This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer File: B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer (raw, json) Hash identifier: /16DHzEgkIhDIJ4UScesD2jH1f8ddnP1fMDe5B7EDsM= Subject key identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2A2BF1ECF043A339A1D61616008FBBB3E2EC9B63 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft caRepository: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 21 Nov 2025 05:24:14 +0000 Certificate not after: Fri 20 Nov 2026 05:29:14 +0000 Subordinate resources: AS: 265928 IP: 131.196.132.0/22 IP: 187.109.118.0/24 IP: 2804:4004::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 07:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2b:f1:ec:f0:43:a3:39:a1:d6:16:16:00:8f:bb:b3:e2:ec:9b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 21 05:24:14 2025 GMT Not After : Nov 20 05:29:14 2026 GMT Subject: CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:66:b1:f7:bc:d2:8f:32:65:c0:37:d8:57: be:2d:39:d9:2e:7a:29:30:de:6d:d9:44:81:27:73: ea:e4:e6:54:ca:88:d4:af:ff:98:5f:fd:c1:33:d1: 35:7a:80:7f:57:25:38:53:da:4c:65:3e:d4:a1:3f: 8b:46:4c:21:3d:af:5f:b2:58:e7:5d:e1:ee:d4:67: 7e:59:a9:9c:33:53:f4:8c:20:ba:95:32:1d:27:c2: 20:ab:c2:d0:02:ed:f2:ae:df:5d:20:7d:19:e5:17: 2f:33:88:b3:d7:c5:e9:13:c8:78:c6:9d:5f:46:5c: 10:68:45:58:72:76:7d:8f:aa:a1:af:54:4b:25:e8: 57:53:e6:da:91:aa:f5:d2:76:d7:05:12:4a:94:5b: fc:ca:05:f2:d7:42:88:ea:f2:65:23:d6:d8:5c:e7: ec:46:8b:b3:07:1a:f4:24:14:92:f3:c9:7b:8e:ae: 05:91:e7:76:1c:ef:21:b5:61:c9:de:5d:d2:57:66: 08:32:5d:08:69:aa:19:78:61:66:f9:a6:98:76:43: d4:57:03:6f:9b:06:8f:46:64:8c:b6:2c:22:96:ef: 62:db:4b:4b:d5:c5:3b:5b:e8:3b:1c:78:93:46:58: e9:48:d2:41:ea:c1:b0:e8:62:71:13:34:d6:8b:31: f8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.132.0/22 187.109.118.0/24 IPv6: 2804:4004::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265928 Signature Algorithm: sha256WithRSAEncryption 70:d7:05:36:5a:62:71:34:4e:d3:90:d4:7d:79:70:73:5d:e5: 6d:58:8a:59:1f:81:19:9e:49:f6:0f:40:f1:57:ec:9f:51:ee: 63:be:7a:a2:b3:df:2f:92:90:dd:86:86:22:84:cd:52:f9:2f: c8:60:dd:cd:bf:c2:f7:99:ef:09:ef:79:ac:79:d6:e4:25:bb: 15:ea:1e:4e:ba:3b:37:b1:22:8e:8b:8f:82:8b:9a:f7:6b:0b: fe:f5:ba:ec:d9:9c:10:13:f7:f1:93:db:fa:eb:26:23:33:b1: 28:0f:be:86:5d:5b:55:25:a4:df:73:2c:54:85:b2:24:4e:19: 5b:68:6b:75:c0:d7:3c:71:4a:44:88:17:4a:cf:32:8f:75:d1: 70:c6:47:ad:03:59:bc:fc:c7:e2:fc:c6:cd:03:1f:84:b7:9a: 2e:6e:83:b8:67:d4:85:f8:60:d3:da:9b:f6:81:73:8d:e4:21: 5a:aa:29:5f:e8:78:d1:6a:ac:06:b7:01:3d:06:72:b3:01:6c: 1d:83:44:b6:ab:81:fe:68:6d:ec:50:b7:3b:b9:6a:e0:45:38: d3:b5:4b:f0:09:ea:19:e2:48:9b:11:c0:39:28:1e:1e:93:b9: e4:8a:ff:b2:5d:ed:12:d9:9b:2c:0d:80:ec:40:b8:06:92:be: 0a:32:c6:03 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUKivx7PBDozmh1hYWAI+7s+Lsm2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMjEwNTI0MTRaFw0yNjExMjAwNTI5MTRaMDMxMTAvBgNV BAMTKEI4RDU5RjRCNTZCQjU0RkMzMUNEOUJGMUM3RkREREExOUQzQjAzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhWax97zSjzJlwDfYV74tOdku eikw3m3ZRIEnc+rk5lTKiNSv/5hf/cEz0TV6gH9XJThT2kxlPtShP4tGTCE9r1+y WOdd4e7UZ35ZqZwzU/SMILqVMh0nwiCrwtAC7fKu310gfRnlFy8ziLPXxekTyHjG nV9GXBBoRVhydn2PqqGvVEsl6FdT5tqRqvXSdtcFEkqUW/zKBfLXQojq8mUj1thc 5+xGi7MHGvQkFJLzyXuOrgWR53Yc7yG1YcneXdJXZggyXQhpqhl4YWb5pph2Q9RX A2+bBo9GZIy2LCKW72LbS0vVxTtb6DsceJNGWOlI0kHqwbDoYnETNNaLMfgRAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS41Z9LVrtU/DHN m/HH/d2hnTsDaTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkha QkZrWUpSamNIdDhCYUp3aldHOXB3VVRaREs1cEd6NFFKVHFaRlNaSmkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZI WkJGa1lKUmpjSHQ4QmFKd2pXRzlwd1VUWkRLNXBHejRRSlRxWkZTWkppLzAvQjhE NTlGNEI1NkJCNTRGQzMxQ0Q5QkYxQzdGREREQTE5RDNCMDM2OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg8SEAwQAu212MA0EAgACMAcDBQAoBEAEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQOyDANBgkqhkiG9w0BAQsFAAOCAQEAcNcFNlpi cTRO05DUfXlwc13lbViKWR+BGZ5J9g9A8Vfsn1HuY756orPfL5KQ3YaGIoTNUvkv yGDdzb/C95nvCe95rHnW5CW7FeoeTro7N7EijouPgoua92sL/vW67NmcEBP38ZPb +usmIzOxKA++hl1bVSWk33MsVIWyJE4ZW2hrdcDXPHFKRIgXSs8yj3XRcMZHrQNZ vPzH4vzGzQMfhLeaLm6DuGfUhfhg09qb9oFzjeQhWqopX+h40WqsBrcBPQZyswFs HYNEtquB/mht7FC3O7lq4EU407VL8AnqGeJImxHAOSgeHpO55Ir/sl3tEtmbLA2A 7EC4BpK+CjLGAw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:37:22 2025 by rpki-client