d:ba:0e:9f:
                    a8:88:49:97:cb:af:c5:01:ba:47:9d:81:55:40:46:
                    d6:9e:6e:f4:ab:60:a3:53:44:a8:1b:e6:c8:28:7a:
                    07:9b:29:27:97:4f:05:c6:26:f6:7e:b1:65:d7:18:
                    01:3d:98:45:e0:a2:ed:0f:d2:f3:f7:7d:f2:2b:57:
                    a0:5f:a9:d9:1a:16:47:92:53:70:54:26:47:a3:e4:
                    d5:d4:5f:3b:7e:3f:9d:e8:ee:78:a6:08:f2:e5:b8:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:B2:87:B5:E6:2A:EC:E6:51:D8:95:97:FB:0C:5E:E6:A8:70:70:15
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/FAB287B5E62AECE651D89597FB0C5EE6A8707015.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.232.0/22
                IPv6:
                  2804:19ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61827

    Signature Algorithm: sha256WithRSAEncryption
         1e:95:00:69:3b:c1:15:11:8b:49:f6:ab:88:6e:4f:27:c3:c5:
         e2:a4:89:35:f3:37:80:fe:f7:86:7f:11:dd:90:52:45:de:6a:
         7f:ad:04:c8:45:98:5b:c0:81:c4:b8:cc:78:1c:3f:72:66:4f:
         19:74:fb:58:fa:8e:a8:54:93:72:66:35:b7:03:4d:31:3a:80:
         ee:5c:11:72:bb:9a:8a:6a:cd:11:98:e9:9d:b0:14:2d:9b:80:
         46:09:25:26:a0:2c:98:ae:eb:c4:c8:2b:51:64:68:96:1c:f5:
         36:9f:c8:8f:83:38:4e:b9:89:92:c9:ba:67:37:f3:d8:58:03:
         6f:9b:54:a9:6e:03:36:71:eb:5e:7e:63:a1:c2:ca:fc:ec:0e:
         26:6d:e3:4d:06:cb:8a:0e:bb:9c:60:29:e9:a9:6a:49:48:7f:
         0d:5d:9e:52:72:03:fb:3a:89:a0:bc:c9:2a:bb:cd:a7:0c:f2:
         37:0b:08:25:68:91:ad:6d:a0:63:98:bd:95:e3:e9:16:b0:3d:
         7d:32:56:89:2a:7d:7b:e4:ad:3c:91:c1:9a:bd:51:21:0e:cb:
         a5:32:3b:be:66:06:26:73:0a:bc:33:55:e3:bb:60:08:8e:fd:
         7e:bd:9a:55:77:78:b3:a7:7b:bf:19:70:f3:7b:e3:a4:19:86:
         28:14:4e:51
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUZNAW2o1RSjrahrQ6h/y0hxYUnl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMTAxMTUyMTZaFw0yNzAxMDkxMTU3MTZaMDMxMTAvBgNV
BAMTKEZBQjI4N0I1RTYyQUVDRTY1MUQ4OTU5N0ZCMEM1RUU2QTg3MDcwMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOHAtAk2HN0OUSrX0Wvwuh1xBs
wivX6YHVLdfR05E2TrVVSgHZHzs6UDemGeB0JlvQqt+a+3+ffdWpwRTv4eKYCe/l
gsQd6hsdRkhMhMyZ3iXsvoElQrN7YFECkuzFHYL8GRjwSRZQGS5PabD1tAzD629j
00ZrwVGtE0ry3P1Cn+MtbUnTOvMT4rdRFtXY161Onn8Lku9eleaR/lE8GdBYfboO
n6iISZfLr8UBukedgVVARtaebvSrYKNTRKgb5sgoegebKSeXTwXGJvZ+sWXXGAE9
mEXgou0P0vP3ffIrV6BfqdkaFkeSU3BUJkej5NXUXzt+P53o7nimCPLluP7ZAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6soe15irs5lHY
lZf7DF7mqHBwFTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWtH
ZldyVFZWck1zTEhHVzE5dWNuUzFuZG1ZdnpFa0VxV3U5OHBRYnNjQkUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlr
R2ZXclRWVnJNc0xIR1cxOXVjblMxbmRtWXZ6RWtFcVd1OThwUWJzY0JFLzAvRkFC
Mjg3QjVFNjJBRUNFNjUxRDg5NTk3RkIwQzVFRTZBODcwNzAxNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyYzoMA0EAgACMAcDBQAoBBnsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDxgzANBgkqhkiG9w0BAQsFAAOCAQEAHpUAaTvBFRGLSfar
iG5PJ8PF4qSJNfM3gP73hn8R3ZBSRd5qf60EyEWYW8CBxLjMeBw/cmZPGXT7WPqO
qFSTcmY1twNNMTqA7lwRcruaimrNEZjpnbAULZuARgklJqAsmK7rxMgrUWRolhz1
Np/Ij4M4TrmJksm6Zzfz2FgDb5tUqW4DNnHrXn5jocLK/OwOJm3jTQbLig67nGAp
6alqSUh/DV2eUnID+zqJoLzJKrvNpwzyNwsIJWiRrW2gY5i9lePpFrA9fTJWiSp9
e+StPJHBmr1RIQ7LpTI7vmYGJnMKvDNV47tgCI79fr2aVXd4s6d7vxlw83vjpBmG
KBROUQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:16:05 2026 by rpki-client