This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer
File:                     AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer (raw, json)
Hash identifier:          y3w5Snvsh4n6QDCDUo8eT5hqzi5J1xmxhiy0znr8NPM=
Subject key identifier:   AA:6B:DB:A8:A7:98:8C:39:48:AE:F1:7A:95:24:58:51:9A:02:6B:8E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2663ECFFB3A00AEA3619FBF68E0047853D7DCAA1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Dec 2025 15:44:04 +0000
Certificate not after:    Thu 24 Dec 2026 15:49:04 +0000
Subordinate resources:    AS: 53163
                          IP: 177.137.176.0/20
                          IP: 187.1.112.0/20
                          IP: 2804:1030::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Dec 2025 10:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:63:ec:ff:b3:a0:0a:ea:36:19:fb:f6:8e:00:47:85:3d:7d:ca:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 25 15:44:04 2025 GMT
            Not After : Dec 24 15:49:04 2026 GMT
        Subject: CN=AA6BDBA8A7988C3948AEF17A952458519A026B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:fd:ff:b4:e8:c1:f2:87:7c:e2:b7:32:3a:
                    db:63:72:63:a1:a7:3f:7c:19:f6:47:0e:b3:d3:84:
                    85:95:0b:7b:a3:99:c9:34:00:75:a8:f4:61:02:a2:
                    43:9e:c7:12:b0:fd:fe:c2:26:5a:92:e3:0b:30:b7:
                    ac:fb:66:e7:20:0b:93:91:3d:a5:bb:0f:77:c1:c3:
                    0b:0e:c8:e8:03:8d:e9:93:98:2f:97:9f:51:34:b9:
                    48:55:2f:06:76:9c:78:88:86:da:a1:a4:95:8c:fe:
                    02:ed:62:16:c1:e4:ac:58:d3:ea:59:13:f7:7a:ca:
                    d5:a0:c2:e5:70:fa:64:35:de:3f:8f:11:28:35:31:
                    ce:1a:39:fd:db:21:37:f9:41:0c:ce:0f:87:24:45:
                    c3:43:f6:4d:19:32:27:15:0a:bf:5c:bb:9f:d3:9d:
                    ab:94:6e:bc:a9:2e:df:0e:eb:48:75:4a:e0:52:4a:
                    03:87:f6:b9:cd:09:82:95:94:2f:2d:ee:32:7c:7e:
                    28:2f:1e:d2:f7:a7:6d:11:cf:fa:df:a6:a8:f8:61:
                    d5:2a:4d:60:1e:3e:c9:7c:02:16:e4:ef:7c:bb:a9:
                    9c:d6:40:2d:7e:cd:79:ad:5a:e8:de:e4:21:59:f2:
                    bb:2f:10:50:87:6c:00:38:a6:3e:95:4c:53:3f:c1:
                    8b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:6B:DB:A8:A7:98:8C:39:48:AE:F1:7A:95:24:58:51:9A:02:6B:8E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.176.0/20
                  187.1.112.0/20
                IPv6:
                  2804:1030::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53163

    Signature Algorithm: sha256WithRSAEncryption
         90:db:78:e4:9c:d6:b9:5f:1f:a4:b1:be:4f:f5:6a:7e:43:eb:
         70:d9:3c:1b:00:bf:eb:f4:e5:86:1e:21:35:73:3b:ba:bb:1b:
         66:65:2a:b9:a6:39:bc:86:a2:6d:21:ee:2f:0a:a6:5a:16:fd:
         ef:69:14:11:4b:0d:8c:96:5b:e0:f6:85:dd:f7:a7:a2:7a:0b:
         b3:ef:ad:3f:fe:cf:7f:6f:6d:34:bc:6b:0a:5c:3c:60:58:a7:
         3c:41:9a:96:65:50:3f:11:b3:7f:52:77:0f:9d:ff:45:4a:59:
         68:38:82:27:6a:4e:54:51:d4:05:6d:e2:b3:ad:6f:d6:e7:5f:
         44:6f:5c:da:50:e5:d7:27:5f:b7:fb:1d:15:d6:95:e0:25:31:
         23:1b:39:47:86:1b:27:07:3c:3c:8f:89:f2:39:bb:74:2d:88:
         a1:61:3d:b0:56:d9:3f:3f:d8:aa:34:5c:51:6b:0f:28:bf:07:
         6d:d7:ee:0b:51:07:05:e3:78:49:b4:67:c0:63:40:11:1d:45:
         db:c1:58:77:28:ba:fe:1f:27:c0:f3:bd:3c:f4:08:b9:c8:06:
         41:de:49:24:e8:27:40:b3:90:b4:01:48:d9:bb:68:9b:ac:ad:
         7a:65:61:98:ed:c1:e7:a8:61:89:68:ca:5d:36:11:c4:87:89:
         b6:c8:50:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 09:16:48 2025 by rpki-client