This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B599F549032CE46FA7AE20E8E19156AF95C31ACF.cer
File:                     B599F549032CE46FA7AE20E8E19156AF95C31ACF.cer (raw, json)
Hash identifier:          7tu9g0LsyTl9FWKl4XeAQgqbOVRbTI3c6h+6Iq2TPJo=
Subject key identifier:   B5:99:F5:49:03:2C:E4:6F:A7:AE:20:E8:E1:91:56:AF:95:C3:1A:CF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       07EB6FF46062ED27E5B6D8932330501AFCB860D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/B599F549032CE46FA7AE20E8E19156AF95C31ACF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Jan 2026 12:43:48 +0000
Certificate not after:    Tue 05 Jan 2027 12:48:48 +0000
Subordinate resources:    AS: 269655
                          IP: 45.190.244.0/22
                          IP: 2804:67dc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 08:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:eb:6f:f4:60:62:ed:27:e5:b6:d8:93:23:30:50:1a:fc:b8:60:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  6 12:43:48 2026 GMT
            Not After : Jan  5 12:48:48 2027 GMT
        Subject: CN=B599F549032CE46FA7AE20E8E19156AF95C31ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:64:c9:ed:7d:8b:0a:21:63:94:dc:7f:47:2b:
                    48:60:02:81:99:62:8a:b9:77:69:6b:0a:ea:62:56:
                    eb:12:99:2c:c4:6a:82:a2:f0:42:92:26:59:c3:7b:
                    d3:8e:47:75:d9:e8:1c:8f:41:1a:c4:93:d4:92:f9:
                    8f:2c:2f:69:e0:19:4c:93:1e:c2:18:c2:98:de:19:
                    c6:b6:46:19:46:88:5f:c3:bd:0e:ee:b9:97:3e:03:
                    37:c9:b1:ca:af:5e:f3:dc:06:d0:49:96:72:b0:fe:
                    c2:29:e8:85:6a:8f:f8:83:b1:e4:84:ac:0d:29:6d:
                    73:3d:3a:73:b3:41:73:96:e9:5c:a7:0f:8c:a3:83:
                    69:e2:8f:d7:96:27:d0:c0:a5:67:a6:63:a8:88:b8:
                    92:41:97:4b:08:18:87:2b:a8:51:36:ce:dd:48:11:
                    2b:82:fb:ae:66:33:2d:08:8d:c0:af:c2:56:45:89:
                    57:78:5f:d3:d6:54:c9:ed:60:01:bc:e9:8e:00:a7:
                    2c:87:37:4f:73:96:b6:27:22:88:a7:85:26:5a:c6:
                    af:de:c0:46:e7:19:4a:1f:45:7a:5a:06:da:6a:f9:
                    a0:08:4c:16:34:61:a5:e4:c2:ce:7d:fb:13:4d:d9:
                    ea:0d:56:6c:2a:7d:63:f9:a7:53:99:57:4b:86:4d:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:99:F5:49:03:2C:E4:6F:A7:AE:20:E8:E1:91:56:AF:95:C3:1A:CF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/B599F549032CE46FA7AE20E8E19156AF95C31ACF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.244.0/22
                IPv6:
                  2804:67dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269655

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:f7:2d:bb:eb:be:e9:f9:d3:49:74:bf:a9:cb:23:e4:58:
         4d:06:10:8c:bf:d3:62:b6:9b:57:54:6f:6b:dd:5d:b6:05:d8:
         32:bc:6a:04:7d:8e:b1:eb:e1:84:84:12:4a:06:29:03:89:f0:
         ea:3e:32:c8:dd:c2:9b:c8:6f:83:ac:7f:a7:84:81:41:d1:02:
         42:09:a5:d8:fc:39:3b:c0:f9:64:f7:e2:27:06:df:f9:80:de:
         ad:d6:37:e3:e5:8d:78:63:72:3d:a2:00:58:d7:23:e3:aa:5e:
         42:b6:3f:91:e8:e8:97:1c:4f:af:0c:36:37:f2:c3:08:c8:fe:
         05:11:ac:71:3f:7a:37:fe:2b:a4:88:9d:d4:ba:27:30:d0:f2:
         32:ea:e5:30:2c:58:3a:7e:de:b9:f2:0e:fd:72:89:ac:fa:7f:
         ec:6d:75:14:e3:9b:2d:65:67:4e:07:4c:34:93:c2:4f:86:1b:
         cf:40:d6:a9:04:15:12:e5:d9:25:ce:95:9b:bf:35:9d:0b:e8:
         80:f2:cc:8b:c8:ad:ff:5c:a7:f6:52:61:f7:76:eb:be:8d:d3:
         0c:9b:52:9e:27:52:6b:8e:fc:4e:66:1b:bd:5f:cc:79:f9:97:
         7b:8d:0c:46:89:2e:5f:eb:ab:ea:79:89:21:e1:09:77:7a:f0:
         8f:7c:e4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----