This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
File:                     53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer (raw, json)
Hash identifier:          EcPQKwbZlzNyo1sukc2SBftp8mgxF1sdnMCQ7nC9uM0=
Subject key identifier:   53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       12A995A92C2B057BE9A4F63004653E90382E25C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Jan 2026 21:08:13 +0000
Certificate not after:    Mon 04 Jan 2027 21:13:13 +0000
Subordinate resources:    AS: 266036
                          IP: 45.4.28.0/22
                          IP: 2804:3990::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 08:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a9:95:a9:2c:2b:05:7b:e9:a4:f6:30:04:65:3e:90:38:2e:25:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  5 21:08:13 2026 GMT
            Not After : Jan  4 21:13:13 2027 GMT
        Subject: CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:2c:50:c5:fc:eb:93:2c:9a:b1:7a:ec:86:
                    39:ba:38:aa:4d:b8:76:f6:ac:4a:a4:6e:34:50:0f:
                    c2:7a:f6:f7:73:05:74:e7:3f:42:4c:05:ff:0b:91:
                    3a:18:bd:fe:88:05:0a:8b:47:af:f4:06:ec:40:7b:
                    3f:be:67:1b:26:95:04:27:77:24:fd:c3:c5:84:b0:
                    12:5c:47:aa:dc:75:51:dc:7d:1c:ca:6b:50:b8:a2:
                    a1:59:bf:cb:c0:01:ff:7c:0e:52:39:1f:aa:82:19:
                    1a:67:2b:b3:1d:6f:45:28:52:a0:f4:69:46:a5:f3:
                    65:a4:67:98:b2:cc:7c:ed:77:90:b3:06:a6:37:3a:
                    e6:0c:a5:45:cc:1d:8d:d8:e4:e1:83:09:1a:43:a2:
                    fd:b7:65:d3:7a:43:0c:5f:03:b0:51:79:91:c3:8a:
                    ea:e9:ff:ca:85:05:cc:fd:fe:9c:fc:4f:bb:1b:3a:
                    9b:09:bb:0c:b1:90:b4:38:f1:1a:e7:b1:ec:bc:a1:
                    f2:e1:e8:b9:8a:63:b3:7d:7c:00:f3:3e:ab:4b:48:
                    a6:92:3b:eb:bb:e5:33:e2:0a:6b:e8:54:aa:a6:34:
                    cc:a6:e8:df:c0:6a:75:ea:f8:da:0f:57:f5:b0:35:
                    9f:8a:dc:8c:50:cf:0d:7d:37:db:35:b7:25:9e:a8:
                    70:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.28.0/22
                IPv6:
                  2804:3990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266036

    Signature Algorithm: sha256WithRSAEncryption
         71:96:48:45:02:5e:57:aa:72:fb:cc:21:4f:13:83:cc:f0:dc:
         af:c3:6d:a7:b0:b6:68:a5:cc:b6:77:d0:b4:a1:15:b1:35:47:
         b3:f2:2a:6b:31:39:7e:5e:ea:4a:a3:88:e8:20:72:42:d0:59:
         50:e0:a4:00:c1:12:b8:a5:98:dd:69:a1:d5:31:22:5f:82:0b:
         60:fb:84:2a:52:44:b6:0d:fb:5f:c6:6c:c0:4d:a5:c2:d0:b8:
         e9:8d:f6:e9:a8:22:e7:cf:7a:1a:94:90:f5:15:77:85:75:cc:
         0b:3f:cc:d8:85:50:a9:eb:4d:c4:55:72:32:89:7c:d2:fe:90:
         ee:e8:25:8e:30:04:b6:0c:e0:2f:ee:bf:ca:c9:26:bb:57:1d:
         1f:19:4e:a1:5c:54:c3:1f:e2:64:ca:4d:df:61:a6:87:71:2a:
         cf:cc:66:6f:3c:7e:13:a8:0b:39:2f:83:64:0c:6b:32:03:03:
         47:ff:33:0e:64:90:a5:a2:01:a4:b2:52:e9:44:4a:67:a7:73:
         78:e6:b1:22:b0:57:b4:e2:2b:4a:1e:12:dc:4b:60:51:62:34:
         f0:cf:fd:bb:dd:3e:89:8d:c7:48:0f:21:22:d4:74:35:37:6d:
         99:b4:71:a6:f4:c6:9c:3a:53:25:57:cc:9f:79:fb:0f:db:68:
         69:a2:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----