This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer File: 3252E783D98B854BCC439007DE017EB6E4E2FF51.cer (raw, json) Hash identifier: tD9wazlAt0voRsMbyoSdB5lVbyiCU3/hhLYZaOx3Dx4= Subject key identifier: 32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1B7B7C3B4B32B504F999E8A6A046AC6EE47AA1A5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft caRepository: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Dec 2025 14:29:33 +0000 Certificate not after: Thu 03 Dec 2026 14:34:33 +0000 Subordinate resources: AS: 61784 IP: 138.186.184.0/22 IP: 201.55.200.0/22 IP: 2804:1948::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7b:7c:3b:4b:32:b5:04:f9:99:e8:a6:a0:46:ac:6e:e4:7a:a1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 4 14:29:33 2025 GMT Not After : Dec 3 14:34:33 2026 GMT Subject: CN=3252E783D98B854BCC439007DE017EB6E4E2FF51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:0f:87:c5:24:33:8a:95:0a:3f:86:6e:29: 5f:f6:1c:52:c0:c3:8b:a2:80:01:5f:49:58:aa:d2: 49:69:f2:cb:fe:85:58:c7:70:18:cf:63:2b:2e:64: 2c:0d:e9:81:a0:5c:c2:2d:a9:f9:95:d5:f8:72:31: 27:45:39:b5:0e:18:9d:67:6f:33:6f:9e:fe:82:c1: 35:68:d2:db:c6:5d:dd:2f:e8:9f:ed:c4:77:e4:0c: ae:49:79:cc:4e:d8:74:67:98:68:dc:58:eb:2d:36: ea:d2:ca:60:f1:a3:9c:f7:d2:20:c0:ec:8d:63:ab: 35:48:47:04:f0:58:7b:d3:c0:44:72:86:e4:c5:37: 42:d0:e2:f9:b5:03:85:87:7f:21:c2:46:9a:9a:e1: 92:32:1f:68:84:11:1c:b6:5e:b1:b0:78:6b:d6:fa: 6f:7b:80:59:58:e7:1f:ed:e4:6a:36:3a:4e:c7:13: 63:59:88:a2:7f:bd:ec:a4:a4:08:c2:89:9b:17:8c: f7:2f:f5:59:04:a6:0e:c0:c4:b7:f0:92:97:4c:4b: fd:2b:5f:4f:20:38:e7:4b:3b:c9:5d:e0:32:55:d3: d2:0e:a1:b0:b0:c0:37:2e:94:ba:9e:b0:91:c4:fe: b9:cc:c2:4e:4b:56:14:b6:db:cb:67:00:ad:c7:4a: 82:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.184.0/22 201.55.200.0/22 IPv6: 2804:1948::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61784 Signature Algorithm: sha256WithRSAEncryption 31:88:a7:06:53:6a:9b:35:cf:2f:42:7c:69:3c:f6:93:49:bb: 80:0e:d7:a6:14:bc:3d:5a:9d:76:4e:9a:e7:0c:6c:be:08:ab: 72:eb:0d:ae:5d:4c:8d:10:51:e3:b2:a2:cc:8c:98:24:5b:4c: 43:dc:40:c2:8e:f4:68:2c:4f:93:fb:a6:21:dd:9c:52:ff:3c: eb:bf:52:6c:5c:8d:ad:26:12:4d:ac:77:12:4f:c6:28:99:3b: e8:24:da:4b:cf:d5:12:90:08:56:d8:8f:80:fa:ee:15:03:b0: be:f5:af:fc:29:da:43:97:42:d5:0e:cb:9e:a1:64:5d:ae:58: be:ef:b4:5e:ec:8e:6f:f1:04:da:f6:18:7d:8b:b0:92:85:d0: 0e:00:8a:dd:ed:15:10:e4:b0:ae:fa:4f:45:dc:d8:4c:f5:8c: 1c:36:00:19:cc:33:8f:6a:5a:e6:dc:16:11:24:0f:28:8b:39: c3:ab:0f:5d:e7:99:af:ad:e7:f4:0a:63:dd:01:28:cb:c7:d1: d7:3f:76:95:a3:38:56:50:6c:9c:94:ba:17:b5:99:62:5e:dc: 51:8d:06:87:f4:92:c0:6c:b0:1f:e8:58:a4:65:cc:e9:c1:c2: 9c:af:89:77:a9:8e:05:f1:c4:46:01:4e:7f:1d:d3:48:aa:3d: eb:56:5a:06 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUG3t8O0sytQT5meimoEasbuR6oaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMDQxNDI5MzNaFw0yNjEyMDMxNDM0MzNaMDMxMTAvBgNV BAMTKDMyNTJFNzgzRDk4Qjg1NEJDQzQzOTAwN0RFMDE3RUI2RTRFMkZGNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Xw+HxSQzipUKP4ZuKV/2HFLA w4uigAFfSViq0klp8sv+hVjHcBjPYysuZCwN6YGgXMItqfmV1fhyMSdFObUOGJ1n bzNvnv6CwTVo0tvGXd0v6J/txHfkDK5JecxO2HRnmGjcWOstNurSymDxo5z30iDA 7I1jqzVIRwTwWHvTwERyhuTFN0LQ4vm1A4WHfyHCRpqa4ZIyH2iEERy2XrGweGvW +m97gFlY5x/t5Go2Ok7HE2NZiKJ/veykpAjCiZsXjPcv9VkEpg7AxLfwkpdMS/0r X08gOOdLO8ld4DJV09IOobCwwDculLqesJHE/rnMwk5LVhS228tnAK3HSoKHAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQyUueD2YuFS8xD kAfeAX625OL/UTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDRF V1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJUVVIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q0 RVdUWFhHVWlvQnBhUzM4YldVR1AzMXcxcEdoRVZMcURkUmJVYloyVFVSLzAvMzI1 MkU3ODNEOThCODU0QkNDNDM5MDA3REUwMTdFQjZFNEUyRkY1MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCirq4AwQCyTfIMA0EAgACMAcDBQAoBBlIMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDxWDANBgkqhkiG9w0BAQsFAAOCAQEAMYinBlNq mzXPL0J8aTz2k0m7gA7XphS8PVqddk6a5wxsvgircusNrl1MjRBR47KizIyYJFtM Q9xAwo70aCxPk/umId2cUv88679SbFyNrSYSTax3Ek/GKJk76CTaS8/VEpAIVtiP gPruFQOwvvWv/CnaQ5dC1Q7LnqFkXa5Yvu+0XuyOb/EE2vYYfYuwkoXQDgCK3e0V EOSwrvpPRdzYTPWMHDYAGcwzj2pa5twWESQPKIs5w6sPXeeZr63n9Apj3QEoy8fR 1z92laM4VlBsnJS6F7WZYl7cUY0Gh/SSwGywH+hYpGXM6cHCnK+Jd6mOBfHERgFO fx3TSKo961ZaBg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:38:07 2025 by rpki-client