This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
File:                     AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer (raw, json)
Hash identifier:          886gZp6ssK3ba/4JvSsDG18bm2phP5xekfkdG00IAjc=
Subject key identifier:   AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4F979CB4C2AC6B34FC9499A9FAB082F08519B7B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Dec 2025 07:18:15 +0000
Certificate not after:    Fri 04 Dec 2026 07:23:15 +0000
Subordinate resources:    AS: 264197
                          IP: 138.97.148.0/22
                          IP: 2804:2404::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:97:9c:b4:c2:ac:6b:34:fc:94:99:a9:fa:b0:82:f0:85:19:b7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  5 07:18:15 2025 GMT
            Not After : Dec  4 07:23:15 2026 GMT
        Subject: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:35:a8:14:d4:ef:d9:87:7b:74:7d:18:42:
                    87:4d:24:47:32:e0:3b:21:89:63:9f:0f:47:95:d7:
                    9d:66:72:45:6d:50:12:e3:41:cb:a7:02:84:15:53:
                    68:f2:cd:b7:ca:27:0a:d9:d0:99:c1:77:bc:de:04:
                    49:3e:8f:8e:96:71:e7:ce:43:9f:ba:d8:be:67:38:
                    95:ac:df:4c:a6:15:60:cb:04:cf:ff:fc:dd:2f:20:
                    b5:c9:29:2c:d8:d1:71:6d:1d:32:e4:d2:22:eb:2c:
                    02:26:27:38:69:21:9b:4c:bf:20:70:e7:a3:19:4d:
                    8f:68:33:09:7f:ae:09:00:4b:b0:80:d2:cb:96:8f:
                    98:90:ee:95:61:de:d6:5e:c6:7b:a9:88:a6:0f:e7:
                    87:5c:c3:69:58:a0:c5:50:16:7f:c0:8c:70:c4:15:
                    a8:ea:7d:56:3a:53:9c:63:d6:35:f9:e4:33:0f:e0:
                    ab:f1:d7:82:56:fc:ed:6b:1e:cc:56:46:39:27:5c:
                    9e:55:e4:94:ec:b1:f6:2b:c4:29:27:47:dd:5d:73:
                    c0:ca:7c:2d:d4:d5:b5:bd:c7:d5:dd:d2:44:b0:a8:
                    61:af:32:72:55:51:22:f1:b2:fa:a0:ce:f5:c0:bc:
                    87:96:fe:e5:41:0b:06:b6:d5:db:71:6f:5e:93:ad:
                    34:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.148.0/22
                IPv6:
                  2804:2404::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264197

    Signature Algorithm: sha256WithRSAEncryption
         4b:27:24:d0:0d:13:dc:96:40:a7:59:0d:2a:22:3c:6d:68:96:
         e9:51:85:65:e4:c8:a2:16:55:21:d2:a2:97:e8:0d:43:6f:57:
         0d:bc:ff:29:c5:84:07:a1:6a:73:4b:d0:60:ef:e6:98:a2:48:
         e2:c0:fc:38:89:bb:bf:7f:e5:a4:dd:44:ce:60:40:d2:fc:e1:
         91:3d:2b:aa:ca:af:3f:2c:e2:3d:59:be:cf:79:f4:e9:ae:11:
         b0:dd:3c:31:a3:ad:e3:b5:7a:a7:68:76:e9:9e:d4:b2:1f:a6:
         50:02:50:ba:13:7b:fc:72:a2:30:63:fe:57:b1:38:7d:34:5e:
         9e:d9:53:d7:86:ed:f9:40:d2:54:38:2c:ab:f9:e2:a5:cc:50:
         d4:31:9b:9f:5e:ba:fb:2e:10:a0:48:be:ee:ad:c0:c4:77:39:
         dd:3b:b6:43:78:e7:e3:1b:47:fa:9e:00:c3:23:39:f3:cd:5a:
         7b:49:24:2b:eb:d2:52:52:b3:6b:66:0b:57:5b:d1:55:35:9b:
         53:82:38:2f:61:a5:2c:8e:f3:49:98:03:84:32:49:b1:5f:b3:
         32:e4:f0:2b:d2:0d:de:a5:ef:70:cc:f3:d0:40:5c:3f:17:ca:
         68:dd:44:48:d4:ba:d9:3f:90:30:56:1a:78:98:fc:4d:98:2a:
         3e:30:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----