This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.cer File: 8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.cer (raw, json) Hash identifier: LpsnKhb0oWsMos2qFCzuutaytITsSQg7aOFlU/Vd4bQ= Subject key identifier: 8F:3C:4A:F1:B9:58:31:7B:34:B3:D4:DC:E8:50:A4:79:E9:46:E6:A4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2D51DD1F15320576D97844DB6E64DCA980AB1B9B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.mft caRepository: rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 10 Nov 2025 11:35:58 +0000 Certificate not after: Mon 09 Nov 2026 11:40:58 +0000 Subordinate resources: AS: 52903 IP: 177.11.168.0/21 IP: 2804:aa8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:51:dd:1f:15:32:05:76:d9:78:44:db:6e:64:dc:a9:80:ab:1b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 10 11:35:58 2025 GMT Not After : Nov 9 11:40:58 2026 GMT Subject: CN=8F3C4AF1B958317B34B3D4DCE850A479E946E6A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:50:47:65:d2:21:38:52:9f:a1:cf:c5:3c:8e: f7:4b:0d:d0:33:8c:18:b6:78:91:16:4b:b7:1f:8a: b5:f9:c8:e1:98:82:4b:07:70:e7:db:6a:c9:76:6d: d6:3f:da:32:63:1c:ee:26:ff:16:f3:f2:c2:be:c9: 42:d2:f3:41:65:6b:94:74:ed:61:12:f7:ed:f1:87: ca:06:41:d1:4b:0d:e3:2b:6b:d8:5f:ca:19:95:90: 78:fb:69:35:9a:18:2e:98:50:74:33:82:bf:b1:b1: ea:8a:d8:74:80:30:19:f2:9e:57:f9:e1:dd:8d:99: 69:59:71:ad:a2:0c:e4:06:53:d7:83:f6:87:cd:36: 39:14:33:2a:47:16:69:90:c4:53:70:fd:4e:85:23: e7:4f:17:29:06:f6:77:86:6f:2d:cf:19:fe:41:03: 8b:91:f1:2e:fe:35:67:df:80:2f:c4:d7:0b:2d:f4: 54:fe:11:38:73:12:cb:4a:03:07:8a:21:11:39:84: 30:96:6b:d0:44:b8:78:1b:6a:bd:b9:48:4a:f7:46: bf:8a:7f:66:98:0f:a3:30:a7:96:e2:c1:0a:00:1a: 14:8d:62:d9:90:8b:a0:0e:2e:65:cd:c3:5a:4a:5f: 86:02:7b:15:83:90:99:bb:b0:dd:8f:2a:37:a4:54: 42:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:3C:4A:F1:B9:58:31:7B:34:B3:D4:DC:E8:50:A4:79:E9:46:E6:A4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.11.168.0/21 IPv6: 2804:aa8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52903 Signature Algorithm: sha256WithRSAEncryption 2b:9e:a9:57:0b:a8:6b:67:62:45:8e:c2:7d:98:c1:96:0a:07: 1f:20:f9:b9:ae:6d:de:be:98:3e:29:b5:0d:bf:21:f2:c8:8c: 78:b8:e4:b3:8e:d1:0b:3a:46:b5:7f:6b:57:71:79:a3:c8:6a: 7f:35:44:5a:58:b2:98:73:91:4d:e6:a1:1f:ed:53:28:98:0e: 97:5c:5b:cd:d8:53:00:a3:9a:ff:76:72:18:39:f8:66:29:f9: b4:7f:4b:8c:5f:b7:62:46:55:ae:cb:6b:9b:bf:79:9d:4b:7a: a7:5d:76:28:8d:30:9f:66:bf:c4:c8:bc:7f:40:30:0c:f7:f5: 3e:b2:49:c9:a8:16:96:88:50:cf:84:c9:d6:ee:43:9b:95:f7: 2d:ed:4a:6c:4e:32:39:2c:34:bc:d7:af:04:0a:2d:10:b8:62: 36:9e:62:4c:89:2d:fb:56:86:25:39:e2:36:51:a0:99:04:56: 9a:95:e7:52:f8:9a:c5:6b:e7:61:18:6f:a6:04:cd:28:4f:23: 32:1c:14:22:ab:8c:96:f2:10:ab:97:88:44:6a:80:4a:38:d6: b2:85:a0:bb:83:8f:c2:67:54:c2:8f:43:cc:f0:4c:66:32:a2: 74:87:13:15:f0:4a:a1:a7:bb:ce:82:07:de:34:45:b4:55:1c: 71:b9:0f:81 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIULVHdHxUyBXbZeETbbmTcqYCrG5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMTAxMTM1NThaFw0yNjExMDkxMTQwNThaMDMxMTAvBgNV BAMTKDhGM0M0QUYxQjk1ODMxN0IzNEIzRDREQ0U4NTBBNDc5RTk0NkU2QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmUEdl0iE4Up+hz8U8jvdLDdAz jBi2eJEWS7cfirX5yOGYgksHcOfbasl2bdY/2jJjHO4m/xbz8sK+yULS80Fla5R0 7WES9+3xh8oGQdFLDeMra9hfyhmVkHj7aTWaGC6YUHQzgr+xseqK2HSAMBnynlf5 4d2NmWlZca2iDOQGU9eD9ofNNjkUMypHFmmQxFNw/U6FI+dPFykG9neGby3PGf5B A4uR8S7+NWffgC/E1wst9FT+EThzEstKAweKIRE5hDCWa9BEuHgbar25SEr3Rr+K f2aYD6Mwp5biwQoAGhSNYtmQi6AOLmXNw1pKX4YCexWDkJm7sN2PKjekVEK7AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPPErxuVgxezSz 1NzoUKR56UbmpDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEE1 ZDk3cG9zWEwyOUNidVN0dlZ2M1hBQ2ZSMmM3clhiZERUQ1hpQ0VScVgvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEE1 ZDk3cG9zWEwyOUNidVN0dlZ2M1hBQ2ZSMmM3clhiZERUQ1hpQ0VScVgvMC84RjND NEFGMUI5NTgzMTdCMzRCM0Q0RENFODUwQTQ3OUU5NDZFNkE0Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAOxC6gwDQQCAAIwBwMFACgECqgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAM6nMA0GCSqGSIb3DQEBCwUAA4IBAQArnqlXC6hrZ2JFjsJ9 mMGWCgcfIPm5rm3evpg+KbUNvyHyyIx4uOSzjtELOka1f2tXcXmjyGp/NURaWLKY c5FN5qEf7VMomA6XXFvN2FMAo5r/dnIYOfhmKfm0f0uMX7diRlWuy2ubv3mdS3qn XXYojTCfZr/EyLx/QDAM9/U+sknJqBaWiFDPhMnW7kOblfct7UpsTjI5LDS8168E Ci0QuGI2nmJMiS37VoYlOeI2UaCZBFaaledS+JrFa+dhGG+mBM0oTyMyHBQiq4yW 8hCrl4hEaoBKONayhaC7g4/CZ1TCj0PM8ExmMqJ0hxMV8Eqhp7vOggfeNEW0VRxx uQ+B -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:54 2025 by rpki-client