This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF45988BFE3871400272802950F4AB2084728E57.cer
File:                     AF45988BFE3871400272802950F4AB2084728E57.cer (raw, json)
Hash identifier:          vs0+n9ZsR9genZOuMdduclPbvXYpSCLfm3YJbmP64lQ=
Subject key identifier:   AF:45:98:8B:FE:38:71:40:02:72:80:29:50:F4:AB:20:84:72:8E:57
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       40B82000D2F7A99898ABDC2866369A097528B704
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/AF45988BFE3871400272802950F4AB2084728E57.mft
caRepository:             rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Dec 2025 12:52:54 +0000
Certificate not after:    Thu 03 Dec 2026 12:57:54 +0000
Subordinate resources:    AS: 268605
                          IP: 45.164.60.0/22
                          IP: 2804:53c4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b8:20:00:d2:f7:a9:98:98:ab:dc:28:66:36:9a:09:75:28:b7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  4 12:52:54 2025 GMT
            Not After : Dec  3 12:57:54 2026 GMT
        Subject: CN=AF45988BFE3871400272802950F4AB2084728E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:45:6c:cb:3d:35:80:ef:3a:53:ac:76:30:
                    7c:00:9f:d2:fd:95:a9:a3:74:46:0d:60:53:9d:43:
                    8a:27:41:f0:8f:17:08:01:15:b4:19:e2:f0:2f:47:
                    1e:4e:b0:60:e3:26:f9:66:0b:a6:a0:62:6f:a2:51:
                    6d:71:1a:1e:ad:d1:3a:b0:bb:b4:6b:67:e5:1a:90:
                    c3:d4:8e:5f:65:54:4b:80:8a:5c:6f:6c:09:2e:8f:
                    50:47:1c:f6:ef:b5:19:21:84:3f:84:ba:1b:05:71:
                    ea:b9:6c:0a:ea:10:a3:d5:6f:ef:c1:80:e3:a6:7a:
                    20:22:45:ac:65:92:fd:8a:d3:48:39:b4:6c:2f:39:
                    6e:85:bf:5d:df:1e:4f:8d:41:c9:44:0c:30:d5:59:
                    17:5a:8d:54:19:d5:e9:81:ed:89:a0:59:d8:d5:41:
                    1c:44:da:1a:f2:2e:fb:88:0b:7a:eb:77:58:a7:6d:
                    24:0d:53:30:6a:6f:ee:3b:41:c3:7b:47:7c:07:65:
                    de:66:64:9a:f6:3f:d3:c4:7e:ed:02:97:0b:3e:59:
                    22:60:16:a2:9c:49:99:df:93:3e:14:f4:25:38:bb:
                    d9:47:d2:e0:af:8d:3f:28:36:14:c3:cd:03:04:8f:
                    c8:c4:32:d0:95:67:14:00:c7:5d:ef:e7:d3:f0:5a:
                    52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:45:98:8B:FE:38:71:40:02:72:80:29:50:F4:AB:20:84:72:8E:57
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/AF45988BFE3871400272802950F4AB2084728E57.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.60.0/22
                IPv6:
                  2804:53c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268605

    Signature Algorithm: sha256WithRSAEncryption
         24:51:20:86:89:4e:c3:b0:08:55:c2:e1:b1:a4:ed:92:28:35:
         9b:00:b7:a8:48:33:62:a3:da:06:e8:32:ee:f9:d0:78:ea:cd:
         c7:be:9d:2d:77:82:89:f3:77:59:53:51:a7:22:95:89:8a:5a:
         f3:f1:89:f5:ff:91:8a:6c:84:1f:1b:81:cc:9f:d1:74:ed:30:
         d3:e9:00:09:35:6e:fc:f0:6e:96:0d:2d:88:95:bb:bc:5b:3c:
         94:86:e0:85:30:2a:a8:a2:a6:f4:0f:52:ff:b9:c8:c9:e1:65:
         82:58:5d:09:d7:02:45:12:73:7f:e5:a0:7f:ba:21:ad:15:a8:
         f3:bb:71:5f:19:51:13:81:54:e4:36:2e:1a:80:6c:85:c6:75:
         4a:ba:01:ba:92:6b:66:8b:e1:b0:34:21:01:da:ce:6e:f2:b9:
         74:82:a3:b4:47:24:63:3a:77:60:48:1b:c4:5f:e0:65:c8:0d:
         8e:65:7f:fb:6b:e1:b4:f7:e2:62:5d:45:5c:89:a8:c9:fc:96:
         8c:72:ef:47:e6:a7:34:a3:b1:04:b4:0d:21:09:e2:85:b5:98:
         ba:05:04:98:a0:5f:99:c6:84:0c:28:e5:c2:ab:9d:fe:89:db:
         b0:f1:99:6e:40:13:61:df:06:d1:89:37:5a:94:b0:01:4f:7a:
         55:f1:8d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----