This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer
File:                     2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer (raw, json)
Hash identifier:          kZDIKoiGYbhT9pW55ww9JM3C/K0ysJR0rdr++curaO4=
Subject key identifier:   2C:F6:E8:39:87:81:A4:52:31:E2:16:6F:BB:E4:D1:C0:0B:EE:AD:9C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7E69A051B4FE11517E7193C8869C2131ED860445
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Jan 2026 14:36:59 +0000
Certificate not after:    Mon 04 Jan 2027 14:41:59 +0000
Subordinate resources:    AS: 265432
                          IP: 45.173.180.0/24
                          IP: 45.180.115.0/24
                          IP: 143.202.56.0/22
                          IP: 168.195.208.0/23
                          IP: 168.195.211.0/24
                          IP: 200.9.144.0/24
                          IP: 2804:3408::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 08:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:69:a0:51:b4:fe:11:51:7e:71:93:c8:86:9c:21:31:ed:86:04:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  5 14:36:59 2026 GMT
            Not After : Jan  4 14:41:59 2027 GMT
        Subject: CN=2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:f7:9b:d7:81:b2:e4:02:0a:46:8c:bc:43:
                    1a:a5:7a:ac:47:ed:89:6d:8e:8e:15:f1:e9:f0:17:
                    cb:73:7b:3d:78:fc:58:44:70:67:8e:e0:98:b1:de:
                    eb:c2:44:cc:3a:56:ec:30:91:25:80:e7:67:fb:86:
                    82:fe:10:41:b5:f9:83:9f:e6:54:0e:09:3d:d0:62:
                    b7:11:53:b7:c0:55:36:7a:f1:e1:44:ce:88:a6:21:
                    d5:2a:7e:ff:6e:49:7a:c7:f6:1c:c0:ee:d5:8b:db:
                    1c:6f:9f:43:11:83:ba:08:3c:27:71:e1:cd:b5:6a:
                    8a:4d:43:1f:c9:bb:42:b6:9b:53:2f:56:d0:60:c0:
                    c0:63:16:85:65:cc:ba:03:4e:af:28:bc:67:ba:6c:
                    bd:78:5c:85:e9:8f:22:5c:9f:f5:1b:6a:df:4b:db:
                    24:79:53:91:f7:c7:c8:98:72:d6:f5:b8:73:f7:e4:
                    ac:c5:b0:27:43:3f:8e:2d:46:9f:3d:69:49:cc:17:
                    28:44:81:de:e2:af:81:dc:54:3d:bd:50:93:d4:dc:
                    f8:87:51:8b:2b:5b:ef:b0:5c:d7:50:8b:59:72:b2:
                    65:fa:95:2c:51:8c:5a:f7:ee:7f:77:d4:d4:c1:57:
                    0e:0d:46:8f:02:f9:90:69:ed:33:ba:41:85:52:ca:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:F6:E8:39:87:81:A4:52:31:E2:16:6F:BB:E4:D1:C0:0B:EE:AD:9C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.180.0/24
                  45.180.115.0/24
                  143.202.56.0/22
                  168.195.208.0/23
                  168.195.211.0/24
                  200.9.144.0/24
                IPv6:
                  2804:3408::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265432

    Signature Algorithm: sha256WithRSAEncryption
         79:22:d9:f2:dc:b4:33:13:ea:c5:c0:b9:a2:98:12:a3:c6:4d:
         5c:ea:02:9c:9f:01:69:5f:c9:73:ef:f4:d2:52:f2:c9:5f:78:
         55:b1:ad:70:db:09:c1:61:f7:9c:08:b4:97:7d:67:94:be:85:
         f8:e4:c2:40:9e:8e:10:41:d9:0a:34:16:27:97:f2:ad:8d:f1:
         d3:ff:f7:7f:39:b5:bc:97:08:cb:4d:33:0e:b2:f8:37:48:24:
         5c:a6:27:fe:56:2d:1e:5b:de:06:8a:74:7c:08:7b:60:f5:eb:
         37:ec:11:8b:11:4e:7c:30:f6:43:f0:78:9a:5e:d0:3b:4b:18:
         9b:82:3c:0d:d2:65:0a:04:db:f4:fd:c4:fd:1e:78:0d:13:6f:
         c6:fe:1d:6f:06:18:34:ec:8a:02:f9:8e:61:32:17:78:9c:fe:
         0d:8c:36:1f:9b:99:a4:b7:88:23:9b:af:4f:40:61:52:ff:b2:
         cf:a8:7d:40:5b:1f:95:90:fa:6b:f3:4d:9d:21:d8:79:4d:2b:
         81:2e:17:a4:c5:8b:e7:c4:c0:47:af:cd:a8:86:2f:8f:07:54:
         b5:f1:ef:8e:b2:8f:37:da:d4:37:82:98:37:2b:f1:7a:41:9f:
         33:c1:4a:4b:7f:49:96:f4:a3:b2:0b:1c:12:43:e4:43:e5:96:
         57:d2:da:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 08:58:22 2026 by rpki-client