This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AB110249E3260E192D7BB9BC9648FA8A6E99C664.cer
File:                     AB110249E3260E192D7BB9BC9648FA8A6E99C664.cer (raw, json)
Hash identifier:          nuv+pXQX+0YVLf6jSTaLiTTNfsBM6LQOgUJW2TuIteM=
Subject key identifier:   AB:11:02:49:E3:26:0E:19:2D:7B:B9:BC:96:48:FA:8A:6E:99:C6:64
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       515BE735199A96C94E0C6F6B484B299CA1EF0437
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/AB110249E3260E192D7BB9BC9648FA8A6E99C664.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Dec 2025 18:19:08 +0000
Certificate not after:    Fri 04 Dec 2026 18:24:08 +0000
Subordinate resources:    AS: 273679
                          IP: 2801:80:4000::/40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5b:e7:35:19:9a:96:c9:4e:0c:6f:6b:48:4b:29:9c:a1:ef:04:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  5 18:19:08 2025 GMT
            Not After : Dec  4 18:24:08 2026 GMT
        Subject: CN=AB110249E3260E192D7BB9BC9648FA8A6E99C664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:36:e9:61:9b:20:9e:fb:b4:5d:a8:e2:a0:
                    0e:30:a5:f2:d3:ba:b5:30:21:bc:8b:21:4b:b3:a1:
                    4d:83:e9:a2:34:7b:a2:c8:e6:b1:71:5a:37:23:1b:
                    5d:bd:4f:50:26:9b:c1:63:0a:83:25:31:21:4f:b2:
                    61:c3:16:59:e1:36:03:71:6b:08:28:b3:62:11:d8:
                    b1:16:bc:a3:d6:60:32:a5:18:38:1d:46:7f:5d:c6:
                    b6:35:73:a6:3e:9a:43:bf:46:0b:fc:0f:19:88:68:
                    30:36:47:0f:72:ec:51:d2:9f:e2:a4:1c:5e:33:ea:
                    eb:20:41:ec:ab:70:95:24:5a:b7:1b:7a:bb:24:af:
                    f3:b1:ad:12:96:cf:03:a6:0f:1a:f2:0f:52:fb:76:
                    b6:8a:32:83:b2:d5:00:90:07:c6:2c:b5:0b:f7:26:
                    c3:5f:bf:03:83:41:5f:f8:48:c0:fc:52:f8:1b:6c:
                    e1:7f:3d:cf:77:e7:9d:dd:24:2f:21:10:40:ba:34:
                    7d:40:d3:eb:af:e7:6a:f7:39:64:13:dd:97:45:3d:
                    79:a0:9c:37:97:e6:b1:ba:70:8c:6b:a1:23:8c:07:
                    39:24:76:1c:62:51:dc:16:d7:fc:13:4c:0b:f3:5b:
                    80:0e:89:63:50:c5:b5:7f:a9:11:08:72:44:d8:96:
                    6c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:11:02:49:E3:26:0E:19:2D:7B:B9:BC:96:48:FA:8A:6E:99:C6:64
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/AB110249E3260E192D7BB9BC9648FA8A6E99C664.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:4000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273679

    Signature Algorithm: sha256WithRSAEncryption
         ce:62:16:54:f5:db:e8:77:1d:57:78:fb:fb:d1:b5:45:fa:83:
         5a:a2:2e:01:be:fb:10:45:94:1c:86:37:a6:56:ad:eb:3b:21:
         86:8e:e7:ed:0d:52:4f:21:2f:d2:7e:30:da:80:7d:0e:b9:ba:
         48:39:fa:22:7b:6e:7a:10:79:c7:58:43:56:63:d0:51:06:64:
         4b:2a:fe:d1:6f:3c:1d:68:31:e0:d3:62:92:4e:d8:2f:d1:de:
         c2:d3:7f:36:74:b0:d3:44:84:90:f4:aa:df:de:bb:4b:fa:c1:
         28:aa:dc:ea:df:db:e1:29:59:90:1b:b9:94:a8:2d:ee:12:35:
         b9:eb:c1:dc:06:48:59:1f:c5:1a:01:c7:d0:ec:a2:50:57:69:
         07:16:d7:ab:69:96:f0:ba:b7:0d:2d:bb:60:ee:b3:ab:e3:70:
         42:49:c6:a1:63:2e:71:34:13:dd:74:7d:16:a8:ae:85:6a:c1:
         9b:36:e0:62:cd:65:31:d3:cf:43:04:4d:d3:54:21:3a:8a:c6:
         6b:4f:bc:93:af:61:6c:c7:c0:17:6f:17:17:9d:c6:48:73:8e:
         20:53:8b:12:71:ea:34:39:c9:2a:34:af:8a:18:ff:ef:05:5f:
         af:7c:90:85:9a:2f:91:de:20:d1:1d:02:c2:82:29:93:18:70:
         da:64:8b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----