This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.cer
File:                     63D4C65E48A39E7890002AD13B94416CFD8B9DC6.cer (raw, json)
Hash identifier:          UP14JPPlISj/rfbwmELa7CDjtqws0/vfi2LRrQAmNDE=
Subject key identifier:   63:D4:C6:5E:48:A3:9E:78:90:00:2A:D1:3B:94:41:6C:FD:8B:9D:C6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       71364102C01D1E6C395E4ABB160FAFE3659221B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Jan 2026 16:36:25 +0000
Certificate not after:    Tue 05 Jan 2027 16:41:25 +0000
Subordinate resources:    AS: 262374
                          IP: 138.99.244.0/22
                          IP: 170.254.116.0/22
                          IP: 177.39.24.0/22
                          IP: 177.128.160.0/21
                          IP: 179.127.120.0/22
                          IP: 2804:878::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 07:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:36:41:02:c0:1d:1e:6c:39:5e:4a:bb:16:0f:af:e3:65:92:21:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  6 16:36:25 2026 GMT
            Not After : Jan  5 16:41:25 2027 GMT
        Subject: CN=63D4C65E48A39E7890002AD13B94416CFD8B9DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c6:0b:ca:de:9a:ca:05:53:e5:f1:e3:4f:90:
                    81:59:eb:86:54:81:c1:73:d3:99:73:1c:c2:19:19:
                    54:69:a3:3d:17:74:90:a9:d5:de:ce:af:c7:bf:d2:
                    4e:99:2f:fd:cb:9c:ab:4e:43:28:8b:da:10:5f:72:
                    80:f5:1f:9d:2a:3b:db:b5:06:15:a0:2f:e6:c2:9d:
                    21:ac:3b:93:2d:33:58:c7:bf:5c:62:00:d6:99:f4:
                    e4:58:0f:3b:63:01:01:f4:32:be:93:af:38:a4:32:
                    7e:03:c5:f4:52:21:b3:6b:3c:81:94:0b:6c:60:ac:
                    ea:bf:cf:54:26:65:de:d8:4e:5f:73:fa:44:03:22:
                    cd:98:93:12:c1:1a:82:80:07:91:d5:d7:01:7b:78:
                    d8:c2:1e:43:e8:93:ad:14:df:06:4b:37:ca:0d:26:
                    eb:2f:e5:09:9c:5b:e9:a7:ef:98:ce:83:01:f2:6b:
                    f7:b8:7c:e6:46:da:5c:4a:2e:da:04:7d:4e:77:13:
                    84:3e:d9:44:a2:19:60:ff:a9:ab:30:8c:7b:f6:00:
                    fd:0e:23:47:19:f0:6f:10:c4:fa:c3:6c:1d:62:c9:
                    8b:34:77:44:88:21:cc:7a:d2:d5:dd:23:fb:18:87:
                    f8:ba:5a:ae:8a:86:89:26:d3:88:62:9e:1e:bb:90:
                    bd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:D4:C6:5E:48:A3:9E:78:90:00:2A:D1:3B:94:41:6C:FD:8B:9D:C6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.244.0/22
                  170.254.116.0/22
                  177.39.24.0/22
                  177.128.160.0/21
                  179.127.120.0/22
                IPv6:
                  2804:878::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262374

    Signature Algorithm: sha256WithRSAEncryption
         2e:33:44:b8:39:aa:5f:7c:d6:ef:ca:72:af:24:b0:d0:9b:5b:
         bf:9c:5a:1d:51:25:91:0a:24:0d:38:a7:78:a9:ad:03:0b:87:
         2b:e2:80:db:dd:f2:aa:b8:b3:fb:c3:0f:24:31:43:da:a9:38:
         2f:60:1e:8c:27:ce:69:ff:a8:90:4e:cf:eb:82:0c:be:10:b0:
         d7:4d:0d:16:31:21:d7:b4:8d:d4:95:1e:3a:0d:9e:e6:ac:e1:
         bc:6d:c0:27:ac:99:ec:a3:c4:81:9f:85:7d:9b:b3:47:6e:f3:
         53:0d:cc:f5:cd:80:a2:a8:2f:0c:64:f2:0e:12:6f:65:52:64:
         9c:3c:15:aa:6c:c5:88:c3:c2:bd:49:27:62:32:d4:96:8d:bf:
         f6:42:cf:61:ae:5a:f7:38:d6:37:4a:19:54:cb:ed:70:8e:21:
         56:51:e9:35:f5:0e:6d:40:52:01:da:6c:23:04:96:7f:4a:41:
         56:14:30:50:d5:0b:88:ae:da:fd:8c:86:b3:5a:56:53:4f:0d:
         bd:90:3a:57:f0:f6:80:65:b8:c8:8a:61:2c:5f:92:ed:92:4a:
         84:b1:72:44:ad:fb:b9:db:98:21:4d:45:97:52:dc:48:27:c6:
         98:c5:42:66:ff:15:9d:da:4f:6f:be:be:28:67:cb:b0:73:5d:
         3c:68:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 08:57:06 2026 by rpki-client