This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.cer File: 8ADE8116850374B4769C4C4E4353E5E0E9407CD0.cer (raw, json) Hash identifier: Yr+F4okdFFi6u8qkj8UbwNK22+/4vIOKt1FOaUGScrs= Subject key identifier: 8A:DE:81:16:85:03:74:B4:76:9C:4C:4E:43:53:E5:E0:E9:40:7C:D0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0ECC93A25CE569BAD097973F4B48BE0B1E3E6B73 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.mft caRepository: rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Nov 2025 17:59:38 +0000 Certificate not after: Thu 05 Nov 2026 18:04:38 +0000 Subordinate resources: AS: 263480 IP: 191.242.204.0/22 IP: 2804:1280::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cc:93:a2:5c:e5:69:ba:d0:97:97:3f:4b:48:be:0b:1e:3e:6b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 6 17:59:38 2025 GMT Not After : Nov 5 18:04:38 2026 GMT Subject: CN=8ADE8116850374B4769C4C4E4353E5E0E9407CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:fb:7d:bd:a5:32:09:2c:74:45:98:37:33: d1:70:44:eb:7e:97:e0:dd:ef:14:ed:44:3c:3b:21: 3d:f8:45:ef:03:fd:be:48:cf:5c:fc:c8:b9:92:6d: 6b:cc:c7:5e:76:99:07:19:d7:56:fc:2e:e6:5c:5a: 78:85:6f:33:b6:3a:1e:06:ef:d8:3d:d4:d2:1e:47: ec:15:ff:d7:c6:f4:70:3d:f1:d9:17:91:72:b5:d1: fb:cf:7e:d5:af:ed:eb:6e:3d:5b:e3:1c:bd:a5:6c: 50:d1:b9:e9:02:d3:25:a8:e3:24:91:28:c4:b7:e2: 04:27:06:48:e8:1d:c9:49:13:bc:79:b2:bf:93:87: ee:e2:d1:e8:80:0a:80:2b:4f:69:a9:f8:70:9d:17: 29:f0:78:e4:5b:b2:12:3d:53:a2:b9:a4:06:40:ed: 50:37:27:77:7f:0a:3f:44:17:f2:9b:ef:72:a0:db: 44:44:f1:8b:37:bd:7b:f3:2a:75:46:99:f3:61:b0: d2:8e:1d:6d:3b:5d:65:b2:bf:1c:8f:7e:43:aa:d8: 5d:b3:df:68:6d:b2:07:3d:bb:a8:8d:84:fa:5a:00: 3f:84:81:85:4a:2f:ee:ae:87:19:6b:46:ee:90:b8: 7c:bb:00:4f:9e:2a:97:e7:1d:87:0f:af:de:45:d6: ba:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:DE:81:16:85:03:74:B4:76:9C:4C:4E:43:53:E5:E0:E9:40:7C:D0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.242.204.0/22 IPv6: 2804:1280::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263480 Signature Algorithm: sha256WithRSAEncryption 72:28:62:a4:66:53:e8:a2:61:e7:1f:01:57:32:f2:ca:01:e5: 49:92:ca:f2:87:dd:df:a2:3d:a3:47:fb:6b:a0:96:75:ba:ed: f5:5d:41:87:2a:c2:0f:27:45:73:d1:66:b6:9b:fc:fc:ce:14: 8c:0c:4c:dd:92:fd:e9:ee:ec:ed:dd:6d:5c:9a:fb:fb:ad:15: 1c:9e:12:dd:6a:ba:11:c1:b7:47:c1:4d:0d:02:0f:b7:f4:91: b1:89:69:d9:3a:64:3b:e5:20:e4:6c:7a:49:24:36:29:65:59: cd:ab:7c:9d:c6:73:14:b1:13:34:55:c9:80:e8:eb:2f:8e:83: bf:4e:c1:d3:63:bc:9e:9b:89:b5:3c:fa:f0:31:ca:3f:ff:0c: 76:ab:6e:56:79:0c:cc:a2:b9:15:63:c8:e1:1a:92:cc:a3:c5: 72:c3:ee:70:ad:e7:20:ed:3d:94:8a:71:27:28:44:0b:f0:c8: 69:eb:d9:22:57:d6:6b:eb:49:61:46:f9:d4:28:a0:1b:59:7f: 05:19:07:4c:7b:6d:8c:58:2b:a6:19:8e:9e:fc:d3:b1:93:cf: f8:72:f7:ef:ab:d4:fb:03:5c:ca:76:cd:85:c4:41:f7:11:4a: d4:c9:d7:45:12:02:1b:c8:f5:19:2d:18:22:fc:45:21:a8:2c: 5f:b8:a4:df -----BEGIN CERTIFICATE----- MIIGLTCCBRWgAwIBAgIUDsyTolzlabrQl5c/S0i+Cx4+a3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDYxNzU5MzhaFw0yNjExMDUxODA0MzhaMDMxMTAvBgNV BAMTKDhBREU4MTE2ODUwMzc0QjQ3NjlDNEM0RTQzNTNFNUUwRTk0MDdDRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ1/t9vaUyCSx0RZg3M9FwROt+ l+Dd7xTtRDw7IT34Re8D/b5Iz1z8yLmSbWvMx152mQcZ11b8LuZcWniFbzO2Oh4G 79g91NIeR+wV/9fG9HA98dkXkXK10fvPftWv7etuPVvjHL2lbFDRuekC0yWo4ySR KMS34gQnBkjoHclJE7x5sr+Th+7i0eiACoArT2mp+HCdFynweORbshI9U6K5pAZA 7VA3J3d/Cj9EF/Kb73Kg20RE8Ys3vXvzKnVGmfNhsNKOHW07XWWyvxyPfkOq2F2z 32htsgc9u6iNhPpaAD+EgYVKL+6uhxlrRu6QuHy7AE+eKpfnHYcPr95F1roDAgMB AAGjggM3MIIDMzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSK3oEWhQN0tHac TE5DU+Xg6UB80DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT0GCCsGAQUFBwELBIIBLzCCASswXAYI KwYBBQUHMAWGUHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbkhy dnAzOXA0ZVJjRFpwOEZRaGVvbmp6R0FrcWtkcnY0WjNyaVRjRUY2Si8wMIGJBggr BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uSHJ2 cDM5cDRlUmNEWnA4RlFoZW9uanpHQWtxa2RydjRaM3JpVGNFRjZKLzAvOEFERTgx MTY4NTAzNzRCNDc2OUM0QzRFNDM1M0U1RTBFOTQwN0NEMC5tZnQwPwYIKwYBBQUH MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQCv/LMMA0EAgACMAcDBQAoBBKAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwQFODANBgkqhkiG9w0BAQsFAAOCAQEAcihipGZT6KJh5x8BVzLy ygHlSZLK8ofd36I9o0f7a6CWdbrt9V1BhyrCDydFc9Fmtpv8/M4UjAxM3ZL96e7s 7d1tXJr7+60VHJ4S3Wq6EcG3R8FNDQIPt/SRsYlp2TpkO+Ug5Gx6SSQ2KWVZzat8 ncZzFLETNFXJgOjrL46Dv07B02O8npuJtTz68DHKP/8MdqtuVnkMzKK5FWPI4RqS zKPFcsPucK3nIO09lIpxJyhEC/DIaevZIlfWa+tJYUb51CigG1l/BRkHTHttjFgr phmOnvzTsZPP+HL376vU+wNcynbNhcRB9xFK1MnXRRICG8j1GS0YIvxFIagsX7ik 3w== -----END CERTIFICATE-----Generated at Sat Dec 6 06:38:02 2025 by rpki-client