This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B954FE6C9AD28EAA39A9AA5C8A2354026448B365.cer
File:                     B954FE6C9AD28EAA39A9AA5C8A2354026448B365.cer (raw, json)
Hash identifier:          tWvI/cUwRYtGmmXU4Uc+PTNKxMBJQ0yrsXQ9U4tMmFU=
Subject key identifier:   B9:54:FE:6C:9A:D2:8E:AA:39:A9:AA:5C:8A:23:54:02:64:48:B3:65
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       14CED2CC430C2409D655639EBC5B8F592010FFB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6BKKT3FEsg5U6fAzTTDWMmffQpbXpPnzhKJhUmyhieBp/0/B954FE6C9AD28EAA39A9AA5C8A2354026448B365.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6BKKT3FEsg5U6fAzTTDWMmffQpbXpPnzhKJhUmyhieBp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Jan 2026 17:54:23 +0000
Certificate not after:    Tue 05 Jan 2027 17:59:23 +0000
Subordinate resources:    AS: 262739
                          IP: 177.10.128.0/22
                          IP: 2804:5cc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 08:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ce:d2:cc:43:0c:24:09:d6:55:63:9e:bc:5b:8f:59:20:10:ff:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  6 17:54:23 2026 GMT
            Not After : Jan  5 17:59:23 2027 GMT
        Subject: CN=B954FE6C9AD28EAA39A9AA5C8A2354026448B365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:49:a5:c8:76:1b:cc:9c:cf:61:c6:bf:14:
                    39:36:ff:24:32:e7:b2:8e:53:1a:24:a0:89:13:a7:
                    c0:c9:df:3c:3d:5a:fc:70:23:b4:c8:0b:f8:47:c1:
                    2e:e0:f1:8c:18:41:da:eb:2a:99:86:dc:1d:11:9f:
                    29:7b:03:ef:63:35:b8:aa:cf:00:14:62:69:89:78:
                    79:51:1c:7f:5c:b1:b0:2d:56:a2:b0:a5:01:83:c1:
                    c3:be:ca:3d:c1:c0:18:6a:8c:3d:e8:61:bc:fe:92:
                    a7:67:e2:49:9e:be:29:80:82:f2:99:0c:0d:ca:24:
                    74:4e:d0:55:a6:c6:6f:d0:c7:d6:01:62:bc:3b:2d:
                    64:4d:9a:9b:99:8f:f5:24:2c:b4:58:4e:7f:b7:e2:
                    7a:62:c6:05:28:99:1a:59:7d:f5:6f:cf:9f:35:86:
                    e7:f9:a5:2d:d9:e2:fc:30:83:bc:c2:f4:3c:0d:3c:
                    fe:9b:7e:10:4c:94:6f:0f:5b:41:04:e5:0f:32:de:
                    99:05:5d:0f:a1:82:8e:ea:88:eb:f5:07:75:36:e0:
                    2f:69:f1:48:2d:1c:8a:79:77:4f:8c:84:14:b9:d7:
                    e8:05:67:07:9b:b2:d5:16:bd:65:9d:09:07:82:55:
                    c8:2d:27:0e:91:9a:5f:a9:a1:08:aa:eb:a0:ec:a7:
                    21:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:54:FE:6C:9A:D2:8E:AA:39:A9:AA:5C:8A:23:54:02:64:48:B3:65
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6BKKT3FEsg5U6fAzTTDWMmffQpbXpPnzhKJhUmyhieBp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6BKKT3FEsg5U6fAzTTDWMmffQpbXpPnzhKJhUmyhieBp/0/B954FE6C9AD28EAA39A9AA5C8A2354026448B365.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.128.0/22
                IPv6:
                  2804:5cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262739

    Signature Algorithm: sha256WithRSAEncryption
         b6:83:1f:10:8f:82:8c:2e:4b:36:f7:36:d4:01:27:4b:e7:c0:
         9b:20:6b:93:c9:0e:8c:b5:de:9e:70:ec:1b:33:5b:53:39:a8:
         fa:9f:bb:15:54:26:1c:db:c2:d5:61:a9:40:cd:24:fd:4a:5b:
         ec:77:4e:59:c5:b6:b6:1b:6d:6c:fc:8e:b9:a9:19:a8:71:7a:
         d2:b3:67:ca:b5:82:5c:49:52:af:65:fc:af:4a:2b:79:6c:c3:
         d1:2b:13:5d:28:68:5a:ee:df:2d:45:f9:db:e1:7b:19:06:16:
         1f:bf:7e:b5:21:64:73:0e:e3:95:3e:97:76:e8:bf:b9:3e:94:
         ce:0d:fe:f4:c0:4b:0c:24:5c:ce:bb:10:d5:55:bb:53:3b:7b:
         2b:ad:5a:6b:0c:7a:fa:88:86:c4:30:3d:9c:21:07:9d:b1:08:
         47:8f:94:e9:c6:ab:97:3c:ef:e6:c6:d5:a6:08:9e:d1:55:38:
         a5:ef:c6:8b:ad:86:d2:09:be:0c:2f:e8:43:1f:ed:1f:c7:14:
         ce:74:47:a9:3c:86:63:8a:cb:98:0f:f5:b6:95:8a:42:53:07:
         dc:af:6b:42:3a:55:a2:82:02:21:2f:dd:e3:78:91:64:42:38:
         1c:6d:57:4f:51:84:7b:c8:0c:85:dd:5f:11:fb:7d:15:3b:d7:
         81:a1:1e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----