This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.cer
File:                     06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.cer (raw, json)
Hash identifier:          hJdgnbN6lBtqA1jGtNac8NqCYlWwuATkvO9PmvGbU/s=
Subject key identifier:   06:F3:CB:49:A9:18:29:7B:5A:C7:DD:DB:E5:4A:10:1D:2F:B4:77:3B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       148EDE2DEDF42A17986E783E6DE637F100FD97AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Dec 2025 02:55:11 +0000
Certificate not after:    Fri 04 Dec 2026 03:00:11 +0000
Subordinate resources:    AS: 263855
                          IP: 138.186.84.0/22
                          IP: 2804:26c4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8e:de:2d:ed:f4:2a:17:98:6e:78:3e:6d:e6:37:f1:00:fd:97:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  5 02:55:11 2025 GMT
            Not After : Dec  4 03:00:11 2026 GMT
        Subject: CN=06F3CB49A918297B5AC7DDDBE54A101D2FB4773B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:9b:d7:19:2b:dd:2b:81:8a:36:be:88:fd:
                    d7:14:8c:14:04:2a:f0:60:75:f4:81:71:7f:5c:ae:
                    60:99:d9:7f:b2:2d:34:34:00:72:6e:51:5e:d6:5a:
                    87:45:ed:8f:85:9f:e8:90:7b:66:9a:61:3c:6b:05:
                    8b:28:0d:93:0f:67:1b:bb:f4:06:d3:0b:34:f8:52:
                    27:c1:f9:fb:94:73:c0:fc:51:21:6f:47:34:1b:39:
                    79:5d:7d:99:66:a7:ae:a1:fb:bb:0a:4d:c6:8e:bb:
                    5a:b0:ea:73:b8:f7:dd:0f:f2:98:7a:39:3e:be:4e:
                    c4:36:b9:7a:ac:ce:9c:51:e8:b6:2b:79:2c:f5:31:
                    cf:88:8c:7f:e5:75:ca:93:49:1e:de:89:0b:5c:83:
                    51:2c:e6:b6:b4:e9:b6:e2:15:cc:1c:93:f9:9a:4d:
                    24:b4:00:b3:49:e2:dc:78:c4:14:aa:ed:ed:96:e8:
                    6b:57:f8:cf:9f:50:4a:4d:62:fc:3b:68:ea:d1:cc:
                    ea:dd:88:1b:5a:ab:f6:72:8b:c6:20:ec:0f:1b:e9:
                    7b:6a:14:10:b5:49:a0:67:43:1a:96:c1:0c:7d:11:
                    ad:9f:3c:f6:5f:2c:bc:c2:ad:52:7e:73:a0:9f:8b:
                    26:c7:f9:14:87:5b:a6:ca:32:84:72:82:dd:fd:8c:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:F3:CB:49:A9:18:29:7B:5A:C7:DD:DB:E5:4A:10:1D:2F:B4:77:3B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.84.0/22
                IPv6:
                  2804:26c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263855

    Signature Algorithm: sha256WithRSAEncryption
         c6:05:8d:c0:3b:9e:2c:62:e3:c4:c9:db:51:0e:39:44:57:db:
         f2:49:6c:2d:ea:2d:eb:d3:f8:6d:81:cc:63:ff:40:4c:b2:4d:
         d4:b1:14:72:3c:b2:84:7e:f9:e1:df:c9:15:d4:8d:b0:f2:6a:
         cf:ef:a5:c0:4a:1a:f0:e6:fa:96:2b:0c:3f:66:3d:bb:9c:33:
         98:fb:6a:47:e1:24:69:0f:fe:9b:cf:16:c4:7c:ca:6d:51:ca:
         94:dc:37:11:b2:04:e2:ca:14:67:af:63:e7:e4:f4:d9:07:77:
         39:d0:e1:f8:b2:34:e2:0f:b9:0c:6f:69:cb:ea:1c:3e:b4:21:
         3b:d2:c5:df:a0:76:7d:fb:a6:93:1c:c9:3b:39:df:31:e4:9d:
         a2:40:83:55:0e:dd:de:ed:38:8e:4e:0b:7b:f0:e5:ca:d8:2f:
         c6:ee:30:41:b2:9e:d6:5a:a5:94:c1:1c:bc:68:7e:0e:c9:4f:
         6a:2a:fd:1b:72:d0:8e:af:0c:09:64:1b:79:1c:e3:67:07:05:
         96:8a:93:fc:ed:a3:22:c2:29:9b:77:81:13:67:9c:50:90:35:
         11:54:72:b6:95:37:0e:a3:80:74:f1:b0:28:7b:75:06:fd:b2:
         8e:52:81:4f:92:b0:da:be:ec:24:5d:24:16:e6:b9:82:ff:7d:
         18:df:8e:73
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUFI7eLe30KheYbng+beY38QD9l68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMDUwMjU1MTFaFw0yNjEyMDQwMzAwMTFaMDMxMTAvBgNV
BAMTKDA2RjNDQjQ5QTkxODI5N0I1QUM3REREQkU1NEExMDFEMkZCNDc3M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfY5vXGSvdK4GKNr6I/dcUjBQE
KvBgdfSBcX9crmCZ2X+yLTQ0AHJuUV7WWodF7Y+Fn+iQe2aaYTxrBYsoDZMPZxu7
9AbTCzT4UifB+fuUc8D8USFvRzQbOXldfZlmp66h+7sKTcaOu1qw6nO4990P8ph6
OT6+TsQ2uXqszpxR6LYreSz1Mc+IjH/ldcqTSR7eiQtcg1Es5ra06bbiFcwck/ma
TSS0ALNJ4tx4xBSq7e2W6GtX+M+fUEpNYvw7aOrRzOrdiBtaq/Zyi8Yg7A8b6Xtq
FBC1SaBnQxqWwQx9Ea2fPPZfLLzCrVJ+c6CfiybH+RSHW6bKMoRygt39jP3RAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQG88tJqRgpe1rH
3dvlShAdL7R3OzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ21n
Z250dVh5RnhSeVZUOFhBQjZITnFpYm1xYXk2OUR4Z3BMQVg3UlVKOHUvMDCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ21n
Z250dVh5RnhSeVZUOFhBQjZITnFpYm1xYXk2OUR4Z3BMQVg3UlVKOHUvMC8wNkYz
Q0I0OUE5MTgyOTdCNUFDN0REREJFNTRBMTAxRDJGQjQ3NzNCLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKKulQwDQQCAAIwBwMFACgEJsQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBAavMA0GCSqGSIb3DQEBCwUAA4IBAQDGBY3AO54sYuPEydtR
DjlEV9vySWwt6i3r0/htgcxj/0BMsk3UsRRyPLKEfvnh38kV1I2w8mrP76XAShrw
5vqWKww/Zj27nDOY+2pH4SRpD/6bzxbEfMptUcqU3DcRsgTiyhRnr2Pn5PTZB3c5
0OH4sjTiD7kMb2nL6hw+tCE70sXfoHZ9+6aTHMk7Od8x5J2iQINVDt3e7TiOTgt7
8OXK2C/G7jBBsp7WWqWUwRy8aH4OyU9qKv0bctCOrwwJZBt5HONnBwWWipP87aMi
wimbd4ETZ5xQkDURVHK2lTcOo4B08bAoe3UG/bKOUoFPkrDavuwkXSQW5rmC/30Y
345z
-----END CERTIFICATE-----