This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer
File:                     2AAD0546D869051DF88F8860A3540C3582BA1456.cer (raw, json)
Hash identifier:          kGvusyld11lQsmxiNYAdBQ0u125jTfhIb0PIroYqqFU=
Subject key identifier:   2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       20EA14233761BE2712F18243652E7328B8A5C7F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Dec 2025 15:11:37 +0000
Certificate not after:    Wed 02 Dec 2026 15:16:37 +0000
Subordinate resources:    AS: 265384
                          IP: 170.254.240.0/22
                          IP: 2804:3340::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ea:14:23:37:61:be:27:12:f1:82:43:65:2e:73:28:b8:a5:c7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  3 15:11:37 2025 GMT
            Not After : Dec  2 15:16:37 2026 GMT
        Subject: CN=2AAD0546D869051DF88F8860A3540C3582BA1456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:22:b3:90:3e:08:6c:4b:31:40:4d:7d:b1:
                    89:15:19:75:c1:a2:6c:d6:c6:fb:a3:fd:be:13:da:
                    4e:a8:12:ba:38:d8:6f:b3:51:30:fd:dc:47:7c:c1:
                    ed:8a:7c:01:1f:b4:44:46:44:ac:14:fc:91:89:a9:
                    c1:24:74:af:e5:7e:dc:c1:e0:6d:e6:5e:c5:08:c9:
                    e9:b5:bf:aa:5e:e6:21:a9:76:82:83:15:79:17:47:
                    62:71:bb:16:a8:a9:a5:9f:19:8e:11:50:6b:8c:61:
                    c1:8c:b8:b7:d9:67:c6:99:eb:3f:ae:21:de:05:ae:
                    95:3a:04:2c:ba:cc:6b:b3:05:c9:16:3d:e8:37:24:
                    be:ee:af:52:c1:8e:72:fc:95:ff:a3:fb:d8:45:a5:
                    7d:83:fc:61:50:d1:ac:46:2a:2e:ad:be:ae:1e:8e:
                    04:cb:44:0b:b0:21:42:a3:2f:6a:70:15:e7:42:d1:
                    75:0c:15:5f:a0:db:4a:b8:80:5d:2f:e3:d2:a5:6b:
                    c7:c1:8b:61:b0:7a:b8:03:5b:c8:0b:17:2a:c3:e1:
                    ab:45:fa:ec:92:7e:8b:43:a1:72:e6:60:0f:87:90:
                    6b:f4:15:09:df:6c:2a:de:2b:c5:3d:b6:69:91:3f:
                    05:67:c0:e3:4c:93:69:b0:6c:0d:72:78:ed:75:1c:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.240.0/22
                IPv6:
                  2804:3340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265384

    Signature Algorithm: sha256WithRSAEncryption
         a7:f2:ae:47:03:63:1e:b4:f8:d9:04:fb:58:bf:b1:2a:b6:02:
         ba:a7:2a:6d:5c:1a:04:a9:04:c6:2b:c0:3c:fa:cf:48:de:48:
         e2:92:fa:84:a5:04:80:0e:06:cf:35:1e:50:fa:14:3f:a4:e2:
         35:44:f9:bc:12:2c:a3:c0:dd:8d:e4:33:c3:d8:75:74:06:ab:
         01:8c:c4:6e:41:20:e9:7d:a2:f1:55:18:1b:44:87:ba:e2:bc:
         e3:ff:e2:31:aa:2c:d4:fa:cf:13:f0:d1:83:53:9e:bc:c4:3f:
         7b:07:11:49:8f:8e:94:86:34:08:ec:66:f8:52:af:ba:d8:b9:
         48:ca:17:a5:36:1a:bf:48:90:a0:f7:66:bf:e3:62:41:b2:58:
         e2:34:a1:75:49:75:40:0e:0b:f7:0f:75:74:7e:d4:7c:f2:84:
         79:c0:c5:c7:88:6e:45:49:ee:99:18:e2:0b:ee:2f:5d:b5:01:
         bf:9b:4a:59:07:77:06:79:4b:5f:6e:93:0f:9d:a4:56:2b:37:
         ab:97:84:78:09:dc:cb:98:98:ed:b3:4d:23:fd:cd:6f:04:60:
         38:4f:48:0b:fc:7e:38:28:f4:b0:2f:ef:1a:88:19:33:64:e7:
         65:4f:27:61:3f:90:0b:75:26:9e:a7:2e:bf:e6:8c:e5:f5:1b:
         a9:8e:0a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----