This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
File:                     98FB017963B86A925F721F20ED568534305BBBBF.cer (raw, json)
Hash identifier:          BI6HsEngfu/mnkjChgFzbrBrO5Rm/sIzjuM3/OsvFTI=
Subject key identifier:   98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       254D21A42AC1AC879F148547A295E78842FB9EFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Dec 2025 15:22:34 +0000
Certificate not after:    Fri 11 Dec 2026 15:27:34 +0000
Subordinate resources:    AS: 265300
                          IP: 168.121.68.0/22
                          IP: 200.106.132.0/22
                          IP: 200.125.176.0/22
                          IP: 2804:2dbc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 15:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4d:21:a4:2a:c1:ac:87:9f:14:85:47:a2:95:e7:88:42:fb:9e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 15:22:34 2025 GMT
            Not After : Dec 11 15:27:34 2026 GMT
        Subject: CN=98FB017963B86A925F721F20ED568534305BBBBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a1:2e:d1:59:75:36:0b:0b:1f:ad:d6:0e:6f:
                    75:93:5c:ac:94:7b:c3:7c:b1:33:37:9c:13:37:80:
                    62:72:56:7f:ef:8a:ea:65:61:ad:bb:b0:bf:b8:60:
                    7e:2d:1c:0c:1c:82:bf:06:a3:b0:bb:12:10:9c:62:
                    17:95:b4:f6:d7:5e:9e:79:8a:3c:de:f4:dd:23:82:
                    f4:df:0e:49:01:25:cf:5b:49:b2:bf:cc:24:b1:2d:
                    4a:42:79:7d:35:6a:98:cb:8b:c5:e1:7d:3e:50:c3:
                    bc:ec:78:9b:38:11:68:80:ba:ad:2b:25:6f:78:c3:
                    23:75:f9:cd:3c:cc:38:9f:25:8e:0a:35:7d:ca:55:
                    1f:b1:25:2d:69:40:54:b5:1a:06:ee:b8:cc:05:09:
                    3c:90:7e:00:ca:a7:37:59:45:e2:97:81:e9:91:75:
                    d7:30:60:e6:3f:6e:56:40:7d:da:95:42:bc:56:eb:
                    e9:96:ed:ac:46:3b:7d:32:93:46:8c:a5:90:a6:a9:
                    c8:ea:6d:a0:ce:44:a5:df:e9:1d:51:c6:71:83:75:
                    5f:8a:bf:7f:6a:82:7a:c9:ca:9a:10:6e:84:80:82:
                    08:74:c8:9d:4f:09:06:74:3e:e2:91:15:88:05:7e:
                    5c:88:69:82:bf:a3:ac:46:98:ea:e0:97:5d:41:be:
                    d1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22
                  200.106.132.0/22
                  200.125.176.0/22
                IPv6:
                  2804:2dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265300

    Signature Algorithm: sha256WithRSAEncryption
         78:a2:4a:73:ee:b2:97:bf:d4:a5:37:23:79:d6:6f:5a:74:93:
         28:eb:b4:ee:3c:f8:71:7e:46:81:99:15:f7:cc:e7:1c:f9:69:
         a5:69:d4:75:08:42:f7:64:29:f9:0b:f8:8a:4a:7e:45:a0:72:
         20:87:a4:8d:79:42:3d:9e:34:56:81:2a:a5:11:ff:e2:db:eb:
         73:0c:0e:ef:60:a7:e9:a0:06:e8:99:ed:04:f2:93:28:9a:9a:
         9d:9c:2f:cf:02:7d:24:3c:c8:12:c1:8d:8b:1a:44:cb:aa:99:
         b4:3f:6f:89:d4:2e:8e:a9:b9:d0:87:a2:ff:0f:33:bd:1f:3b:
         8a:d2:c5:ba:a4:c1:6f:da:f7:59:47:c3:2c:cf:d5:45:f3:b4:
         83:20:21:4c:98:36:c2:19:36:30:2a:b5:6b:fe:94:e8:16:52:
         88:aa:a3:59:d9:6c:c0:c4:c2:87:92:63:79:2f:9a:0e:7d:a1:
         9c:70:92:7b:f5:14:34:bd:14:d9:e6:67:05:59:f3:e9:1a:17:
         70:06:e8:0b:67:e8:6c:5e:7e:74:96:a6:4c:6a:f9:03:23:a5:
         8f:4c:33:2d:1a:4e:33:46:1c:fb:61:9f:5e:33:c6:82:0d:36:
         d2:6a:50:19:25:01:e3:42:20:c8:00:67:f2:9f:40:24:69:7f:
         14:a0:32:cb
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUJU0hpCrBrIefFIVHopXniEL7nv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMTIxNTIyMzRaFw0yNjEyMTExNTI3MzRaMDMxMTAvBgNV
BAMTKDk4RkIwMTc5NjNCODZBOTI1RjcyMUYyMEVENTY4NTM0MzA1QkJCQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaoS7RWXU2CwsfrdYOb3WTXKyU
e8N8sTM3nBM3gGJyVn/viuplYa27sL+4YH4tHAwcgr8Go7C7EhCcYheVtPbXXp55
ijze9N0jgvTfDkkBJc9bSbK/zCSxLUpCeX01apjLi8XhfT5Qw7zseJs4EWiAuq0r
JW94wyN1+c08zDifJY4KNX3KVR+xJS1pQFS1GgbuuMwFCTyQfgDKpzdZReKXgemR
ddcwYOY/blZAfdqVQrxW6+mW7axGO30yk0aMpZCmqcjqbaDORKXf6R1RxnGDdV+K
v39qgnrJypoQboSAggh0yJ1PCQZ0PuKRFYgFflyIaYK/o6xGmOrgl11BvtG9AgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSY+wF5Y7hqkl9y
HyDtVoU0MFu7vzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzdk
NGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VEb2MvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0M3
ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzAvOThG
QjAxNzk2M0I4NkE5MjVGNzIxRjIwRUQ1Njg1MzQzMDVCQkJCRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCqHlEAwQCyGqEAwQCyH2wMA0EAgACMAcDBQAoBC28
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQMVDANBgkqhkiG9w0BAQsFAAOCAQEA
eKJKc+6yl7/UpTcjedZvWnSTKOu07jz4cX5GgZkV98znHPlppWnUdQhC92Qp+Qv4
ikp+RaByIIekjXlCPZ40VoEqpRH/4tvrcwwO72Cn6aAG6JntBPKTKJqanZwvzwJ9
JDzIEsGNixpEy6qZtD9vidQujqm50Iei/w8zvR87itLFuqTBb9r3WUfDLM/VRfO0
gyAhTJg2whk2MCq1a/6U6BZSiKqjWdlswMTCh5JjeS+aDn2hnHCSe/UUNL0U2eZn
BVnz6RoXcAboC2fobF5+dJamTGr5AyOlj0wzLRpOM0Yc+2GfXjPGgg020mpQGSUB
40IgyABn8p9AJGl/FKAyyw==
-----END CERTIFICATE-----
Generated at Sun Dec 14 15:08:07 2025 by rpki-client