This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer File: 088FBECC3D734875CDC23B55B9E5092EA27DF270.cer (raw, json) Hash identifier: ph13qUCQNbgSnSNk26+IovXkSbUVcSK6NrX70iBqrOM= Subject key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4C9F40ACFCC4FAE182A3C5FB909A09BD6070F25D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft caRepository: rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 26 Nov 2025 14:06:20 +0000 Certificate not after: Wed 25 Nov 2026 14:11:20 +0000 Subordinate resources: AS: 52861 IP: 177.93.144.0/21 IP: 177.124.32.0/21 IP: 2804:7bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9f:40:ac:fc:c4:fa:e1:82:a3:c5:fb:90:9a:09:bd:60:70:f2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 26 14:06:20 2025 GMT Not After : Nov 25 14:11:20 2026 GMT Subject: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:63:81:1a:af:9a:4f:c1:b1:7f:8a:65:62:f4: 41:9d:8d:8c:f6:a0:da:80:39:63:bd:77:12:6b:96: 06:ba:6d:f1:27:f8:98:4b:e9:08:6f:bd:3e:9e:5a: 49:f5:15:44:5a:b3:00:f4:17:62:e1:c8:be:af:cf: d8:a4:14:53:7b:05:be:05:44:c0:c3:64:90:45:11: 46:17:92:bc:bb:56:f6:86:f4:c0:8b:a2:8a:42:1c: 62:28:60:b9:1d:c1:6e:53:59:bd:88:db:39:ef:48: d9:1b:ad:96:00:28:c0:63:52:94:69:85:ae:ee:88: e9:b8:94:6d:9c:69:7d:fb:ef:42:fd:68:cd:79:c8: dd:74:e9:cd:bf:f1:13:c9:ec:d6:aa:fa:a2:dd:15: 37:ff:87:71:ea:a3:be:19:ae:e8:fa:f5:ca:42:8e: 36:5e:b3:88:b2:83:44:f6:16:ae:96:96:10:c8:3f: e5:cf:65:42:ec:27:bb:9f:1a:4c:9d:55:5d:0b:45: eb:18:00:32:85:e0:d0:8e:14:49:b9:26:c6:ba:ab: f8:c9:e5:09:88:60:20:4f:3c:80:46:1d:d5:1e:94: 18:29:46:2e:81:07:d2:cd:85:f3:34:45:4b:dc:80: 8f:3c:05:38:c8:1b:6f:c8:63:b4:02:27:c8:ba:de: ea:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.93.144.0/21 177.124.32.0/21 IPv6: 2804:7bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52861 Signature Algorithm: sha256WithRSAEncryption 3a:49:fb:90:01:95:5f:e9:b4:f0:7d:81:16:a5:d7:04:01:58: 4a:2b:3e:41:0a:1b:d9:d4:4e:34:18:30:ef:83:6a:be:f9:ff: 02:5b:a6:c6:8f:47:52:ae:69:3f:4e:e4:53:cd:8e:64:2d:15: b3:20:34:e9:b2:33:88:61:61:f3:37:48:88:74:80:f9:59:79: f3:ec:b1:99:c0:0a:59:31:99:64:1a:95:d7:1f:b8:e2:39:78: ff:8d:6a:36:0d:8d:fa:a1:56:99:61:4f:a5:eb:a5:7d:0d:9c: b2:80:47:90:de:47:c0:f2:c8:24:b1:89:9c:0e:07:16:5c:35: 82:fa:35:28:c3:20:be:88:a9:c8:2d:8d:a8:2d:d8:95:0a:5b: 67:53:d5:9a:36:4f:04:82:28:35:0a:29:36:ef:59:9c:23:92: 63:80:9d:0a:96:1c:a1:7d:c9:82:13:e9:78:ee:e1:60:7a:41: 72:20:85:87:1b:fd:20:9f:f2:89:42:2b:73:d2:79:2a:af:89: 5b:f6:84:da:95:d1:93:43:73:da:28:95:93:cf:72:e9:27:4d: a3:2b:0e:18:f3:56:71:53:90:9b:15:56:df:b4:a9:fb:cb:d7: e1:b8:93:eb:74:d1:88:5e:a7:a1:80:58:94:0d:40:42:ca:f0: 48:4f:a4:72 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUTJ9ArPzE+uGCo8X7kJoJvWBw8l0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMjYxNDA2MjBaFw0yNjExMjUxNDExMjBaMDMxMTAvBgNV BAMTKDA4OEZCRUNDM0Q3MzQ4NzVDREMyM0I1NUI5RTUwOTJFQTI3REYyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhY4Ear5pPwbF/imVi9EGdjYz2 oNqAOWO9dxJrlga6bfEn+JhL6QhvvT6eWkn1FURaswD0F2LhyL6vz9ikFFN7Bb4F RMDDZJBFEUYXkry7VvaG9MCLoopCHGIoYLkdwW5TWb2I2znvSNkbrZYAKMBjUpRp ha7uiOm4lG2caX3770L9aM15yN106c2/8RPJ7Naq+qLdFTf/h3Hqo74Zruj69cpC jjZes4iyg0T2Fq6WlhDIP+XPZULsJ7ufGkydVV0LResYADKF4NCOFEm5Jsa6q/jJ 5QmIYCBPPIBGHdUelBgpRi6BB9LNhfM0RUvcgI88BTjIG2/IY7QCJ8i63uqvAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIj77MPXNIdc3C O1W55Qkuon3ycDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjF1 VVdpVWtuUkRTV1AzM2ZTSDVuSzdMZndNOU1QMWNnZXZLVjU5eGhBS1gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ix dVVXaVVrblJEU1dQMzNmU0g1bks3TGZ3TTlNUDFjZ2V2S1Y1OXhoQUtYLzAvMDg4 RkJFQ0MzRDczNDg3NUNEQzIzQjU1QjlFNTA5MkVBMjdERjI3MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsV2QAwQDsXwgMA0EAgACMAcDBQAoBAe8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOfTANBgkqhkiG9w0BAQsFAAOCAQEAOkn7kAGV X+m08H2BFqXXBAFYSis+QQob2dRONBgw74Nqvvn/Alumxo9HUq5pP07kU82OZC0V syA06bIziGFh8zdIiHSA+Vl58+yxmcAKWTGZZBqV1x+44jl4/41qNg2N+qFWmWFP peulfQ2csoBHkN5HwPLIJLGJnA4HFlw1gvo1KMMgvoipyC2NqC3YlQpbZ1PVmjZP BIIoNQopNu9ZnCOSY4CdCpYcoX3JghPpeO7hYHpBciCFhxv9IJ/yiUIrc9J5Kq+J W/aE2pXRk0Nz2iiVk89y6SdNoysOGPNWcVOQmxVW37Sp+8vX4biT63TRiF6noYBY lA1AQsrwSE+kcg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:52:35 2025 by rpki-client