This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23D8D5FC5C1576BC524220F18D107B00FDBA4B95.cer File: 23D8D5FC5C1576BC524220F18D107B00FDBA4B95.cer (raw, json) Hash identifier: 4yBCH7pKnqhvSQjgM9h15wEXJZ739hREG3CtvFPERIw= Subject key identifier: 23:D8:D5:FC:5C:15:76:BC:52:42:20:F1:8D:10:7B:00:FD:BA:4B:95 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5CE1122EEF76A72CC55493E7910CA2AB6B96F8AD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/23D8D5FC5C1576BC524220F18D107B00FDBA4B95.mft caRepository: rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Nov 2025 11:16:19 +0000 Certificate not after: Fri 06 Nov 2026 11:21:19 +0000 Subordinate resources: AS: 271529 IP: 181.174.248.0/22 IP: 2804:7cf4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e1:12:2e:ef:76:a7:2c:c5:54:93:e7:91:0c:a2:ab:6b:96:f8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 7 11:16:19 2025 GMT Not After : Nov 6 11:21:19 2026 GMT Subject: CN=23D8D5FC5C1576BC524220F18D107B00FDBA4B95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:6f:65:4e:b8:c1:0f:4c:e9:f6:4e:48:79: 64:da:1e:fa:07:86:39:38:fc:91:2f:20:8a:40:31: 9a:d5:f0:21:aa:7b:f5:0f:52:0a:d0:93:ed:cd:6f: 1c:62:eb:6f:f2:fd:2b:48:af:3a:df:c5:3e:a5:94: bb:da:bd:c7:1a:1f:91:2d:38:72:12:c8:08:d3:8f: 36:0a:08:70:8a:81:13:67:7b:b3:ce:ca:9f:4c:a6: e2:26:f4:2b:c1:7a:02:ce:ae:c8:05:b4:f7:3f:29: 46:df:67:6e:33:f4:7e:de:42:19:35:78:f3:0e:bd: 9b:db:85:6f:3b:99:fc:14:25:b7:ed:08:8d:e5:76: 9c:c2:f2:80:c6:6c:b0:bc:c5:d9:47:83:2e:2b:db: 6f:85:d7:96:23:95:77:91:d1:fc:02:77:82:dc:fc: fd:0e:28:20:c5:45:76:f4:e3:25:37:1d:e9:c6:9e: d5:8d:f0:58:15:41:73:fe:d4:6e:45:52:98:83:45: 60:89:de:3d:e0:ff:43:73:c1:bf:f2:84:ea:9b:02: 09:d9:89:b8:41:90:cb:4e:20:c3:cb:82:28:5f:08: 01:51:a4:f3:73:cb:77:23:f3:f7:18:c3:60:d3:a0: 88:98:d1:f1:d8:bf:5a:99:d7:75:52:6e:8d:1e:63: ab:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:D8:D5:FC:5C:15:76:BC:52:42:20:F1:8D:10:7B:00:FD:BA:4B:95 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/23D8D5FC5C1576BC524220F18D107B00FDBA4B95.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.174.248.0/22 IPv6: 2804:7cf4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271529 Signature Algorithm: sha256WithRSAEncryption 10:9c:1c:0e:2e:ea:cd:a2:16:f0:d0:56:0a:74:85:7f:c6:12: 80:75:58:3d:e5:67:8d:b3:18:b2:d6:98:69:09:d2:4d:9b:d4: c4:e1:ae:9c:4a:af:22:8c:26:ec:ae:a7:23:42:82:d3:4c:f7: 0d:cb:6d:9b:00:c3:cf:f1:f1:b7:c9:9d:f3:0e:f2:b4:f9:d2: 53:63:c2:87:0c:2f:05:87:d9:93:38:6f:61:df:69:e8:9e:c1: 2b:2a:b6:2f:5a:e2:2d:12:3c:9c:28:a7:67:77:9d:84:00:62: bd:ea:02:9c:33:24:e3:f4:79:75:57:2a:41:13:0e:8f:ae:b8: c1:f0:9e:9a:91:b3:30:37:5e:c8:e0:48:f6:20:54:42:d6:9e: be:14:1f:0e:a8:40:da:98:44:18:91:04:8e:9d:e0:97:7c:1a: 18:28:32:3f:3a:3b:f7:34:e4:b0:de:de:19:0f:6e:da:3b:95: e0:32:60:8d:69:38:96:97:18:da:ee:bd:5e:83:4c:29:6a:6b: 18:90:34:d3:5f:1f:63:7f:de:46:7d:3e:05:50:ed:0a:a5:ae: db:7d:66:d7:c3:73:75:18:29:8e:13:05:87:35:21:da:5c:77: 62:c2:6f:33:82:10:4d:42:57:97:c3:fb:53:cb:72:e0:b2:d1: 01:b8:72:9a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUXOESLu92pyzFVJPnkQyiq2uW+K0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDcxMTE2MTlaFw0yNjExMDYxMTIxMTlaMDMxMTAvBgNV BAMTKDIzRDhENUZDNUMxNTc2QkM1MjQyMjBGMThEMTA3QjAwRkRCQTRCOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bm9lTrjBD0zp9k5IeWTaHvoH hjk4/JEvIIpAMZrV8CGqe/UPUgrQk+3Nbxxi62/y/StIrzrfxT6llLvavccaH5Et OHISyAjTjzYKCHCKgRNne7POyp9MpuIm9CvBegLOrsgFtPc/KUbfZ24z9H7eQhk1 ePMOvZvbhW87mfwUJbftCI3ldpzC8oDGbLC8xdlHgy4r22+F15YjlXeR0fwCd4Lc /P0OKCDFRXb04yU3HenGntWN8FgVQXP+1G5FUpiDRWCJ3j3g/0Nzwb/yhOqbAgnZ ibhBkMtOIMPLgihfCAFRpPNzy3cj8/cYw2DToIiY0fHYv1qZ13VSbo0eY6szAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQj2NX8XBV2vFJC IPGNEHsA/bpLlTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRml5 cDVGNVFzek1Zb2ZieFp6OUt3WnZuQlZxU05FZFd0NGdNcVVES2k4dVIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zp eXA1RjVRc3pNWW9mYnhaejlLd1p2bkJWcVNORWRXdDRnTXFVREtpOHVSLzAvMjNE OEQ1RkM1QzE1NzZCQzUyNDIyMEYxOEQxMDdCMDBGREJBNEI5NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCta74MA0EAgACMAcDBQAoBHz0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQkqTANBgkqhkiG9w0BAQsFAAOCAQEAEJwcDi7qzaIW8NBW CnSFf8YSgHVYPeVnjbMYstaYaQnSTZvUxOGunEqvIowm7K6nI0KC00z3DcttmwDD z/Hxt8md8w7ytPnSU2PChwwvBYfZkzhvYd9p6J7BKyq2L1riLRI8nCinZ3edhABi veoCnDMk4/R5dVcqQRMOj664wfCempGzMDdeyOBI9iBUQtaevhQfDqhA2phEGJEE jp3gl3waGCgyPzo79zTksN7eGQ9u2juV4DJgjWk4lpcY2u69XoNMKWprGJA0018f Y3/eRn0+BVDtCqWu231m18NzdRgpjhMFhzUh2lx3YsJvM4IQTUJXl8P7U8ty4LLR Abhymg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:20 2025 by rpki-client