This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/572C561E62C5EFD228CC467E38D0D738D3613283.cer File: 572C561E62C5EFD228CC467E38D0D738D3613283.cer (raw, json) Hash identifier: gwN3ULXas89n67cwOiwbicA+aZPH0ubMFJMu3NNXq7M= Subject key identifier: 57:2C:56:1E:62:C5:EF:D2:28:CC:46:7E:38:D0:D7:38:D3:61:32:83 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7DAFFF48B565B6B8DB3C3DDDFD9A40B02872B6D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/572C561E62C5EFD228CC467E38D0D738D3613283.mft caRepository: rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Nov 2025 16:43:55 +0000 Certificate not after: Thu 05 Nov 2026 16:48:55 +0000 Subordinate resources: AS: 266152 IP: 45.6.36.0/22 IP: 2804:3b7c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:af:ff:48:b5:65:b6:b8:db:3c:3d:dd:fd:9a:40:b0:28:72:b6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 6 16:43:55 2025 GMT Not After : Nov 5 16:48:55 2026 GMT Subject: CN=572C561E62C5EFD228CC467E38D0D738D3613283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:00:d4:9d:b4:44:e4:a4:3a:78:7c:be:ac:00: c9:2d:ae:1c:d3:06:ff:bb:f2:65:8e:2f:33:18:7d: 7d:e1:84:4a:22:52:5d:bd:de:4f:7b:50:61:de:77: b8:f8:75:33:84:b7:8c:fd:f7:db:a1:11:da:48:fe: 94:81:70:72:a3:3c:d8:d2:81:d2:64:08:c9:38:1f: 49:6a:65:91:52:03:f4:7b:b6:b7:e5:68:c5:c5:db: ce:7a:f0:dd:41:4c:16:dc:e4:2c:0e:3a:00:9e:06: 8c:12:1c:9f:9d:8e:e2:94:25:f7:73:ce:0a:9c:ef: 3a:ea:08:49:bc:24:ff:e5:7e:6f:6c:3f:67:27:42: 81:a1:2b:6f:18:5d:33:7d:e2:81:12:7b:51:e4:0d: c5:9c:b2:e5:1c:fe:d0:59:a6:76:27:59:97:7d:6e: c5:d2:3c:7e:24:1d:f4:5c:16:b2:bf:b1:30:fd:ed: db:19:78:9a:3d:4b:2a:19:ed:6a:14:ed:71:dc:02: 20:68:dc:f9:d9:ba:4e:3d:5f:17:42:ba:e1:82:ae: 7e:06:49:6e:27:04:9e:1f:e9:f7:a9:41:53:b2:cd: 12:3e:06:a8:89:ca:dc:cd:7b:a6:38:3a:d1:ba:47: 43:14:68:25:72:f7:6f:12:0e:d0:71:b9:c6:d1:4c: 01:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:2C:56:1E:62:C5:EF:D2:28:CC:46:7E:38:D0:D7:38:D3:61:32:83 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/572C561E62C5EFD228CC467E38D0D738D3613283.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.36.0/22 IPv6: 2804:3b7c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266152 Signature Algorithm: sha256WithRSAEncryption 8f:bb:cc:52:2a:9f:39:e8:0e:cf:ae:45:9b:10:bd:7f:08:ee: 6b:20:1e:d9:b6:8f:fd:69:dc:b5:34:46:32:33:a3:72:83:44: 01:39:1a:d2:2a:22:5c:fe:de:cb:16:51:70:5d:cb:72:6b:5b: 95:be:b5:f6:5a:0e:79:28:5b:6d:f0:6f:6b:08:af:e4:9e:25: 7d:e0:85:d8:3e:e4:4a:3a:5e:38:41:f0:42:f7:69:7a:e9:79: 9e:ff:bc:9a:66:b3:67:74:16:64:f5:af:af:ec:da:28:1a:aa: 79:65:f4:b1:9b:33:58:6e:77:61:88:a4:c7:03:2d:45:fb:c7: ac:32:c5:a0:63:a8:04:0f:4a:05:e8:d0:30:78:3d:c2:ca:8c: d6:9c:48:e6:d9:b1:07:0b:2d:b8:fd:71:70:d3:a4:9f:13:62: 83:cb:e6:cc:87:61:41:3c:91:b2:1a:3c:fa:da:b7:ff:4c:f0: 46:69:00:90:7f:44:2a:4b:fc:3d:4a:e4:61:6d:e5:d8:cc:1a: cb:a4:1b:62:09:ab:2b:ec:30:3a:06:48:19:04:49:ea:5a:17: 8d:5a:c7:21:cf:76:70:8e:8f:7f:19:99:48:a2:94:71:bc:dc: 6a:a8:7a:c2:0b:a0:8b:58:34:e2:12:a3:be:1e:85:25:a9:a5: 51:1e:31:59 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUfa//SLVltrjbPD3d/ZpAsChyttMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDYxNjQzNTVaFw0yNjExMDUxNjQ4NTVaMDMxMTAvBgNV BAMTKDU3MkM1NjFFNjJDNUVGRDIyOENDNDY3RTM4RDBENzM4RDM2MTMyODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqANSdtETkpDp4fL6sAMktrhzT Bv+78mWOLzMYfX3hhEoiUl293k97UGHed7j4dTOEt4z999uhEdpI/pSBcHKjPNjS gdJkCMk4H0lqZZFSA/R7trflaMXF28568N1BTBbc5CwOOgCeBowSHJ+djuKUJfdz zgqc7zrqCEm8JP/lfm9sP2cnQoGhK28YXTN94oESe1HkDcWcsuUc/tBZpnYnWZd9 bsXSPH4kHfRcFrK/sTD97dsZeJo9SyoZ7WoU7XHcAiBo3PnZuk49XxdCuuGCrn4G SW4nBJ4f6fepQVOyzRI+BqiJytzNe6Y4OtG6R0MUaCVy928SDtBxucbRTAGbAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRXLFYeYsXv0ijM Rn440Nc402EygzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVhD c0htSkc0YXRhTkhYblMzWENYTWhqbnZHTEdBZ1pGaGlRdUd3QlZYRmYvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVhD c0htSkc0YXRhTkhYblMzWENYTWhqbnZHTEdBZ1pGaGlRdUd3QlZYRmYvMC81NzJD NTYxRTYyQzVFRkQyMjhDQzQ2N0UzOEQwRDczOEQzNjEzMjgzLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItBiQwDQQCAAIwBwMFACgEO3wwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBA+oMA0GCSqGSIb3DQEBCwUAA4IBAQCPu8xSKp856A7PrkWb EL1/CO5rIB7Zto/9ady1NEYyM6Nyg0QBORrSKiJc/t7LFlFwXctya1uVvrX2Wg55 KFtt8G9rCK/kniV94IXYPuRKOl44QfBC92l66Xme/7yaZrNndBZk9a+v7NooGqp5 ZfSxmzNYbndhiKTHAy1F+8esMsWgY6gED0oF6NAweD3CyozWnEjm2bEHCy24/XFw 06SfE2KDy+bMh2FBPJGyGjz62rf/TPBGaQCQf0QqS/w9SuRhbeXYzBrLpBtiCasr 7DA6BkgZBEnqWheNWschz3Zwjo9/GZlIopRxvNxqqHrCC6CLWDTiEqO+HoUlqaVR HjFZ -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:10 2025 by rpki-client