This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer
File:                     AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer (raw, json)
Hash identifier:          pg6dAuBBsoCJnTuW2PqSjBaoj7QS+wfrIixOFwiO1YE=
Subject key identifier:   AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3046BADAB2013022FE408C0499E921AB14EA18E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Dec 2025 17:54:18 +0000
Certificate not after:    Mon 21 Dec 2026 17:59:18 +0000
Subordinate resources:    AS: 52677
                          IP: 177.66.204.0/22
                          IP: 2804:c18::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 16:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:46:ba:da:b2:01:30:22:fe:40:8c:04:99:e9:21:ab:14:ea:18:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 22 17:54:18 2025 GMT
            Not After : Dec 21 17:59:18 2026 GMT
        Subject: CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3a:d0:f8:59:da:8c:66:c8:f3:36:27:95:c7:
                    35:89:a6:ec:1e:dd:33:e1:65:d3:b2:f3:52:0f:fd:
                    50:c7:77:df:42:54:e6:73:de:88:65:d2:e8:f2:49:
                    03:c4:f4:ea:56:9d:2c:26:5d:b7:fb:54:e7:9c:98:
                    6a:86:ce:ee:a8:2f:9d:28:fd:bd:46:e4:88:40:fc:
                    60:c9:c3:e2:2f:34:b7:ad:72:f1:30:07:e4:e3:37:
                    bb:5e:21:e6:a3:61:fd:0a:4b:6a:74:e3:ae:ad:32:
                    b1:2f:5f:b7:aa:92:bf:92:4e:3d:5c:ee:a7:8a:03:
                    d4:85:71:d7:61:57:97:55:73:2d:87:60:2d:8e:37:
                    bb:e5:df:8e:e6:6c:6f:bb:7c:d6:bc:23:93:6e:51:
                    cb:4b:69:11:86:dd:8c:1e:e0:74:f3:81:50:83:5b:
                    98:d4:cb:70:2b:b1:44:7d:3e:56:c9:dd:56:b9:23:
                    72:9a:ee:80:40:a7:20:03:26:60:e0:46:33:f5:58:
                    32:92:d3:aa:a1:4b:75:b7:76:a5:cd:76:72:b2:25:
                    09:f3:35:0f:67:78:c3:31:20:84:71:9e:87:fa:d9:
                    90:63:8f:8e:8d:1c:30:1c:12:bf:f0:e0:86:15:14:
                    89:82:b0:e0:63:26:6a:0e:5c:4a:45:f4:7b:98:16:
                    0f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.204.0/22
                IPv6:
                  2804:c18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52677

    Signature Algorithm: sha256WithRSAEncryption
         a5:42:9b:98:ad:f4:df:07:20:f6:8e:6c:ba:65:f8:c8:e7:02:
         44:81:08:69:f1:81:b4:09:aa:64:0f:3b:53:7f:c2:cc:f7:34:
         3c:8c:0c:17:1e:54:de:aa:ca:8f:18:ae:7a:d6:3e:16:f8:fd:
         74:5d:95:24:94:6a:1c:35:8b:fc:b7:6a:1c:d9:2c:8b:0f:eb:
         ac:f8:b7:d6:1f:40:af:4c:db:24:7d:f4:75:99:92:9a:4e:7c:
         bb:27:10:8a:4e:88:4f:f5:22:ad:5a:eb:7f:f3:7a:e2:57:99:
         fa:fb:6f:ec:50:41:9b:6c:7c:1e:ae:08:45:ed:7b:19:2e:cc:
         47:32:a3:4b:9a:c2:ae:fd:d6:79:7f:1f:21:5f:9b:d0:22:fa:
         cf:49:45:f7:88:47:2e:dc:c1:a5:1a:ff:02:87:b8:56:e2:1f:
         a8:e1:2d:38:39:dc:97:55:09:f4:52:8f:5d:51:d3:83:28:1f:
         f4:6a:3f:ae:78:2c:30:9c:ff:66:31:92:25:e7:e4:ce:a8:b5:
         3d:f1:35:51:92:f0:33:4d:f3:c4:14:a9:64:63:e7:56:da:74:
         54:7a:7b:4c:da:3e:dc:5b:73:c0:17:69:80:60:f1:e4:c3:03:
         73:bc:5e:4c:ae:86:33:3c:2d:ca:7b:1a:c8:94:86:5d:78:e0:
         2d:3a:6f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----