This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer File: CA46B42FB0BBF428F33303D970954360F960AD2B.cer (raw, json) Hash identifier: /oM6F7FTLGZgdM6pjNUK6nH30XdQakcWmyAtFZI5Lvk= Subject key identifier: CA:46:B4:2F:B0:BB:F4:28:F3:33:03:D9:70:95:43:60:F9:60:AD:2B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 53C654B2ABD6A448583095B46C930890D64C6271 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft caRepository: rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Nov 2025 17:39:08 +0000 Certificate not after: Thu 05 Nov 2026 17:44:08 +0000 Subordinate resources: AS: 268701 IP: 45.169.172.0/22 IP: 2804:596c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c6:54:b2:ab:d6:a4:48:58:30:95:b4:6c:93:08:90:d6:4c:62:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 6 17:39:08 2025 GMT Not After : Nov 5 17:44:08 2026 GMT Subject: CN=CA46B42FB0BBF428F33303D970954360F960AD2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:61:0b:45:63:47:6e:3c:5f:6f:b5:cc:09: 46:15:ea:f1:6e:a8:cf:59:f9:10:da:cb:35:b1:61: 76:5a:81:4a:be:c0:d4:25:f9:57:07:f2:fc:ff:9c: 7b:b9:df:7f:2d:0d:63:4e:57:dc:36:44:72:3d:85: 57:78:dc:cc:74:38:2b:ed:69:99:77:4b:31:ac:70: 68:34:59:eb:c0:2d:57:0f:4b:65:f2:85:41:93:3b: 0e:ed:03:d2:32:4c:f0:c8:5e:27:f4:02:20:a5:d2: d8:96:32:cb:04:86:d7:04:b9:b2:b2:ed:1f:33:7a: 73:a2:84:1d:42:91:34:d7:f6:2a:4d:55:1b:a9:aa: a2:b2:fb:b3:f4:d7:7e:1c:9f:61:eb:23:63:26:88: f9:46:b1:4d:30:3c:ef:05:e2:38:04:1c:1f:a1:5b: 64:20:eb:ce:39:39:70:eb:80:8e:9f:60:4e:c9:e2: 64:21:e1:a5:05:87:d6:50:1a:49:fb:ce:53:84:a1: 5b:e7:c8:9c:91:af:c4:81:02:5f:80:05:72:09:d0: 28:8e:7f:a1:1e:f5:95:8c:f6:b5:8b:51:3c:77:15: 18:dd:31:61:29:f1:c0:4c:f3:70:95:41:bd:3f:d2: cc:5b:88:1f:46:2e:48:6c:cb:e5:dc:70:de:3c:77: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:46:B4:2F:B0:BB:F4:28:F3:33:03:D9:70:95:43:60:F9:60:AD:2B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.169.172.0/22 IPv6: 2804:596c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268701 Signature Algorithm: sha256WithRSAEncryption 92:05:f6:43:a2:6d:ba:48:8e:85:f2:fa:c4:d4:61:aa:f6:13: 07:63:85:dc:c9:3c:e8:7e:89:c5:c3:bc:62:0e:eb:8e:93:1e: 18:22:80:78:a3:de:56:24:f8:a8:7e:fc:c6:a9:8a:b3:06:28: ad:57:80:d4:1b:ca:dc:c2:47:20:83:38:bf:04:41:1f:44:fb: db:eb:4b:7b:d7:23:26:73:27:00:cf:31:fa:78:d3:d3:84:22: f2:dc:3b:89:58:ac:ba:c0:47:e8:81:cc:66:3d:19:89:1d:06: c0:a9:0b:4a:42:63:04:c6:9a:11:69:b0:39:8a:7a:f6:f4:a5: 45:f5:f7:0c:2d:70:35:a1:3f:ae:d5:0d:54:5c:7f:26:98:d7: e0:f7:9c:c8:dc:ef:34:35:01:e5:ea:5c:40:55:6d:f1:a6:92: 4d:1d:9c:f7:17:5b:f8:e6:31:b6:95:c0:c9:0e:80:45:65:9a: 92:cd:76:46:37:70:a3:d0:03:e1:14:19:4f:26:0b:a7:ab:78: a2:8c:04:f0:87:73:4b:d5:bd:46:b1:4a:c9:39:c9:77:01:99: 93:44:a4:c0:7b:71:d1:d6:54:36:ca:90:9d:59:d6:a5:99:bb: 86:e5:75:d4:53:b0:f1:49:db:2f:e4:cb:fb:2d:40:04:5d:d9: e0:43:f4:1d -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUU8ZUsqvWpEhYMJW0bJMIkNZMYnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDYxNzM5MDhaFw0yNjExMDUxNzQ0MDhaMDMxMTAvBgNV BAMTKENBNDZCNDJGQjBCQkY0MjhGMzMzMDNEOTcwOTU0MzYwRjk2MEFEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TmELRWNHbjxfb7XMCUYV6vFu qM9Z+RDayzWxYXZagUq+wNQl+VcH8vz/nHu5338tDWNOV9w2RHI9hVd43Mx0OCvt aZl3SzGscGg0WevALVcPS2XyhUGTOw7tA9IyTPDIXif0AiCl0tiWMssEhtcEubKy 7R8zenOihB1CkTTX9ipNVRupqqKy+7P0134cn2HrI2MmiPlGsU0wPO8F4jgEHB+h W2Qg6845OXDrgI6fYE7J4mQh4aUFh9ZQGkn7zlOEoVvnyJyRr8SBAl+ABXIJ0CiO f6Ee9ZWM9rWLUTx3FRjdMWEp8cBM83CVQb0/0sxbiB9GLkhsy+XccN48d9QzAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKRrQvsLv0KPMz A9lwlUNg+WCtKzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHB2 YTR0UXpIMzZiTFFtYXVzYmd2dk1vVm5rS1FHc2R0QlB4dVBnVWFkR0YvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHB2 YTR0UXpIMzZiTFFtYXVzYmd2dk1vVm5rS1FHc2R0QlB4dVBnVWFkR0YvMC9DQTQ2 QjQyRkIwQkJGNDI4RjMzMzAzRDk3MDk1NDM2MEY5NjBBRDJCLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItqawwDQQCAAIwBwMFACgEWWwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBmdMA0GCSqGSIb3DQEBCwUAA4IBAQCSBfZDom26SI6F8vrE 1GGq9hMHY4XcyTzofonFw7xiDuuOkx4YIoB4o95WJPiofvzGqYqzBiitV4DUG8rc wkcggzi/BEEfRPvb60t71yMmcycAzzH6eNPThCLy3DuJWKy6wEfogcxmPRmJHQbA qQtKQmMExpoRabA5inr29KVF9fcMLXA1oT+u1Q1UXH8mmNfg95zI3O80NQHl6lxA VW3xppJNHZz3F1v45jG2lcDJDoBFZZqSzXZGN3Cj0APhFBlPJgunq3iijATwh3NL 1b1GsUrJOcl3AZmTRKTAe3HR1lQ2ypCdWdalmbuG5XXUU7DxSdsv5Mv7LUAEXdng Q/Qd -----END CERTIFICATE-----Generated at Sat Dec 6 06:37:17 2025 by rpki-client