This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.cer File: 35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.cer (raw, json) Hash identifier: M/mocuB0iZGjzBvAlDCKvJE/VXYcrxNWeN8xoisuTag= Subject key identifier: 35:D4:CF:6A:90:41:F5:3C:30:68:E2:1E:AE:DA:C0:AC:9C:48:C7:30 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 23A5FE1E73CED39C1F3FD268D1756DDBE9418E3D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.mft caRepository: rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Nov 2025 18:35:02 +0000 Certificate not after: Thu 05 Nov 2026 18:40:02 +0000 Subordinate resources: AS: 263879 IP: 138.204.76.0/22 IP: 2804:2724::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a5:fe:1e:73:ce:d3:9c:1f:3f:d2:68:d1:75:6d:db:e9:41:8e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 6 18:35:02 2025 GMT Not After : Nov 5 18:40:02 2026 GMT Subject: CN=35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:15:7c:e9:e2:4b:f2:48:f9:64:5b:4f:87: f1:9e:8a:98:24:15:bd:e4:d6:58:b8:67:ff:b5:f5: 9b:b4:55:ac:3a:cf:ad:03:48:c9:12:64:c5:55:cc: b3:52:bd:bc:01:d3:9f:3e:8a:9b:51:cf:c4:7f:29: 90:20:f3:6e:6d:1c:44:46:e9:1d:7a:f3:32:91:5e: 20:2a:f5:34:5e:dc:ef:59:d3:3f:ab:18:65:c6:09: 22:d5:2d:80:ea:93:8e:a7:98:5e:cc:a6:03:0e:cb: 81:7e:d2:9a:1c:1e:ca:8a:f2:6c:f5:b9:43:75:fc: 87:b7:b8:a1:e4:b3:85:f9:3d:5c:91:54:73:88:61: ef:72:e3:c8:51:91:76:a6:4b:25:7b:60:18:8b:52: df:d5:2a:99:9d:3c:16:6b:a2:02:be:20:ce:09:09: 0a:12:8c:69:64:70:5e:b8:2e:40:ed:78:8b:9d:3f: 5c:a9:d0:0e:bb:68:96:91:4d:8f:5c:8c:1f:a9:be: 96:0d:5a:bd:9b:dc:e5:03:2e:73:be:e1:bf:ce:4f: 4f:29:a1:10:05:53:51:89:d6:2b:f1:0a:2b:1b:de: 8d:8d:7a:d7:e5:2c:f1:61:4c:2b:7e:d5:af:ab:f7: e3:0d:91:45:e6:3e:9e:98:d2:38:48:8c:7d:c7:23: 18:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:D4:CF:6A:90:41:F5:3C:30:68:E2:1E:AE:DA:C0:AC:9C:48:C7:30 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/35D4CF6A9041F53C3068E21EAEDAC0AC9C48C730.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.76.0/22 IPv6: 2804:2724::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263879 Signature Algorithm: sha256WithRSAEncryption 4f:b0:14:6f:00:d0:aa:10:8c:40:e9:13:07:5b:a0:5e:7b:4a: 2b:f6:8a:4b:b0:28:4f:21:4e:1a:3f:d2:72:7a:80:a1:6f:9e: da:c3:8d:87:0f:58:ba:09:c4:45:df:52:f5:3d:5f:15:e4:3a: 9d:9d:e9:49:de:77:87:cb:8f:09:68:8c:6b:62:25:8f:16:ce: 2e:cf:8e:b2:b9:30:81:44:bb:1e:de:4e:75:79:3b:b0:13:f5: 6c:db:9a:5b:d6:a0:a5:6b:ac:3c:24:8b:68:92:31:29:2e:38: 55:64:e5:0c:d7:79:53:58:2a:ea:27:95:f2:ab:30:aa:20:4e: 2d:fd:e8:00:37:a0:c5:e8:95:af:00:ca:e0:7d:75:af:0c:31: 95:58:7a:81:4f:10:58:ad:1d:f0:43:88:14:2a:26:f4:5d:cb: d8:aa:2c:50:dd:f5:19:cc:a5:e2:48:e9:d2:5a:47:22:b8:5f: 5a:87:ba:c3:fd:f8:11:89:b9:55:a6:5d:40:a5:6a:dc:4f:aa: c2:dc:5f:a0:c5:10:ad:fd:8a:19:83:ee:73:a9:e0:c9:5f:47: 5c:da:a0:7a:95:e8:d5:13:21:a9:02:a6:9c:7f:b1:dd:ff:5c: 68:94:71:ae:cb:08:ea:96:98:f5:00:7e:e4:8e:8a:a9:7b:37: c6:d5:e2:02 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUI6X+HnPO05wfP9Jo0XVt2+lBjj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDYxODM1MDJaFw0yNjExMDUxODQwMDJaMDMxMTAvBgNV BAMTKDM1RDRDRjZBOTA0MUY1M0MzMDY4RTIxRUFFREFDMEFDOUM0OEM3MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSxV86eJL8kj5ZFtPh/Geipgk Fb3k1li4Z/+19Zu0Vaw6z60DSMkSZMVVzLNSvbwB058+iptRz8R/KZAg825tHERG 6R168zKRXiAq9TRe3O9Z0z+rGGXGCSLVLYDqk46nmF7MpgMOy4F+0pocHsqK8mz1 uUN1/Ie3uKHks4X5PVyRVHOIYe9y48hRkXamSyV7YBiLUt/VKpmdPBZrogK+IM4J CQoSjGlkcF64LkDteIudP1yp0A67aJaRTY9cjB+pvpYNWr2b3OUDLnO+4b/OT08p oRAFU1GJ1ivxCisb3o2NetflLPFhTCt+1a+r9+MNkUXmPp6Y0jhIjH3HIxgpAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ11M9qkEH1PDBo 4h6u2sCsnEjHMDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjR0 TTFHMml2TFVXdnQ2aEVBd0ZRYk5UWjRWaFRGY2ExSGptOGtHd3R5aWMvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjR0 TTFHMml2TFVXdnQ2aEVBd0ZRYk5UWjRWaFRGY2ExSGptOGtHd3R5aWMvMC8zNUQ0 Q0Y2QTkwNDFGNTNDMzA2OEUyMUVBRURBQzBBQzlDNDhDNzMwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKKzEwwDQQCAAIwBwMFACgEJyQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAbHMA0GCSqGSIb3DQEBCwUAA4IBAQBPsBRvANCqEIxA6RMH W6Bee0or9opLsChPIU4aP9JyeoChb57aw42HD1i6CcRF31L1PV8V5DqdnelJ3neH y48JaIxrYiWPFs4uz46yuTCBRLse3k51eTuwE/Vs25pb1qCla6w8JItokjEpLjhV ZOUM13lTWCrqJ5XyqzCqIE4t/egAN6DF6JWvAMrgfXWvDDGVWHqBTxBYrR3wQ4gU Kib0XcvYqixQ3fUZzKXiSOnSWkciuF9ah7rD/fgRiblVpl1ApWrcT6rC3F+gxRCt /YoZg+5zqeDJX0dc2qB6lejVEyGpAqacf7Hd/1xolHGuywjqlpj1AH7kjoqpezfG 1eIC -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:16 2025 by rpki-client