This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
File:                     AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer (raw, json)
Hash identifier:          oLtIadE8O+eaVtgOj7L6dzpZc5VGC6sOU4t+CzvF+Ds=
Subject key identifier:   AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       73A17E272D9CD2BD9FEDC5DBDF1371B1DF139AA0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Nov 2025 19:35:49 +0000
Certificate not after:    Mon 23 Nov 2026 19:40:49 +0000
Subordinate resources:    AS: 262438
                          IP: 177.52.64.0/21
                          IP: 2804:31c0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a1:7e:27:2d:9c:d2:bd:9f:ed:c5:db:df:13:71:b1:df:13:9a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 24 19:35:49 2025 GMT
            Not After : Nov 23 19:40:49 2026 GMT
        Subject: CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:7e:7c:ad:4f:5a:2b:ec:91:2a:ef:dc:7d:
                    9e:14:28:61:b6:2e:c8:81:44:c2:ce:b0:cf:28:02:
                    cd:31:36:56:9b:bb:4d:af:90:8f:3e:05:06:e1:19:
                    a1:b8:b1:0a:a5:33:10:9e:57:84:8a:ac:8e:99:ff:
                    13:32:d6:7d:81:a5:c0:87:b8:e5:56:25:b5:23:7c:
                    9d:9a:f6:2f:c6:7e:55:e1:ab:93:76:44:b8:a6:40:
                    2f:5d:09:08:4d:57:e7:18:5c:d2:f8:23:7a:2b:cb:
                    1b:32:a4:5a:6d:5a:46:25:c3:b8:5f:b2:0e:a4:60:
                    1a:87:da:8b:24:39:b1:a0:ab:ba:c9:56:cd:49:93:
                    a0:80:ee:98:13:06:bf:21:6f:f9:01:0b:24:50:d3:
                    dc:5d:97:94:28:92:f9:5d:13:8e:44:75:15:46:76:
                    24:a7:1e:44:72:3c:37:de:f2:bc:75:c0:33:40:f9:
                    70:27:a5:17:43:47:fe:02:c5:09:1d:d7:14:46:85:
                    0b:aa:d8:3f:e4:92:6d:8f:f7:d1:8e:d9:70:ca:d6:
                    88:62:bc:cc:11:e8:7b:0f:60:a0:42:1e:01:16:f4:
                    6e:74:51:90:9e:99:1e:c4:9e:d0:d5:d6:be:dc:e3:
                    6e:18:e7:32:f2:d0:0d:22:04:7e:48:c0:f4:99:c6:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.64.0/21
                IPv6:
                  2804:31c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262438

    Signature Algorithm: sha256WithRSAEncryption
         8c:e7:4f:d0:fd:71:4b:32:fa:6f:20:2e:17:04:57:8f:2c:2c:
         d1:2c:f8:6b:fd:03:86:53:fd:49:55:b6:ee:dc:76:33:80:9c:
         24:4b:6d:3e:8d:50:b2:58:3c:9d:c0:ee:2d:2e:2a:a0:c9:b6:
         62:95:f7:a6:5c:e8:51:5e:0e:d7:76:fc:17:57:2c:00:66:5f:
         ba:27:ed:34:23:a2:a7:ba:a0:22:09:89:07:a2:6e:6b:bb:db:
         14:ec:84:ca:4d:e0:b4:9b:b4:ee:76:15:83:6d:7b:e3:e4:4d:
         6c:e8:13:9a:0d:28:e4:03:5b:02:f6:ee:b5:2b:6d:44:41:3d:
         73:c4:1e:53:52:85:92:1f:f7:0e:75:b9:dd:2f:c8:75:a3:dc:
         ca:08:a4:9b:99:2b:f0:6e:e4:60:1e:73:40:8d:7c:74:94:d2:
         e6:6f:6b:83:14:a9:c8:a6:3a:57:f5:2b:47:3e:e8:b6:1b:80:
         18:d7:73:2a:e6:81:eb:69:b2:a1:e5:34:f9:99:b3:b3:a5:b2:
         c7:92:6f:94:0d:b7:71:b4:d2:31:4e:7e:15:56:ca:f6:d6:0e:
         04:48:82:26:c0:f2:b3:ef:f9:8a:c8:7e:a8:f3:69:93:47:29:
         f4:72:fe:96:93:ae:3a:cc:8e:3c:8f:b9:5c:d6:1e:2e:41:7e:
         49:6f:8f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----