This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
File: 1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer (raw, json)
Hash identifier: GWUEHfVA4/X/nW1zel8I2kj9X29sOu1Vm5Bkavx/TZ0=
Subject key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 68AE9B807174F9ABEEEE45D87465587240364CD0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
caRepository: rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 12 Dec 2025 08:58:30 +0000
Certificate not after: Fri 11 Dec 2026 09:03:30 +0000
Subordinate resources: AS: 266514
IP: 45.186.40.0/22
IP: 170.244.232.0/22
IP: 2804:38f4::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 18 Dec 2025 20:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ae:9b:80:71:74:f9:ab:ee:ee:45:d8:74:65:58:72:40:36:4c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 12 08:58:30 2025 GMT
Not After : Dec 11 09:03:30 2026 GMT
Subject: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:8d:ef:c9:d9:84:fd:bb:c6:fe:60:f7:54:
6b:7d:e4:58:6d:7d:03:f8:f0:cc:9c:12:1a:f3:40:
e0:a0:d2:99:40:e9:2a:8e:1b:f5:6e:4d:22:5f:d6:
da:58:9b:52:f6:86:18:56:02:d5:70:96:f2:80:7d:
65:7a:df:5a:38:f8:7a:06:f2:c1:8d:ee:e8:45:4a:
a7:85:7b:e2:f8:8a:13:4c:50:32:3a:d0:07:89:b7:
fb:f8:0c:7d:84:cb:a4:77:fd:a5:85:97:eb:cc:48:
28:30:83:62:6f:05:5d:a2:63:42:aa:47:13:95:67:
f3:81:e4:37:d9:81:4d:55:c9:ed:ce:43:17:cf:ae:
13:33:24:db:e9:da:86:f8:42:04:8b:0f:56:c8:0a:
1b:58:c3:25:c8:1d:e0:e6:a8:55:c2:9d:8f:7c:d6:
59:61:06:b0:d3:80:7e:48:cb:04:52:9b:c4:dd:cd:
5f:b3:8e:7a:2a:2c:cc:3c:82:ad:b4:6c:ec:2f:ff:
2e:2e:c8:69:27:79:e5:67:86:1c:dd:22:8c:fb:00:
01:70:20:02:fd:2b:41:97:84:6c:1b:64:ba:b8:a0:
05:da:51:07:ff:8a:d0:85:61:6b:e2:08:33:f1:49:
7a:85:75:45:9c:5d:fe:aa:c8:ab:9c:2d:f3:82:38:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.40.0/22
170.244.232.0/22
IPv6:
2804:38f4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266514
Signature Algorithm: sha256WithRSAEncryption
3a:8f:fc:b1:9a:80:5b:7d:d3:96:da:e1:02:53:6c:8e:82:49:
7e:cf:30:84:e5:bf:05:2e:37:a8:00:0c:5d:ab:39:1f:6a:8f:
3c:34:12:91:e9:78:33:9b:14:04:05:bb:4d:97:69:44:2d:66:
01:dc:43:eb:02:c3:a2:bc:25:21:4d:7f:cf:e7:a5:62:71:7d:
62:3a:3a:9d:58:54:20:ba:b0:19:2b:f0:09:78:b2:66:7d:3e:
54:0d:b0:15:b8:95:c1:e1:c7:27:dd:6b:e8:ce:a6:b1:5b:75:
f6:5b:22:7e:02:67:49:3f:8c:b5:19:bb:66:87:18:66:09:05:
d1:01:30:20:f4:ad:ce:f5:a5:e2:f4:64:e3:f6:82:87:d3:c5:
40:b2:e8:d2:54:5a:49:ef:16:11:a6:85:8b:2e:16:18:d1:0f:
5b:62:96:1b:df:f8:ec:dc:f6:47:9c:73:90:b1:2f:d8:8a:6b:
32:f3:7a:25:6a:6c:b7:02:ef:73:5d:f6:42:f4:e8:9c:37:bd:
fc:0a:60:5c:76:f8:5b:21:94:b1:3b:88:73:74:82:62:e0:3d:
49:c2:c6:cc:4b:95:20:98:c3:cf:df:9d:9e:84:d3:ef:c5:1b:
99:2b:e8:fe:7a:48:11:e5:cd:84:04:45:ef:c9:30:d5:54:66:
78:ba:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:30:10 2025 by rpki-client