This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer File: 154E883FCB52E91706C17788E2199491DC6E45F7.cer (raw, json) Hash identifier: WjKuafUZDqN22M7LBo1O+bz/h87cNZzfhTwbbz/3ros= Subject key identifier: 15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2CDA9A8DF1DF029D3F89BEA28D1AA3707D8B5CCC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft caRepository: rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 06 Dec 2025 04:55:36 +0000 Certificate not after: Sat 05 Dec 2026 05:00:36 +0000 Subordinate resources: AS: 264127 IP: 138.59.220.0/22 IP: 2804:22dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 07:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:da:9a:8d:f1:df:02:9d:3f:89:be:a2:8d:1a:a3:70:7d:8b:5c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 6 04:55:36 2025 GMT Not After : Dec 5 05:00:36 2026 GMT Subject: CN=154E883FCB52E91706C17788E2199491DC6E45F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:f8:1f:fa:33:0d:c7:d8:3b:aa:b4:75:4e: 64:53:50:79:49:1e:c1:88:8c:c5:f8:ac:ce:bf:25: 87:2f:97:b8:86:e1:0b:63:f0:3d:f6:ef:e2:0f:d6: 35:50:24:6c:d7:29:c3:79:82:55:08:aa:87:68:5a: 1e:69:ba:54:1f:fa:51:99:14:36:c9:8d:9e:10:7f: f4:65:e6:78:89:12:b0:45:f7:9f:be:f5:a2:86:12: 6d:f9:39:16:15:64:a4:c4:95:7b:d9:22:c7:26:84: 1a:a2:b7:ff:78:a5:3a:08:1f:eb:57:c3:70:1a:9a: 94:94:85:ba:47:73:1d:30:77:24:e5:6d:43:97:ae: b0:9f:96:ac:3f:48:4c:07:9f:c8:f9:74:27:8d:b6: e8:bd:1e:5b:a2:45:3b:58:1f:da:5f:5d:a0:3a:0c: fc:a3:25:59:44:a1:9d:0c:af:7b:46:30:fc:47:46: 2e:2d:cb:87:97:0f:23:65:9d:12:50:cc:0a:42:04: af:4c:e5:3d:40:a3:5c:af:b8:0d:d8:9d:84:c8:4f: 4b:57:53:f3:9a:36:78:28:78:3a:6c:08:1e:52:21: ea:a6:4b:b0:70:a4:e2:40:cd:5d:1e:28:db:09:d8: c6:7a:aa:87:c9:2a:a2:8c:97:a9:b1:db:52:b4:39: a5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.59.220.0/22 IPv6: 2804:22dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264127 Signature Algorithm: sha256WithRSAEncryption 5a:25:e7:73:8b:f7:1e:56:3e:fe:70:b7:3a:f2:e2:a0:d3:3a: 5c:cc:c8:a9:70:af:33:9d:22:45:44:81:c5:49:1f:09:84:25: e8:af:65:cd:9f:bb:ee:7c:01:d1:eb:9a:e2:c7:9c:8f:62:fd: b7:e4:4c:12:15:60:f5:38:6f:f7:17:c3:31:29:3d:f5:f6:a2: 3e:8e:65:2b:c2:db:17:0e:9e:5f:95:26:35:d9:ea:57:ee:93: 77:bb:fb:5d:c0:62:7c:fd:6d:ac:3c:a2:7e:cf:9b:10:9f:d9: 3a:7e:b8:09:bd:93:a9:d7:87:38:49:60:46:64:05:08:ac:b0: 20:00:c0:5a:2f:72:8f:ce:1b:8c:af:75:ea:23:35:39:10:df: 23:86:12:48:3a:fe:73:d1:f2:5c:32:23:2e:f5:cf:2e:0e:76: 20:97:cd:6e:c5:8a:ae:e9:2d:41:76:b8:26:29:0f:09:c9:0d: 02:29:3b:a7:02:1c:bf:b6:4e:74:38:9a:02:f8:30:2b:48:40: da:35:a6:25:61:11:12:cc:e9:2a:90:20:c0:95:78:16:55:4a: 10:bd:e2:b5:b2:99:80:7b:21:c0:d1:c6:34:6b:75:4d:ce:0f: 5d:0b:31:ec:f7:21:73:38:a0:24:d1:24:de:af:bd:c7:1c:84: 51:2c:f9:26 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULNqajfHfAp0/ib6ijRqjcH2LXMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMDYwNDU1MzZaFw0yNjEyMDUwNTAwMzZaMDMxMTAvBgNV BAMTKDE1NEU4ODNGQ0I1MkU5MTcwNkMxNzc4OEUyMTk5NDkxREM2RTQ1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmI/gf+jMNx9g7qrR1TmRTUHlJ HsGIjMX4rM6/JYcvl7iG4Qtj8D327+IP1jVQJGzXKcN5glUIqodoWh5pulQf+lGZ FDbJjZ4Qf/Rl5niJErBF95++9aKGEm35ORYVZKTElXvZIscmhBqit/94pToIH+tX w3AampSUhbpHcx0wdyTlbUOXrrCflqw/SEwHn8j5dCeNtui9HluiRTtYH9pfXaA6 DPyjJVlEoZ0Mr3tGMPxHRi4ty4eXDyNlnRJQzApCBK9M5T1Ao1yvuA3YnYTIT0tX U/OaNngoeDpsCB5SIeqmS7BwpOJAzV0eKNsJ2MZ6qofJKqKMl6mx21K0OaWrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQVTog/y1LpFwbB d4jiGZSR3G5F9zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3dL SkJqNVUza05XNGhaQktNWTRwam5oSjhIRWpvNkRhdThKUU1GYWcxVTYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzN3 S0pCajVVM2tOVzRoWkJLTVk0cGpuaEo4SEVqbzZEYXU4SlFNRmFnMVU2LzAvMTU0 RTg4M0ZDQjUyRTkxNzA2QzE3Nzg4RTIxOTk0OTFEQzZFNDVGNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCijvcMA0EAgACMAcDBQAoBCLcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHvzANBgkqhkiG9w0BAQsFAAOCAQEAWiXnc4v3HlY+/nC3 OvLioNM6XMzIqXCvM50iRUSBxUkfCYQl6K9lzZ+77nwB0eua4secj2L9t+RMEhVg 9Thv9xfDMSk99faiPo5lK8LbFw6eX5UmNdnqV+6Td7v7XcBifP1trDyifs+bEJ/Z On64Cb2TqdeHOElgRmQFCKywIADAWi9yj84bjK916iM1ORDfI4YSSDr+c9HyXDIj LvXPLg52IJfNbsWKruktQXa4JikPCckNAik7pwIcv7ZOdDiaAvgwK0hA2jWmJWER EszpKpAgwJV4FlVKEL3itbKZgHshwNHGNGt1Tc4PXQsx7PchczigJNEk3q+9xxyE USz5Jg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:39:23 2025 by rpki-client