This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer File: 0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer (raw, json) Hash identifier: 5lOwYocHVSfMAKuzRaRF09XRiM6u9bFYAypsGoro+KM= Subject key identifier: 0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3E116478C7F97C554CC5B949F77D7F5814F968FD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft caRepository: rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 21 Nov 2025 10:26:44 +0000 Certificate not after: Fri 20 Nov 2026 10:31:44 +0000 Subordinate resources: AS: 264453 IP: 132.255.56.0/22 IP: 179.49.152.0/22 IP: 2804:1ee8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 06:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:11:64:78:c7:f9:7c:55:4c:c5:b9:49:f7:7d:7f:58:14:f9:68:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 21 10:26:44 2025 GMT Not After : Nov 20 10:31:44 2026 GMT Subject: CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:fd:cc:a5:0f:2d:52:6b:76:ca:8d:53:9b: 4a:c3:0f:a9:ff:2b:64:ad:3b:37:b2:8d:e4:15:d9: bb:92:42:96:46:45:17:55:8c:0f:d7:bc:d3:f8:35: e0:36:e9:0e:2a:86:55:56:12:40:52:2a:00:7c:e5: 50:7e:d2:3a:82:bc:72:e0:e6:75:55:3d:cb:95:e0: 78:17:c7:c1:5d:81:8f:b6:54:65:43:a3:01:4f:ce: 98:1f:bb:e1:49:d1:23:34:68:65:83:6a:fa:79:39: a3:4f:d7:5a:d7:01:3f:f3:53:5a:8b:c8:87:21:9d: fa:28:e7:93:e1:af:c0:73:bd:c8:5f:d2:3e:fb:7b: 6e:98:d7:a8:c2:59:2c:b1:9d:f1:68:76:9a:08:5b: be:57:a5:9b:7b:6b:82:cb:de:e6:df:2b:fc:5a:07: 68:37:99:c5:5f:14:30:7c:77:34:e9:86:90:e1:f1: 9c:23:c7:57:e0:a4:2e:55:7d:c3:0a:d5:b0:fa:ef: 49:86:b6:62:8f:fa:f0:9d:b2:d1:14:c4:af:c3:36: cf:c3:45:fe:2c:21:57:57:66:a9:de:71:95:49:be: 40:c7:ef:1d:b6:cf:bb:fb:4f:91:ae:22:fa:d3:32: 8d:a2:6b:40:0b:67:a5:89:74:60:8d:d6:3d:01:5e: ee:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.56.0/22 179.49.152.0/22 IPv6: 2804:1ee8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264453 Signature Algorithm: sha256WithRSAEncryption 25:8b:c8:98:02:9a:b9:e7:21:82:98:bf:eb:18:30:79:01:6b: 2e:f2:3e:61:94:40:f7:88:fa:0f:c8:0a:72:6a:51:f5:dc:9a: 63:13:54:ba:df:99:0e:bf:9b:2e:c2:9b:45:68:3f:c4:10:f4: 36:1d:c0:97:d1:74:dc:54:82:dd:ba:ad:04:6a:79:12:53:c1: ed:6e:49:96:d2:b3:59:bf:3c:ce:b0:2f:c2:fb:fa:88:67:a1: 5d:f5:d5:b3:d3:4a:11:9f:0e:18:c4:05:50:ef:7c:99:db:84: aa:1b:62:f2:d8:b8:39:bc:bf:c0:e4:3e:6f:42:f7:23:ea:c4: e7:41:56:d9:ed:1e:d6:42:1b:f9:94:9b:44:d7:a9:9e:9c:6f: 93:d6:ec:d1:b2:e9:a9:e1:2e:3a:3c:ae:6b:22:63:8b:63:68: 15:0f:0c:e4:ac:71:a4:6e:7b:74:80:45:df:46:b9:1d:45:d7: 7b:79:46:88:4b:69:e7:81:fc:83:60:f2:c0:32:85:7b:c7:6b: d5:0a:1f:a2:8e:85:56:9d:16:20:5c:a2:d8:cf:a2:8e:f8:63: 81:f3:ac:3f:e9:38:72:a4:81:93:8b:5c:45:0b:f3:b9:e0:67: 45:a2:8f:7b:cd:93:b7:7e:96:f7:62:de:ac:05:18:98:fd:c5: 4a:64:8c:b1 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUPhFkeMf5fFVMxblJ931/WBT5aP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMjExMDI2NDRaFw0yNjExMjAxMDMxNDRaMDMxMTAvBgNV BAMTKDBDNjVERUI2N0IzMDcwNUEzMTNFRjhGQUQ3QTBENkUyQkUyMkQxODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVP3MpQ8tUmt2yo1Tm0rDD6n/ K2StOzeyjeQV2buSQpZGRRdVjA/XvNP4NeA26Q4qhlVWEkBSKgB85VB+0jqCvHLg 5nVVPcuV4HgXx8FdgY+2VGVDowFPzpgfu+FJ0SM0aGWDavp5OaNP11rXAT/zU1qL yIchnfoo55Phr8Bzvchf0j77e26Y16jCWSyxnfFodpoIW75XpZt7a4LL3ubfK/xa B2g3mcVfFDB8dzTphpDh8Zwjx1fgpC5VfcMK1bD670mGtmKP+vCdstEUxK/DNs/D Rf4sIVdXZqnecZVJvkDH7x22z7v7T5GuIvrTMo2ia0ALZ6WJdGCN1j0BXu5JAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQMZd62ezBwWjE+ +PrXoNbiviLRhDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGtO M00xdWVRNXdaN212TnR4VU1EcEpKa2Zka1daYUxTYXZRS1dGRGM5Q1ovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhr TjNNMXVlUTV3Wjdtdk50eFVNRHBKSmtmZGtXWmFMU2F2UUtXRkRjOUNaLzAvMEM2 NURFQjY3QjMwNzA1QTMxM0VGOEZBRDdBMEQ2RTJCRTIyRDE4NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQChP84AwQCszGYMA0EAgACMAcDBQAoBB7oMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQJBTANBgkqhkiG9w0BAQsFAAOCAQEAJYvImAKa uechgpi/6xgweQFrLvI+YZRA94j6D8gKcmpR9dyaYxNUut+ZDr+bLsKbRWg/xBD0 Nh3Al9F03FSC3bqtBGp5ElPB7W5JltKzWb88zrAvwvv6iGehXfXVs9NKEZ8OGMQF UO98mduEqhti8ti4Oby/wOQ+b0L3I+rE50FW2e0e1kIb+ZSbRNepnpxvk9bs0bLp qeEuOjyuayJji2NoFQ8M5KxxpG57dIBF30a5HUXXe3lGiEtp54H8g2DywDKFe8dr 1Qofoo6FVp0WIFyi2M+ijvhjgfOsP+k4cqSBk4tcRQvzueBnRaKPe82Tt36W92Le rAUYmP3FSmSMsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:57:58 2025 by rpki-client