This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/02822FB26F13D18BBD0E6AC1165D0295D2135459.cer
File:                     02822FB26F13D18BBD0E6AC1165D0295D2135459.cer (raw, json)
Hash identifier:          UpITiZnYzRIJqhByI91KA9kjApH8YhwuHynWQFVKHPM=
Subject key identifier:   02:82:2F:B2:6F:13:D1:8B:BD:0E:6A:C1:16:5D:02:95:D2:13:54:59
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1FA95784D2AFB79B918C8D5A3B5EFFD4D88BF0FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8yjAczxzb8nEhrhnGgQi6o3L8DWmCjgtLhSDDFk7D6Qh/0/02822FB26F13D18BBD0E6AC1165D0295D2135459.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8yjAczxzb8nEhrhnGgQi6o3L8DWmCjgtLhSDDFk7D6Qh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Nov 2025 17:43:14 +0000
Certificate not after:    Tue 17 Nov 2026 17:48:14 +0000
Subordinate resources:    AS: 265948
                          IP: 164.163.92.0/22
                          IP: 2804:4044::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a9:57:84:d2:af:b7:9b:91:8c:8d:5a:3b:5e:ff:d4:d8:8b:f0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 18 17:43:14 2025 GMT
            Not After : Nov 17 17:48:14 2026 GMT
        Subject: CN=02822FB26F13D18BBD0E6AC1165D0295D2135459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:a3:60:a7:28:8d:d7:63:2e:ba:fc:16:86:
                    61:df:95:85:8b:bb:51:07:77:3e:6f:9b:f3:ea:d7:
                    9d:db:98:70:56:18:09:ff:85:48:af:47:be:4f:1c:
                    de:fe:83:18:e9:b7:ac:d2:03:bd:56:f9:a4:d4:0f:
                    be:c1:e2:ad:62:84:05:de:86:7d:04:26:91:b5:95:
                    de:0b:99:68:a1:d2:d9:e4:1a:42:fb:76:3f:e5:a0:
                    4e:d4:78:d5:f6:67:a2:2d:e0:dd:49:76:75:b2:e1:
                    23:0e:81:fc:84:a7:53:89:fb:34:cd:f5:71:89:ad:
                    dd:73:c6:3b:32:95:8c:c9:48:d1:8c:ec:08:84:eb:
                    77:2b:c9:2d:4a:d6:30:f5:1c:fc:f6:3b:20:39:78:
                    12:5a:17:a3:23:4f:71:64:e2:8e:f2:d2:e2:aa:e5:
                    ac:0b:18:80:80:2a:fd:62:33:15:5f:3b:1c:56:dd:
                    7e:61:4f:56:ce:ca:a9:f3:57:5e:0a:14:eb:61:d3:
                    2f:b0:a3:ff:fc:11:5e:0a:b7:d7:a8:e2:53:ee:c0:
                    d2:8a:72:c3:97:9b:1b:41:84:63:dd:a7:6a:1a:bc:
                    2e:16:08:1a:b2:2a:19:5d:e9:20:10:bc:86:45:96:
                    e8:7e:e0:98:e1:1c:b0:8b:2a:f0:d8:70:a0:b4:9a:
                    11:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:82:2F:B2:6F:13:D1:8B:BD:0E:6A:C1:16:5D:02:95:D2:13:54:59
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8yjAczxzb8nEhrhnGgQi6o3L8DWmCjgtLhSDDFk7D6Qh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8yjAczxzb8nEhrhnGgQi6o3L8DWmCjgtLhSDDFk7D6Qh/0/02822FB26F13D18BBD0E6AC1165D0295D2135459.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.92.0/22
                IPv6:
                  2804:4044::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265948

    Signature Algorithm: sha256WithRSAEncryption
         84:a3:89:f4:db:a2:c3:b5:2d:30:31:b6:66:2a:7d:ef:87:ad:
         1b:4b:c5:c0:bb:80:e5:b2:c7:e5:df:11:8e:78:65:5d:e8:9f:
         77:39:47:f3:70:1b:f3:54:81:ed:48:18:91:32:53:68:cc:31:
         f8:07:75:26:f1:fd:78:5f:31:b9:be:e9:d4:a0:40:14:00:cd:
         16:0d:d0:0e:26:52:91:84:43:83:8b:2d:35:3d:e2:e0:dc:5a:
         c4:84:cb:4c:98:02:ed:06:bb:44:bf:6b:31:f2:e1:4a:30:7b:
         8f:c2:b9:9b:7e:c7:9e:05:8f:c1:67:26:ce:65:40:3d:9f:e8:
         88:39:80:ae:1b:cf:00:48:08:13:10:52:27:ee:29:36:48:36:
         fe:ff:de:af:d5:dc:61:d9:ee:03:3c:5c:f3:29:e8:31:d1:6b:
         87:cd:52:fa:fa:23:f1:81:75:18:2e:a3:55:ba:6d:f8:f3:46:
         8a:6c:1e:46:d8:b1:99:4e:2f:a1:5c:d0:87:ee:9e:12:d0:f2:
         2b:d2:d1:45:99:21:88:a7:6b:1f:29:e0:c4:55:10:90:fe:83:
         52:d9:9e:a8:89:62:76:28:14:a4:c2:11:d0:c2:e6:93:a8:ee:
         c6:77:80:1e:e0:e9:f1:6e:c6:af:79:f2:04:27:44:3c:27:c2:
         ec:58:76:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----