This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer
File:                     43AAB70BF5D486443B357EA3923B581F0075D23A.cer (raw, json)
Hash identifier:          JFRZNp815eoDTNn5T6/UGVt6Qzb5vWkfi0wHuzyFISw=
Subject key identifier:   43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F5B9670FC288CB7A646FF774CA733F641CE43A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Nov 2025 00:19:10 +0000
Certificate not after:    Fri 27 Nov 2026 00:24:10 +0000
Subordinate resources:    AS: 266151
                          IP: 160.238.104.0/22
                          IP: 2804:3b78::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 15:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5b:96:70:fc:28:8c:b7:a6:46:ff:77:4c:a7:33:f6:41:ce:43:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 28 00:19:10 2025 GMT
            Not After : Nov 27 00:24:10 2026 GMT
        Subject: CN=43AAB70BF5D486443B357EA3923B581F0075D23A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:cb:0f:95:5e:33:ff:d8:d6:86:cd:9f:99:
                    d3:aa:40:f7:78:0f:33:ec:ae:2a:39:ee:a7:ce:b2:
                    20:b4:e8:3b:12:19:8d:91:75:97:03:0a:39:e8:60:
                    1f:77:ac:22:aa:4d:f5:ad:d2:4d:7c:6d:a4:33:34:
                    0f:b1:48:12:86:b3:3f:7a:1b:f5:b3:67:cc:a8:a1:
                    47:62:09:4c:59:10:8b:d8:ae:c0:b6:6b:9e:de:78:
                    b8:41:31:2f:fc:8c:92:9a:e2:98:53:9c:8b:50:bc:
                    2f:a8:f8:af:72:b5:b7:43:60:79:e6:13:93:96:52:
                    ba:19:74:5e:41:fa:62:84:83:ba:55:7e:f8:46:1d:
                    e6:4a:eb:ed:b1:bc:36:e9:a3:b5:1d:a9:ca:d8:a3:
                    17:c1:76:e8:38:fb:8e:38:19:8b:6b:99:c6:83:31:
                    4b:22:af:15:9c:0d:9d:72:49:01:7a:23:a1:7e:b8:
                    c5:76:0b:e8:e6:8b:5c:fd:ac:15:44:28:b9:d0:3b:
                    44:7e:55:2a:d9:b8:52:8d:b6:0f:a5:c0:62:91:fb:
                    52:55:86:ff:2f:22:25:93:4d:f1:06:82:91:6b:ed:
                    2d:b5:3a:ef:ab:bf:ef:5a:84:04:ce:92:ed:aa:7f:
                    40:81:0f:cb:3e:c7:8f:2d:b0:a5:c8:47:81:a2:f9:
                    5f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.104.0/22
                IPv6:
                  2804:3b78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266151

    Signature Algorithm: sha256WithRSAEncryption
         c5:a3:7c:1e:fc:61:25:e1:21:89:84:18:2d:61:02:f5:ee:f6:
         10:22:1f:03:38:e6:d7:64:dd:5f:d1:c6:03:e0:69:cf:89:75:
         63:81:9a:64:cf:58:b8:c0:f2:70:ee:dd:50:e6:cc:d1:be:5d:
         e8:ba:9a:5b:b6:2b:e6:5c:c8:a1:cf:c4:4f:c7:14:38:2c:ff:
         fa:c2:33:15:f0:5a:0a:b7:fa:61:d9:e0:3e:19:45:71:ec:4d:
         0f:48:70:64:35:04:32:c5:d1:2c:a4:77:9f:1d:a6:4f:4a:46:
         40:0a:54:9a:8b:09:98:1c:09:bb:c1:4f:bb:2c:33:1a:69:2f:
         82:ba:e3:69:89:f0:5c:a9:6a:01:45:9d:26:d6:fd:0a:3f:17:
         57:eb:61:47:86:f3:57:a5:24:9c:59:25:5f:b5:ec:8c:c0:bc:
         6a:32:43:67:fa:16:54:3c:fb:a1:ac:55:96:17:6d:d7:d4:0b:
         f8:b3:f5:19:93:d0:73:b6:ff:5e:15:5c:71:50:6c:89:2e:be:
         ac:96:ba:be:ee:2b:68:53:2d:10:aa:b2:94:c9:6d:69:97:f3:
         c0:32:e2:78:64:49:f5:89:51:1d:85:f7:29:6e:94:bc:5d:27:
         a7:28:49:40:c5:7f:82:5c:99:8a:1f:a0:bc:49:0c:a8:e3:04:
         6a:d6:f6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----