This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3072A5F7CD1ED49F1294BF501470922B420E536A.cer File: 3072A5F7CD1ED49F1294BF501470922B420E536A.cer (raw, json) Hash identifier: 88JXiyslr3m1i6mh+C63ls3sNmZfA5mUCKvEmA3mIPg= Subject key identifier: 30:72:A5:F7:CD:1E:D4:9F:12:94:BF:50:14:70:92:2B:42:0E:53:6A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 653C0B3BEE414136DA924A278D6ECDF9D3EE0EBE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AKNMHDJxfMAEBgFpBCVfDgUALPpZ95UMCkY8HYKfxJ5W/0/3072A5F7CD1ED49F1294BF501470922B420E536A.mft caRepository: rsync://rpki-repo.registro.br/repo/AKNMHDJxfMAEBgFpBCVfDgUALPpZ95UMCkY8HYKfxJ5W/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Dec 2025 20:42:13 +0000 Certificate not after: Wed 02 Dec 2026 20:47:13 +0000 Subordinate resources: AS: 271568 IP: 181.232.208.0/22 IP: 2804:7d8c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:3c:0b:3b:ee:41:41:36:da:92:4a:27:8d:6e:cd:f9:d3:ee:0e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 3 20:42:13 2025 GMT Not After : Dec 2 20:47:13 2026 GMT Subject: CN=3072A5F7CD1ED49F1294BF501470922B420E536A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:dd:e6:b5:00:b4:97:69:71:8c:36:dc:98: 65:41:d0:80:29:0b:d5:15:02:0b:da:e6:96:d0:e3: 62:be:01:72:37:6d:22:76:9f:b5:b9:1a:29:94:88: 1d:af:b9:e4:53:34:ab:fd:9d:fb:8c:32:b2:2b:b6: 9c:92:99:be:39:7b:c7:2a:c9:2b:d4:ef:9e:7b:b2: 5a:5c:80:0d:9c:7f:37:35:f5:af:84:48:4d:2e:de: b0:ef:f4:cf:b7:19:f8:7b:60:e4:fb:58:32:14:a8: 8d:43:93:93:d5:1b:c1:71:7c:f4:5b:5c:f3:29:d0: 0a:0f:3b:aa:e8:9a:fd:07:ce:d0:cb:46:45:67:5a: ba:24:45:1a:c8:9a:1e:af:57:f9:ff:66:39:ca:43: 43:99:4a:ed:22:93:3d:bb:0a:35:d7:6e:0c:65:16: b3:1c:21:46:ba:89:6f:e5:e7:bf:0c:55:c1:8d:cb: 5e:91:b1:3c:ae:d8:42:79:43:dd:ce:a4:9c:2f:89: 73:a5:ed:1b:c5:a1:65:35:cb:3d:2d:b0:2e:ed:3f: 00:40:de:6d:ad:5a:d7:32:ff:58:bc:73:d7:c7:ee: b2:d4:1d:bb:5b:3b:ce:98:e5:b9:54:1f:f8:da:67: fa:52:d1:31:22:e2:a3:c7:fe:1a:6a:16:86:fc:5c: 37:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:72:A5:F7:CD:1E:D4:9F:12:94:BF:50:14:70:92:2B:42:0E:53:6A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKNMHDJxfMAEBgFpBCVfDgUALPpZ95UMCkY8HYKfxJ5W/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKNMHDJxfMAEBgFpBCVfDgUALPpZ95UMCkY8HYKfxJ5W/0/3072A5F7CD1ED49F1294BF501470922B420E536A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.232.208.0/22 IPv6: 2804:7d8c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271568 