This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer File: BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer (raw, json) Hash identifier: P9dkKvrbLi82Jp1K9afdi6bB8VWWFZptW+N3OGsOnKg= Subject key identifier: BE:24:52:7D:25:EB:A8:FE:B9:22:39:6F:01:1C:C1:B1:F4:12:82:DF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3968C1FD39F64284CC830CFAD96376A27BCFB9B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.mft caRepository: rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 18 Nov 2025 07:49:46 +0000 Certificate not after: Tue 17 Nov 2026 07:54:46 +0000 Subordinate resources: AS: 266356 IP: 45.234.136.0/22 IP: 170.239.224.0/22 IP: 187.121.224.0/21 IP: 2804:3690::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 10:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:68:c1:fd:39:f6:42:84:cc:83:0c:fa:d9:63:76:a2:7b:cf:b9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 18 07:49:46 2025 GMT Not After : Nov 17 07:54:46 2026 GMT Subject: CN=BE24527D25EBA8FEB922396F011CC1B1F41282DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e6:45:4f:61:b0:7a:c1:9c:a8:b3:a0:90:8c: 58:9b:3a:8b:ad:82:c9:6d:60:96:44:79:30:f4:29: 5f:14:ac:02:a2:c4:71:b2:0b:f4:d9:f6:99:38:79: df:79:75:da:ca:80:70:8d:6a:12:59:0b:8c:83:fc: 99:88:94:13:78:db:75:9d:e8:e6:bf:ac:fd:19:f8: 08:b0:05:10:84:1a:94:54:9c:bc:97:67:cb:bb:7b: ad:ab:31:72:0e:58:b7:45:36:b5:e0:c1:83:2a:17: ee:cd:65:c1:64:bb:64:95:4b:37:fa:73:07:0c:15: 5d:32:35:a4:49:78:19:d0:58:80:81:d6:1b:a6:a4: 29:18:71:11:d5:f6:aa:37:47:2b:9d:08:80:72:0a: 7c:00:08:e5:4b:c8:18:bf:a1:ef:77:86:13:b7:ea: f0:64:f5:58:55:ca:44:0d:42:8f:ee:ac:75:76:d8: 74:6c:99:a8:1d:60:d6:65:93:3d:ae:a6:6f:a7:68: 5d:f1:33:d5:c2:ce:ab:89:d1:30:2a:6f:26:f3:14: fe:b7:95:d5:e0:ee:f6:fa:90:48:68:d7:27:f9:c3: b7:cd:9e:19:a1:3a:63:1e:32:47:bd:5a:33:9d:7e: 2b:b2:43:f9:d1:15:44:f6:a2:e2:ff:c0:a6:f8:88: 49:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:24:52:7D:25:EB:A8:FE:B9:22:39:6F:01:1C:C1:B1:F4:12:82:DF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.136.0/22 170.239.224.0/22 187.121.224.0/21 IPv6: 2804:3690::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266356 Signature Algorithm: sha256WithRSAEncryption aa:06:5d:25:11:49:14:af:3d:cd:e4:2f:85:bc:1f:6a:8b:c8: 50:23:0c:a1:d6:97:f4:b2:31:73:9d:9f:1d:28:59:b0:7e:19: 09:f0:6a:af:d3:43:4f:15:6d:98:21:dc:8a:9e:cd:13:7a:72: 14:58:00:15:2f:f8:25:0a:57:72:98:0d:0b:75:5a:06:c9:9d: fb:f1:13:aa:97:98:50:3b:e2:48:8e:cf:45:66:cc:4e:e1:e9: 27:ed:5b:a9:47:d1:2d:20:b5:44:49:49:6a:4d:4e:f0:55:9e: ed:b1:b9:95:8b:e5:8c:10:6f:b0:31:e5:aa:5a:e4:d3:6f:b2: 25:52:5b:5e:96:37:c5:22:08:11:1a:f3:d2:22:22:12:4a:6d: 68:83:a8:0b:d5:da:6c:d9:16:3e:a3:9a:94:34:ef:9e:79:b8: d9:67:67:36:f7:b7:f9:65:ec:d2:1a:f2:8b:c6:d9:c9:12:33: 09:4a:50:63:52:af:1d:b8:a7:6d:c8:fb:e7:62:cb:8a:a6:ff: 41:0a:06:f8:a3:f9:1c:40:ce:0b:aa:1f:c9:84:05:3f:91:bd: cf:23:1c:39:2a:e8:e1:7b:5d:af:82:5c:2a:46:b2:ba:e1:ac: f7:6e:52:9f:aa:6a:50:67:e7:a7:1e:cc:ca:b4:82:fb:4d:21: c4:12:b7:f1 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUOWjB/Tn2QoTMgwz62WN2onvPubEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMTgwNzQ5NDZaFw0yNjExMTcwNzU0NDZaMDMxMTAvBgNV BAMTKEJFMjQ1MjdEMjVFQkE4RkVCOTIyMzk2RjAxMUNDMUIxRjQxMjgyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc5kVPYbB6wZyos6CQjFibOout gsltYJZEeTD0KV8UrAKixHGyC/TZ9pk4ed95ddrKgHCNahJZC4yD/JmIlBN423Wd 6Oa/rP0Z+AiwBRCEGpRUnLyXZ8u7e62rMXIOWLdFNrXgwYMqF+7NZcFku2SVSzf6 cwcMFV0yNaRJeBnQWICB1humpCkYcRHV9qo3RyudCIByCnwACOVLyBi/oe93hhO3 6vBk9VhVykQNQo/urHV22HRsmagdYNZlkz2upm+naF3xM9XCzquJ0TAqbybzFP63 ldXg7vb6kEho1yf5w7fNnhmhOmMeMke9WjOdfiuyQ/nRFUT2ouL/wKb4iElZAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+JFJ9Jeuo/rki OW8BHMGx9BKC3zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0ZV SDlmbkhmeXgzeG14eTRLQVU0b0U2Rm5TUzlWbkJGTGl3bXliU2FZTjkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdG VUg5Zm5IZnl4M3hteHk0S0FVNG9FNkZuU1M5Vm5CRkxpd215YlNhWU45LzEvQkUy NDUyN0QyNUVCQThGRUI5MjIzOTZGMDExQ0MxQjFGNDEyODJERi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCLeqIAwQCqu/gAwQDu3ngMA0EAgACMAcDBQAoBDaQ MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQQdDANBgkqhkiG9w0BAQsFAAOCAQEA qgZdJRFJFK89zeQvhbwfaovIUCMModaX9LIxc52fHShZsH4ZCfBqr9NDTxVtmCHc ip7NE3pyFFgAFS/4JQpXcpgNC3VaBsmd+/ETqpeYUDviSI7PRWbMTuHpJ+1bqUfR LSC1RElJak1O8FWe7bG5lYvljBBvsDHlqlrk02+yJVJbXpY3xSIIERrz0iIiEkpt aIOoC9XabNkWPqOalDTvnnm42WdnNve3+WXs0hryi8bZyRIzCUpQY1KvHbinbcj7 52LLiqb/QQoG+KP5HEDOC6ofyYQFP5G9zyMcOSro4Xtdr4JcKkayuuGs925Sn6pq UGfnpx7MyrSC+00hxBK38Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:36 2025 by rpki-client