This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer File: 9070D2E187CE3F862AB9E78E2A420A02C3525244.cer (raw, json) Hash identifier: v44ZodnnXoOYNbmEHxoRhw9uVfBgWqfFp91UqirQh6Y= Subject key identifier: 90:70:D2:E1:87:CE:3F:86:2A:B9:E7:8E:2A:42:0A:02:C3:52:52:44 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5CB2462B61530ED753DDACC11D7EA229EF9C661B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft caRepository: rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Dec 2025 18:21:35 +0000 Certificate not after: Fri 04 Dec 2026 18:26:35 +0000 Subordinate resources: AS: 61625 IP: 2804:9524::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 06:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b2:46:2b:61:53:0e:d7:53:dd:ac:c1:1d:7e:a2:29:ef:9c:66:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 5 18:21:35 2025 GMT Not After : Dec 4 18:26:35 2026 GMT Subject: CN=9070D2E187CE3F862AB9E78E2A420A02C3525244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:42:83:a6:c7:27:d9:96:d8:3b:d4:60:62: 8a:f2:75:b0:24:5d:14:9e:6a:f9:b5:9d:bc:4a:97: 7f:b2:43:dd:9f:ab:34:8d:8e:c4:a6:b2:83:28:40: 43:90:00:4c:99:ad:70:e2:0c:0c:64:13:17:44:81: c8:42:7a:a9:2a:4b:32:c0:45:e5:11:a6:a9:54:2b: d6:74:39:a4:9f:3f:c7:15:a1:79:eb:9a:99:a8:d2: 22:08:8e:2b:d5:0c:50:5c:1a:91:fa:57:58:24:13: d8:bf:b5:33:2d:8d:fb:0e:2c:28:12:d4:0e:de:83: 48:f3:7d:e2:e8:c3:de:38:90:08:ce:3e:fd:ec:ba: 05:db:15:42:ad:c9:2a:cc:89:9b:ae:a7:6b:88:25: 90:bb:be:0c:87:f3:7c:2d:f9:41:91:68:4a:27:08: 26:c1:20:90:61:88:b9:3c:f2:e5:aa:82:89:b1:5a: f0:95:2b:37:f8:e8:1f:f0:a5:6e:1c:2e:2e:7d:d1: a3:e5:6c:53:9b:7c:c2:ca:90:54:c3:64:9e:69:75: d0:76:14:17:76:4c:a8:08:54:fe:b4:0f:52:55:f3: 12:37:64:47:2f:d4:58:21:74:9f:50:1a:0c:62:31: 03:78:14:0e:62:2b:4d:89:50:fa:fc:da:a2:c8:0c: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:70:D2:E1:87:CE:3F:86:2A:B9:E7:8E:2A:42:0A:02:C3:52:52:44 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9524::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61625 Signature Algorithm: sha256WithRSAEncryption 74:38:9c:e3:cb:56:fc:b8:ce:3a:6c:7b:24:6a:91:95:80:9e: f0:83:a9:a1:b8:fc:11:6b:4d:9f:d2:60:b4:13:0d:01:d7:90: af:43:a6:a2:34:82:40:c4:49:23:ed:1f:65:fe:2f:c0:e0:11: d1:85:69:b9:6f:4c:49:a3:fe:a1:7a:26:ff:9c:af:56:5c:bd: 1f:43:8b:1a:9c:b1:02:a3:a6:d4:46:5b:92:7c:b3:c4:c1:a4: 2f:55:81:fc:08:7b:26:1f:85:f8:11:44:e7:8f:47:4d:4a:bb: f7:52:bc:b3:17:27:7c:c9:f6:ac:b1:81:68:6a:ec:99:51:91: 35:3c:46:47:84:3f:b7:e4:9e:5b:bf:59:d7:19:b1:0d:34:38: 5e:a7:6c:e4:00:cc:10:94:ca:c0:32:e2:6e:02:da:9b:90:58: 4e:1a:a1:52:c2:ff:26:31:97:18:2f:e1:bc:fc:ad:39:82:38: 38:c4:c2:3a:b6:29:8f:75:0e:b2:f2:3d:c2:64:d6:37:bb:06: 0b:74:bd:e1:96:0b:2d:e4:92:ba:9f:9f:b3:dd:24:68:ff:62: 27:07:d4:74:fa:0a:a7:b3:2a:c2:7f:8a:73:b4:2b:74:6a:9a: 35:b9:a7:5c:49:95:f1:6b:7e:4a:aa:c2:43:c2:12:9f:e6:5d: 61:a3:e3:d3 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIUXLJGK2FTDtdT3azBHX6iKe+cZhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMDUxODIxMzVaFw0yNjEyMDQxODI2MzVaMDMxMTAvBgNV BAMTKDkwNzBEMkUxODdDRTNGODYyQUI5RTc4RTJBNDIwQTAyQzM1MjUyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VUKDpscn2ZbYO9RgYorydbAk XRSeavm1nbxKl3+yQ92fqzSNjsSmsoMoQEOQAEyZrXDiDAxkExdEgchCeqkqSzLA ReURpqlUK9Z0OaSfP8cVoXnrmpmo0iIIjivVDFBcGpH6V1gkE9i/tTMtjfsOLCgS 1A7eg0jzfeLow944kAjOPv3sugXbFUKtySrMiZuup2uIJZC7vgyH83wt+UGRaEon CCbBIJBhiLk88uWqgomxWvCVKzf46B/wpW4cLi590aPlbFObfMLKkFTDZJ5pddB2 FBd2TKgIVP60D1JV8xI3ZEcv1FghdJ9QGgxiMQN4FA5iK02JUPr82qLIDMDnAgMB AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSQcNLhh84/hiq5 544qQgoCw1JSRDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3FL WnN0QlAzM0NHdGNCNW5HdHIyblh4UlFlYVdBelZjU3Rob0ZhYjZReS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3FL WnN0QlAzM0NHdGNCNW5HdHIyblh4UlFlYVdBelZjU3Rob0ZhYjZReS8wLzkwNzBE MkUxODdDRTNGODYyQUI5RTc4RTJBNDIwQTAyQzM1MjUyNDQubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgElSQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPC5 MA0GCSqGSIb3DQEBCwUAA4IBAQB0OJzjy1b8uM46bHskapGVgJ7wg6mhuPwRa02f 0mC0Ew0B15CvQ6aiNIJAxEkj7R9l/i/A4BHRhWm5b0xJo/6heib/nK9WXL0fQ4sa nLECo6bURluSfLPEwaQvVYH8CHsmH4X4EUTnj0dNSrv3UryzFyd8yfassYFoauyZ UZE1PEZHhD+35J5bv1nXGbENNDhep2zkAMwQlMrAMuJuAtqbkFhOGqFSwv8mMZcY L+G8/K05gjg4xMI6timPdQ6y8j3CZNY3uwYLdL3hlgst5JK6n5+z3SRo/2InB9R0 +gqnsyrCf4pztCt0apo1uadcSZXxa35KqsJDwhKf5l1ho+PT -----END CERTIFICATE-----Generated at Sat Dec 6 05:51:17 2025 by rpki-client