This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3163DDA10F752408FB174D8814A0878B2C7DFC3C.cer File: 3163DDA10F752408FB174D8814A0878B2C7DFC3C.cer (raw, json) Hash identifier: HeAqmmzOGoODhpK/abz50nPNan8r2L0k3plyEWdwAqM= Subject key identifier: 31:63:DD:A1:0F:75:24:08:FB:17:4D:88:14:A0:87:8B:2C:7D:FC:3C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 252E41853A0E121E28A2AB2213F3944171DEAFF1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/3163DDA10F752408FB174D8814A0878B2C7DFC3C.mft caRepository: rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 24 Nov 2025 17:32:29 +0000 Certificate not after: Mon 23 Nov 2026 17:37:29 +0000 Subordinate resources: AS: 264470 IP: 131.255.80.0/22 IP: 138.185.152.0/23 IP: 2804:2020::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2e:41:85:3a:0e:12:1e:28:a2:ab:22:13:f3:94:41:71:de:af:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 24 17:32:29 2025 GMT Not After : Nov 23 17:37:29 2026 GMT Subject: CN=3163DDA10F752408FB174D8814A0878B2C7DFC3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:e5:1b:bc:8e:88:2c:04:9d:6d:33:d7:5b: 87:d8:4e:b2:17:7e:f4:62:96:c3:65:5d:a3:52:ac: 7a:62:0d:5e:4a:69:79:78:f5:d2:f1:8d:22:bf:66: e5:4f:25:d0:61:68:24:16:cb:c9:91:a9:e2:cd:0e: 65:bb:52:b6:b7:f1:d3:3c:b9:8a:a6:0a:0b:06:c8: 37:f7:92:f3:34:d6:ed:c8:2a:c0:ea:41:63:ad:37: 9d:67:e8:88:44:cc:70:92:ca:ca:c9:d7:b3:20:af: 54:a9:39:f4:85:bd:a2:e6:6e:99:70:a2:e1:03:ce: 7a:aa:1a:42:20:f4:3f:c1:f6:2c:ed:be:ea:a4:83: e2:16:19:44:ae:f3:be:e6:25:ba:35:08:f7:77:3e: 17:05:89:07:fa:eb:38:36:fe:b2:c1:9c:80:6e:b3: c1:ba:94:62:c0:6b:da:88:2a:ae:09:dd:34:94:e8: d7:72:ce:63:7d:3b:12:00:71:7f:02:a5:c3:b3:61: 26:b5:7a:25:c1:b8:e8:98:21:4c:fc:8a:3e:c2:e8: b4:49:01:52:0d:2e:63:03:a6:30:4f:a8:b0:20:59: 64:9d:95:c8:ea:b1:99:64:d2:c4:df:e2:f9:41:b7: a7:e8:01:2c:6d:6c:04:1c:33:c8:42:3c:a4:92:04: 40:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:63:DD:A1:0F:75:24:08:FB:17:4D:88:14:A0:87:8B:2C:7D:FC:3C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/3163DDA10F752408FB174D8814A0878B2C7DFC3C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.80.0/22 138.185.152.0/23 IPv6: 2804:2020::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264470 Signature Algorithm: sha256WithRSAEncryption 90:5f:aa:04:1c:a9:6d:48:67:80:c3:5c:d9:cd:5f:65:a6:88: 6c:91:8c:2b:00:71:f5:34:c4:04:d5:d2:ee:80:34:0e:21:06: 31:06:02:3a:60:26:51:4d:ff:51:82:a6:a8:86:7b:b5:35:86: 7a:3c:40:ec:b8:d9:7e:c0:56:7b:9d:d6:a7:dc:fc:90:1c:48: 5d:a7:b8:32:57:3e:71:bb:d2:0f:38:cc:c1:6b:71:39:41:8a: c1:c1:2a:6f:c4:eb:87:4b:f3:68:9c:19:e4:65:6a:a7:53:df: 77:84:22:4e:89:16:aa:78:b3:f1:3a:ff:2e:98:c4:94:6a:cb: 90:da:f5:bf:b0:af:c0:40:9b:82:70:b9:eb:40:9b:7b:09:f1: 60:ca:ff:23:7c:84:d1:e1:d8:c4:df:97:5e:f4:ce:96:89:ae: 46:89:4f:27:f1:97:d2:de:c3:f5:07:14:b1:18:e4:92:65:55: df:00:32:ef:4d:06:5e:0f:e8:f2:35:8f:ab:ec:36:f1:61:96: bb:5e:3d:30:71:52:98:f4:79:7f:30:a1:c8:9b:0a:10:4a:96: 21:5d:00:8f:8d:30:b9:ad:ba:8e:ae:42:d0:c1:ae:14:59:ef: 5e:cc:d3:b2:b5:67:98:33:1b:df:09:22:b1:f5:d9:9a:26:1b: 74:69:df:80 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUJS5BhToOEh4ooqsiE/OUQXHer/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMjQxNzMyMjlaFw0yNjExMjMxNzM3MjlaMDMxMTAvBgNV BAMTKDMxNjNEREExMEY3NTI0MDhGQjE3NEQ4ODE0QTA4NzhCMkM3REZDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JeUbvI6ILASdbTPXW4fYTrIX fvRilsNlXaNSrHpiDV5KaXl49dLxjSK/ZuVPJdBhaCQWy8mRqeLNDmW7Ura38dM8 uYqmCgsGyDf3kvM01u3IKsDqQWOtN51n6IhEzHCSysrJ17Mgr1SpOfSFvaLmbplw ouEDznqqGkIg9D/B9iztvuqkg+IWGUSu877mJbo1CPd3PhcFiQf66zg2/rLBnIBu s8G6lGLAa9qIKq4J3TSU6NdyzmN9OxIAcX8CpcOzYSa1eiXBuOiYIUz8ij7C6LRJ AVINLmMDpjBPqLAgWWSdlcjqsZlk0sTf4vlBt6foASxtbAQcM8hCPKSSBEB7AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxY92hD3UkCPsX TYgUoIeLLH38PDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRk51 M2hVenRnamVveUdqR0pSaEFzTXZSSGFlUm5jcW4xRW12OU1UWXE5eGEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZO dTNoVXp0Z2plb3lHakdKUmhBc012UkhhZVJuY3FuMUVtdjlNVFlxOXhhLzAvMzE2 M0REQTEwRjc1MjQwOEZCMTc0RDg4MTRBMDg3OEIyQzdERkMzQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg/9QAwQBirmYMA0EAgACMAcDBQAoBCAgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQJFjANBgkqhkiG9w0BAQsFAAOCAQEAkF+qBByp bUhngMNc2c1fZaaIbJGMKwBx9TTEBNXS7oA0DiEGMQYCOmAmUU3/UYKmqIZ7tTWG ejxA7LjZfsBWe53Wp9z8kBxIXae4Mlc+cbvSDzjMwWtxOUGKwcEqb8Trh0vzaJwZ 5GVqp1Pfd4QiTokWqniz8Tr/LpjElGrLkNr1v7CvwECbgnC560CbewnxYMr/I3yE 0eHYxN+XXvTOlomuRolPJ/GX0t7D9QcUsRjkkmVV3wAy700GXg/o8jWPq+w28WGW u149MHFSmPR5fzChyJsKEEqWIV0Aj40wua26jq5C0MGuFFnvXszTsrVnmDMb3wki sfXZmiYbdGnfgA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:59 2025 by rpki-client