This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0AA75444C92119507239668F559768FBF95AE208.cer
File:                     0AA75444C92119507239668F559768FBF95AE208.cer (raw, json)
Hash identifier:          7ByYlZKK11NWz0+lfzp8V5uRrlDHXyDI6pqsrI3KBZU=
Subject key identifier:   0A:A7:54:44:C9:21:19:50:72:39:66:8F:55:97:68:FB:F9:5A:E2:08
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1F47141969FB672243081B914BF05C230B24AD9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Dec 2025 12:18:02 +0000
Certificate not after:    Tue 22 Dec 2026 12:23:02 +0000
Subordinate resources:    AS: 266549
                          IP: 160.238.192.0/22
                          IP: 2804:3db8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 11:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:47:14:19:69:fb:67:22:43:08:1b:91:4b:f0:5c:23:0b:24:ad:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 23 12:18:02 2025 GMT
            Not After : Dec 22 12:23:02 2026 GMT
        Subject: CN=0AA75444C92119507239668F559768FBF95AE208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:7e:75:0a:e3:35:65:c2:fa:67:27:52:69:
                    2b:8f:a4:8c:01:91:0d:da:8f:7b:a2:13:d1:94:b6:
                    2e:2a:3f:b2:0b:2c:e1:2b:09:0a:9e:db:a7:c6:be:
                    3a:be:72:bf:31:3d:07:b0:b2:e9:7a:2d:ad:b0:93:
                    67:e8:5d:95:c9:f3:9f:75:d2:0c:a9:a0:91:5a:53:
                    32:85:34:85:ea:3a:84:6f:9d:14:4a:3b:f9:60:86:
                    fc:ab:81:a2:21:da:8d:d4:74:3d:d6:fc:3e:63:20:
                    8e:6d:02:ee:34:e1:1a:c1:4f:fb:76:57:8a:9b:a2:
                    ec:27:0a:a3:a9:27:60:56:27:0d:de:cd:11:ec:c0:
                    8e:42:0b:cf:b7:bb:dc:38:af:58:df:b5:d4:a0:a5:
                    0a:18:15:1e:69:cd:14:09:d9:0d:77:88:ac:90:4c:
                    87:78:03:df:a0:53:81:2f:c4:83:cf:ad:a5:bb:88:
                    aa:14:8e:77:06:e9:05:80:a4:11:4a:7e:15:7f:a6:
                    32:20:74:76:a4:1a:f5:46:ad:dd:1e:f8:99:75:a1:
                    e5:54:09:61:62:ab:86:21:f4:f4:e5:cc:cc:f0:21:
                    95:56:29:a6:0f:1c:be:ae:5f:7a:c0:48:4f:32:77:
                    b3:ae:6d:98:f8:5d:c1:af:67:96:cf:43:f1:8b:3d:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:A7:54:44:C9:21:19:50:72:39:66:8F:55:97:68:FB:F9:5A:E2:08
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.192.0/22
                IPv6:
                  2804:3db8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266549

    Signature Algorithm: sha256WithRSAEncryption
         01:ba:10:f1:33:47:ab:4f:c3:d0:8d:56:50:22:5b:c9:a1:1d:
         0a:c2:2b:e1:de:72:1f:54:63:17:40:8b:21:1e:75:a7:bf:68:
         6c:bb:2a:3d:3a:43:7e:13:d0:a2:0e:ef:e2:83:96:70:fe:ad:
         73:0c:7d:3e:6f:a1:be:f7:d9:b2:3f:81:0c:0d:32:6c:41:e1:
         d0:b9:6c:da:01:68:73:f6:65:3f:54:3e:34:0f:94:c2:86:0b:
         03:33:98:69:4b:5f:f6:21:c5:a3:e3:4e:85:10:bd:b1:6e:d7:
         bf:b5:f6:34:15:49:fa:73:b2:db:47:eb:65:61:63:6a:51:fc:
         6f:bc:e0:a3:eb:70:8b:1c:ab:ad:c0:b7:64:a8:35:64:20:f5:
         63:e6:19:f8:c5:f4:37:57:23:08:aa:30:dc:ab:69:e6:64:29:
         48:a4:2d:f5:98:ab:19:50:9d:ac:e4:3b:19:68:20:e4:96:81:
         51:37:c3:af:4c:5c:23:28:09:03:c4:59:c2:8d:6e:a3:ec:5d:
         c2:92:50:14:a3:96:86:85:2f:a7:5e:18:4e:cb:ac:fd:c0:30:
         12:54:4b:46:2d:5a:0c:68:62:26:fa:c7:e3:d8:93:40:b1:a5:
         c3:1c:de:c2:ba:65:a5:de:ac:cb:e7:f1:bd:f4:64:52:b5:fc:
         da:1f:db:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----