Signature Algorithm: sha256WithRSAEncryption 29:5f:a7:94:92:cc:e5:8c:63:27:f0:b5:75:52:8c:37:64:51: b2:81:cd:c5:8d:bd:95:4a:9d:f3:8b:51:81:f8:87:af:9b:ba: f8:87:b6:2a:2e:e5:97:2d:6a:6b:5b:c0:92:fc:39:03:74:fd: 92:61:a2:85:ac:90:44:ac:9c:17:8b:15:22:18:eb:1c:3a:97: e6:8d:dc:b2:3f:fb:7c:ff:4b:96:7a:08:79:9d:f5:8a:cd:a4: 9a:01:14:41:b9:1f:20:ad:19:e4:7e:7e:fb:af:cd:5c:b7:4a: 05:fa:f9:2f:44:8d:ef:80:16:9c:ba:86:3c:ed:6f:c7:b9:62: d9:ad:f3:8c:7c:3d:1f:34:4c:b2:61:4c:c4:a2:e9:33:67:68: d4:79:02:a0:ef:9f:72:33:a5:0c:69:1a:5b:d1:70:f2:1b:91: a1:3e:69:0f:c6:d0:c4:37:96:2d:a7:7e:f5:da:1d:81:3f:24: ac:76:dd:09:ef:3e:dc:4f:94:c7:cc:59:39:a8:b9:36:3e:59: 81:3d:24:76:0e:00:28:dc:9e:52:0d:ff:b1:a8:1e:f4:0d:32: a5:32:44:6d:cd:b9:21:eb:6f:ee:85:cd:a8:ad:c8:31:56:ea: e4:f4:bc:af:fb:25:d6:68:f3:06:1e:bc:08:e4:67:b5:df:34: e6:2b:76:07 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZTwLO+5BQTbakkonjW7N+dPuDr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMDMyMDQyMTNaFw0yNjEyMDIyMDQ3MTNaMDMxMTAvBgNV BAMTKDMwNzJBNUY3Q0QxRUQ0OUYxMjk0QkY1MDE0NzA5MjJCNDIwRTUzNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Ut3mtQC0l2lxjDbcmGVB0IAp C9UVAgva5pbQ42K+AXI3bSJ2n7W5GimUiB2vueRTNKv9nfuMMrIrtpySmb45e8cq ySvU7557slpcgA2cfzc19a+ESE0u3rDv9M+3Gfh7YOT7WDIUqI1Dk5PVG8FxfPRb XPMp0AoPO6romv0HztDLRkVnWrokRRrImh6vV/n/ZjnKQ0OZSu0ikz27CjXXbgxl FrMcIUa6iW/l578MVcGNy16RsTyu2EJ5Q93OpJwviXOl7RvFoWU1yz0tsC7tPwBA 3m2tWtcy/1i8c9fH7rLUHbtbO86Y5blUH/jaZ/pS0TEi4qPH/hpqFob8XDcLAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwcqX3zR7UnxKU v1AUcJIrQg5TajAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUtO TUhESnhmTUFFQmdGcEJDVmZEZ1VBTFBwWjk1VU1Da1k4SFlLZnhKNVcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FL Tk1IREp4Zk1BRUJnRnBCQ1ZmRGdVQUxQcFo5NVVNQ2tZOEhZS2Z4SjVXLzAvMzA3 MkE1RjdDRDFFRDQ5RjEyOTRCRjUwMTQ3MDkyMkI0MjBFNTM2QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCtejQMA0EAgACMAcDBQAoBH2MMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQk0DANBgkqhkiG9w0BAQsFAAOCAQEAKV+nlJLM5YxjJ/C1 dVKMN2RRsoHNxY29lUqd84tRgfiHr5u6+Ie2Ki7lly1qa1vAkvw5A3T9kmGihayQ RKycF4sVIhjrHDqX5o3csj/7fP9LlnoIeZ31is2kmgEUQbkfIK0Z5H5++6/NXLdK Bfr5L0SN74AWnLqGPO1vx7li2a3zjHw9HzRMsmFMxKLpM2do1HkCoO+fcjOlDGka W9Fw8huRoT5pD8bQxDeWLad+9dodgT8krHbdCe8+3E+Ux8xZOai5Nj5ZgT0kdg4A KNyeUg3/sage9A0ypTJEbc25Ietv7oXNqK3IMVbq5PS8r/sl1mjzBh68CORntd80 5it2Bw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:15 2025 by rpki-client