This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
File:                     22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer (raw, json)
Hash identifier:          x+iIpLOV2aeXl2gqbqjwS0YD23SGYFvIEjMvi+M/uR4=
Subject key identifier:   22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0C77B5470EAD96694371958CA3C1B46C96E1CF2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Nov 2025 13:39:26 +0000
Certificate not after:    Mon 09 Nov 2026 13:44:26 +0000
Subordinate resources:    AS: 265393
                          IP: 168.194.164.0/22
                          IP: 2804:3364::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:77:b5:47:0e:ad:96:69:43:71:95:8c:a3:c1:b4:6c:96:e1:cf:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 10 13:39:26 2025 GMT
            Not After : Nov  9 13:44:26 2026 GMT
        Subject: CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0a:d5:a1:f0:9b:4e:53:4e:f8:61:9a:f7:fe:
                    cd:d4:3f:05:45:cf:0d:5f:1c:b4:70:03:03:52:03:
                    b3:84:e1:1e:06:03:2a:f6:cd:25:a6:b1:99:46:15:
                    4f:72:b8:c6:3c:13:ec:7d:34:66:c2:ea:c4:9c:2d:
                    70:84:31:7b:cb:47:c2:83:86:2f:b1:ba:61:50:e4:
                    82:11:b4:d7:60:bc:08:56:53:40:22:41:b5:e6:31:
                    a0:b0:85:ff:ff:ca:c3:31:e3:be:bd:3e:1c:33:43:
                    c4:2f:80:46:3a:9f:55:02:9c:a7:27:d0:19:fe:9e:
                    4a:ea:22:fa:f7:c7:68:16:98:10:c3:36:5f:67:5d:
                    b5:db:ae:70:9d:dc:a1:9c:2c:d6:10:a2:81:b7:eb:
                    17:cc:a2:3c:d5:77:67:28:bd:c6:41:e8:9e:87:c7:
                    27:51:87:3d:cc:8d:f4:45:92:14:08:3f:86:ed:e6:
                    6d:3b:b2:06:1b:e0:9c:ee:ac:2e:f0:94:a3:53:85:
                    56:f1:a2:c7:b7:3e:cf:55:3a:21:cf:be:39:11:bf:
                    a8:80:1c:aa:e0:91:57:88:79:8c:8a:8d:dc:d7:1f:
                    db:ef:50:8c:10:ca:79:e7:f4:ed:17:0f:c8:e7:24:
                    ce:d0:b8:66:b4:32:9a:7d:f3:93:3d:2a:35:7a:1c:
                    dd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/22
                IPv6:
                  2804:3364::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265393

    Signature Algorithm: sha256WithRSAEncryption
         4e:1e:00:14:08:9f:0c:80:96:6b:c5:d0:55:50:9f:ad:07:20:
         cd:39:75:06:22:f5:27:dd:66:3e:1b:b9:02:9f:4d:23:da:6c:
         10:90:20:2a:ee:c6:1f:31:3c:25:16:7f:38:33:eb:8c:dd:63:
         80:47:47:f3:9f:82:e1:1c:0e:ba:e4:5e:1e:4d:65:cd:34:47:
         72:48:2b:6f:37:b2:a4:3c:f7:98:04:32:b1:0d:85:a9:e3:a8:
         60:27:ab:b1:f4:fa:5d:84:d2:20:85:95:fe:34:13:27:1b:32:
         ab:21:d8:2d:2d:17:3b:08:af:ba:dd:76:2a:26:c8:f6:e8:40:
         68:25:3a:df:00:49:d0:af:1e:6f:07:9f:32:f9:8f:ed:cf:44:
         6b:d2:1e:27:be:ee:88:37:65:6c:dd:5f:05:8d:d3:c7:0d:5b:
         0c:a3:fb:04:ba:3b:3c:91:25:00:3f:2c:8f:e7:b0:66:85:75:
         84:81:6b:48:51:61:b1:2d:b4:64:cb:9b:5b:a7:59:a3:f1:19:
         14:71:86:a4:5e:8f:b1:d9:2b:aa:4a:2e:df:4c:17:25:f0:56:
         7e:55:a2:eb:e2:76:11:cb:69:10:0c:df:00:6e:9d:95:42:d6:
         b2:8e:12:66:39:50:7b:49:36:e1:df:5c:ad:03:71:57:72:b0:
         69:df:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----