This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C8641C9D92BBA00CB3741825A3F5285FCA0B3587.cer
File:                     C8641C9D92BBA00CB3741825A3F5285FCA0B3587.cer (raw, json)
Hash identifier:          UDhjJ29M7Lp1oEEFaDdrzyap7oowHLe4/ZqCxlU/wfU=
Subject key identifier:   C8:64:1C:9D:92:BB:A0:0C:B3:74:18:25:A3:F5:28:5F:CA:0B:35:87
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       622A91CA0C199A39080B86BE3B2F8DB753D18123
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/C8641C9D92BBA00CB3741825A3F5285FCA0B3587.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Jan 2026 13:23:57 +0000
Certificate not after:    Mon 04 Jan 2027 13:28:57 +0000
Subordinate resources:    AS: 264020
                          IP: 143.0.144.0/22
                          IP: 2804:2988::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 07:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2a:91:ca:0c:19:9a:39:08:0b:86:be:3b:2f:8d:b7:53:d1:81:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  5 13:23:57 2026 GMT
            Not After : Jan  4 13:28:57 2027 GMT
        Subject: CN=C8641C9D92BBA00CB3741825A3F5285FCA0B3587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:ad:97:8f:d1:c8:9b:70:46:12:eb:a7:22:
                    7c:fc:17:ed:da:de:83:2c:f2:f0:db:11:c3:19:13:
                    1c:f6:72:d7:44:a2:2d:37:d0:37:62:fe:ee:e7:93:
                    47:57:53:d3:ea:6b:5a:14:55:13:dc:3d:29:1b:8b:
                    2b:e9:39:fa:ba:9d:fe:cb:be:2a:c9:45:71:66:4b:
                    e9:48:b8:39:e0:63:23:bf:db:f3:04:1e:a6:46:fb:
                    60:be:0c:00:44:cb:49:18:74:6d:95:fa:4e:52:2e:
                    f5:69:e3:bb:b5:4a:b0:d2:aa:4f:bc:4b:64:b2:87:
                    c3:21:d7:34:7e:71:38:8f:a8:05:c4:e4:08:c5:48:
                    fa:99:1e:46:f4:ab:de:dd:49:b3:6d:5d:65:92:5f:
                    7e:36:5c:e6:e5:e4:4c:4f:a0:b7:07:d6:23:ce:4a:
                    eb:21:56:dd:0b:d9:2b:39:aa:66:bd:8f:50:d8:49:
                    5b:24:ab:50:5c:65:b8:d9:e6:5d:01:a5:dc:66:3b:
                    ef:e8:39:aa:80:ce:21:41:5d:11:a2:16:10:23:89:
                    4d:f9:52:17:5f:7a:1b:4e:aa:7d:7b:8d:7e:28:a0:
                    38:59:58:70:3f:51:f7:16:af:68:3b:a4:08:22:3a:
                    50:5a:cb:05:29:be:7c:22:68:7c:76:c5:44:b1:d2:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:64:1C:9D:92:BB:A0:0C:B3:74:18:25:A3:F5:28:5F:CA:0B:35:87
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/C8641C9D92BBA00CB3741825A3F5285FCA0B3587.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.144.0/22
                IPv6:
                  2804:2988::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264020

    Signature Algorithm: sha256WithRSAEncryption
         66:40:24:ee:5a:13:06:da:48:79:be:e0:b1:da:2f:fc:65:51:
         7b:3e:2f:2e:be:27:d4:1a:5a:05:d7:eb:88:ba:d7:cc:6d:42:
         b2:e5:85:4a:a6:2d:aa:f3:a7:62:8d:7f:9c:0c:c6:3d:d1:48:
         18:7f:fd:d2:a9:30:77:7b:95:9c:62:80:77:99:28:60:16:07:
         0d:06:29:81:b8:d1:f7:bf:9f:b5:ec:91:c8:7f:5c:0c:6b:90:
         3d:d0:cd:ce:25:5b:d9:43:2a:17:f6:48:e7:6c:ce:59:44:49:
         96:d3:ad:0c:ee:7d:21:66:1f:77:3c:79:a7:38:c3:eb:f5:6c:
         04:da:15:88:a1:c8:48:09:13:f9:04:13:ae:5e:26:33:78:33:
         3c:20:6d:81:66:2a:f8:96:c6:5b:6f:f4:27:05:62:87:71:00:
         53:1d:2c:ca:c9:00:93:2f:f6:c2:c5:78:21:d3:5e:72:4a:db:
         8f:cb:21:7c:2c:36:f8:e7:d5:40:fa:72:87:96:f2:dd:cc:e5:
         e2:00:43:e8:1c:46:24:17:11:49:8a:64:cc:d0:6c:e8:5f:2f:
         89:0a:4c:bf:d2:ee:a7:83:31:f7:fe:59:35:23:b3:f8:86:57:
         96:55:9f:0c:9e:ca:a2:e4:7e:8e:3f:2d:82:2f:62:30:08:1b:
         bd:07:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----