This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.cer
File:                     43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.cer (raw, json)
Hash identifier:          GIQf9sJDnNbKEJxiScSd8Z/QvltKDT92+t53kbrMzxw=
Subject key identifier:   43:CC:4E:F5:45:CF:6D:6E:4A:7D:42:B8:BE:BA:56:51:74:3C:8E:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7AEDC368CA1628C0731F96397734E578C48483EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Jan 2026 13:01:02 +0000
Certificate not after:    Mon 04 Jan 2027 13:06:02 +0000
Subordinate resources:    AS: 268836
                          IP: 45.174.28.0/22
                          IP: 2804:5b58::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 08:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ed:c3:68:ca:16:28:c0:73:1f:96:39:77:34:e5:78:c4:84:83:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  5 13:01:02 2026 GMT
            Not After : Jan  4 13:06:02 2027 GMT
        Subject: CN=43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e1:c8:c6:0f:e3:2d:c7:e5:f8:16:cd:35:0a:
                    14:e4:22:04:d4:90:2e:17:2e:bc:a4:35:2a:e2:72:
                    07:c7:cd:32:8a:ab:66:37:bc:b0:15:5a:38:e8:cc:
                    88:ff:4b:14:1f:83:f0:e1:e8:dd:48:ab:5b:9e:b9:
                    0c:03:b6:43:a2:78:ba:cf:ee:aa:c6:c4:fc:f3:0d:
                    23:14:3b:f6:29:e8:ca:b9:4b:a3:e5:fa:61:f9:d5:
                    1b:66:23:32:8c:8a:c6:5e:e9:6c:24:5f:0f:cf:54:
                    59:c1:8d:71:52:b1:4a:87:5d:d9:ae:89:ec:c9:07:
                    d9:b8:bd:e8:11:52:d9:4d:50:43:9b:e4:35:10:c8:
                    de:75:4f:76:0a:f8:b6:e3:56:e3:3e:d3:74:3f:12:
                    fd:c8:f6:0d:ca:f3:c5:da:84:a6:58:e0:db:62:33:
                    d3:a0:5e:90:6c:8a:3b:6b:e2:96:e4:e0:0e:9e:57:
                    80:b7:06:d2:31:45:71:51:af:d2:6f:47:36:3b:b9:
                    b8:db:4a:80:a4:15:a4:c7:db:6b:f0:0c:f4:66:3d:
                    18:ce:80:d4:da:1c:19:3e:ef:6e:af:35:4f:96:24:
                    bd:2b:4d:68:77:24:ed:2b:73:b4:19:5f:0b:fc:e4:
                    70:33:5c:7c:1f:c3:5c:86:34:5d:1f:dc:32:10:83:
                    8f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:CC:4E:F5:45:CF:6D:6E:4A:7D:42:B8:BE:BA:56:51:74:3C:8E:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/43CC4EF545CF6D6E4A7D42B8BEBA5651743C8E74.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.28.0/22
                IPv6:
                  2804:5b58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268836

    Signature Algorithm: sha256WithRSAEncryption
         7b:d9:5b:6f:fb:76:f3:3f:9e:c5:2f:3f:c5:91:46:a5:0d:0f:
         ee:81:0c:a8:75:8b:88:1b:52:aa:f5:d2:01:63:65:48:f7:bd:
         08:7d:48:d3:8f:ac:74:83:86:b8:9b:e4:0b:c2:cf:06:cc:46:
         be:db:9b:22:3e:19:a5:93:fc:eb:11:73:98:19:4f:37:e9:89:
         52:a8:fb:0e:9d:1b:3e:9a:6c:cf:1d:79:50:35:07:3d:c6:99:
         31:20:7d:e4:88:0c:a2:34:6f:77:a9:52:74:39:55:b9:01:e8:
         f3:e1:b3:97:0c:01:d1:6b:3e:a7:9e:97:c6:18:72:ea:e1:2d:
         8c:01:5c:49:b4:b4:17:bc:e0:fe:b3:68:91:fb:1e:bb:6d:f2:
         84:78:6a:0b:96:2e:6e:6a:3e:95:e0:af:db:bd:86:70:28:03:
         a7:7d:fb:2d:51:d9:fb:b2:ac:fe:23:31:1f:03:39:ae:19:8d:
         e2:65:a2:d8:92:bc:2a:21:a5:c9:f2:e2:16:1d:19:09:9e:45:
         fa:c5:75:78:7e:62:c7:d8:5f:ad:47:f5:3f:9c:73:cf:6c:87:
         ec:c0:01:f8:ef:75:cf:07:ca:d2:9b:8a:32:de:42:a2:30:19:
         f7:d9:c3:b5:03:dd:41:6b:29:38:98:37:34:f0:54:0e:87:19:
         07:aa:10:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----