This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/70EA909324397A558577D3D460D16896E1F7AA80.cer File: 70EA909324397A558577D3D460D16896E1F7AA80.cer (raw, json) Hash identifier: qNPuFjUPnTJi5sKDUk+qhdR5UPdUiX8AtI9URTie/S0= Subject key identifier: 70:EA:90:93:24:39:7A:55:85:77:D3:D4:60:D1:68:96:E1:F7:AA:80 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7191B131F3BB0D4DC511ED3A8792AAC47E616A2B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.mft caRepository: rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 28 Nov 2025 12:49:22 +0000 Certificate not after: Fri 27 Nov 2026 12:54:22 +0000 Subordinate resources: AS: 61660 IP: 131.108.44.0/22 IP: 138.185.100.0/22 IP: 2804:1c88::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 06:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:91:b1:31:f3:bb:0d:4d:c5:11:ed:3a:87:92:aa:c4:7e:61:6a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 28 12:49:22 2025 GMT Not After : Nov 27 12:54:22 2026 GMT Subject: CN=70EA909324397A558577D3D460D16896E1F7AA80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5f:19:65:68:35:05:12:a2:3d:6b:00:c3:9a: a6:3e:9a:dd:e1:3e:3e:a3:4e:78:ca:ac:a0:a8:a5: a9:41:a9:27:07:71:01:93:9e:6e:b4:a0:0e:e2:9e: c1:6e:3c:c7:73:8c:76:f8:ea:a0:d0:4f:79:d6:ef: 32:af:e3:3a:4d:cb:2d:cd:f3:c4:81:9e:32:90:db: 10:a6:81:87:0c:5a:6e:a5:c5:91:52:c6:91:b1:d6: ad:56:5d:92:b6:96:9c:93:24:e7:59:90:63:fb:d1: e5:f2:9c:01:8e:e5:d2:88:04:04:52:16:10:f2:71: be:fe:d4:ed:b3:3d:c0:42:9b:59:02:6d:8e:a1:7b: 3b:be:38:6b:f5:e2:c3:14:d5:48:5a:0c:77:ee:91: 9d:a0:e1:59:2b:b7:99:32:cd:ed:29:4c:f5:60:af: aa:9f:2d:86:9c:29:3d:c5:44:9c:18:86:4a:6d:a4: c1:17:c4:89:a7:5f:82:5f:40:ca:41:a3:eb:27:a2: cb:db:5e:b6:bc:5c:b4:63:e3:97:fe:ef:1f:01:ca: b1:05:c1:33:f9:9e:c1:88:e7:bf:76:b8:4e:48:46: 72:71:05:49:0b:25:49:e7:20:d6:13:76:bd:b8:9a: 6d:4f:95:a8:a7:fb:bc:a7:c5:f9:e1:c2:fc:d4:56: ee:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:EA:90:93:24:39:7A:55:85:77:D3:D4:60:D1:68:96:E1:F7:AA:80 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.44.0/22 138.185.100.0/22 IPv6: 2804:1c88::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61660 Signature Algorithm: sha256WithRSAEncryption 72:22:d9:dc:3c:86:25:f1:79:02:5c:bd:6f:77:e8:42:e1:2a: 50:86:66:f8:56:fa:81:83:c0:0f:ad:17:46:14:ca:72:49:c7: c5:74:d1:53:ed:e1:e1:06:7a:da:b3:1a:79:20:45:59:ba:d5: 9d:d9:f2:8f:55:9e:79:27:f7:69:a2:6e:9e:21:ae:2e:69:c1: fc:84:69:0d:71:0f:05:a1:b2:98:0a:bd:5e:d0:f8:e8:e1:80: 4d:d0:cd:ee:f5:57:6e:a6:d9:9b:fe:79:3e:e9:bb:b9:a7:08: 82:e9:07:0c:37:13:c2:78:2f:e7:ee:b5:bd:b4:f7:6e:b0:0c: 99:0e:13:bd:dd:37:d9:80:70:6a:a3:e0:de:7c:1d:fa:b2:58: bd:63:db:ae:74:76:46:40:15:f6:d3:58:7a:94:e0:fc:07:a6: f0:81:65:75:2c:3c:c4:62:2b:25:5e:4c:60:0b:58:4b:b5:3a: 23:2e:b4:b1:61:88:a1:85:b9:de:fe:d4:b9:7d:95:87:ef:a1: 80:45:9e:72:39:e5:c1:a4:9f:6f:86:fa:e2:14:7b:fd:6f:54: 33:72:2f:e1:5d:0d:5d:0e:ef:93:9a:07:ba:1a:29:0f:82:04: b8:ec:ae:1e:d9:a9:0b:02:81:32:91:49:a6:64:8a:c0:2b:d8: f2:26:d0:01 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUcZGxMfO7DU3FEe06h5KqxH5haiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMjgxMjQ5MjJaFw0yNjExMjcxMjU0MjJaMDMxMTAvBgNV BAMTKDcwRUE5MDkzMjQzOTdBNTU4NTc3RDNENDYwRDE2ODk2RTFGN0FBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfXxllaDUFEqI9awDDmqY+mt3h Pj6jTnjKrKCopalBqScHcQGTnm60oA7insFuPMdzjHb46qDQT3nW7zKv4zpNyy3N 88SBnjKQ2xCmgYcMWm6lxZFSxpGx1q1WXZK2lpyTJOdZkGP70eXynAGO5dKIBARS FhDycb7+1O2zPcBCm1kCbY6hezu+OGv14sMU1UhaDHfukZ2g4Vkrt5kyze0pTPVg r6qfLYacKT3FRJwYhkptpMEXxImnX4JfQMpBo+snosvbXra8XLRj45f+7x8ByrEF wTP5nsGI5792uE5IRnJxBUkLJUnnINYTdr24mm1Plain+7ynxfnhwvzUVu7fAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRw6pCTJDl6VYV3 09Rg0WiW4feqgDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0dX R2JIUW44R3Fma2tGUkpmZENoWGhKUmc0UGFKMzVETEZLd2lrdG9aUm4vMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0dX R2JIUW44R3Fma2tGUkpmZENoWGhKUmc0UGFKMzVETEZLd2lrdG9aUm4vMC83MEVB OTA5MzI0Mzk3QTU1ODU3N0QzRDQ2MEQxNjg5NkUxRjdBQTgwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKDbCwDBAKKuWQwDQQCAAIwBwMFACgEHIgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAPDcMA0GCSqGSIb3DQEBCwUAA4IBAQByItncPIYl 8XkCXL1vd+hC4SpQhmb4VvqBg8APrRdGFMpyScfFdNFT7eHhBnrasxp5IEVZutWd 2fKPVZ55J/dpom6eIa4uacH8hGkNcQ8FobKYCr1e0Pjo4YBN0M3u9Vduptmb/nk+ 6bu5pwiC6QcMNxPCeC/n7rW9tPdusAyZDhO93TfZgHBqo+DefB36sli9Y9uudHZG QBX201h6lOD8B6bwgWV1LDzEYislXkxgC1hLtTojLrSxYYihhbne/tS5fZWH76GA RZ5yOeXBpJ9vhvriFHv9b1Qzci/hXQ1dDu+Tmge6GikPggS47K4e2akLAoEykUmm ZIrAK9jyJtAB -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:28 2025 by rpki-client