This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer File: D1F5C9A11A2575A29CEC01F3361C418408534072.cer (raw, json) Hash identifier: nk4FKp6ZltrGLsAe2upQwruVnGodIUBvUnP3fciEQlE= Subject key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7147D786CFDB3E19EEDBF0059DD6CC9F4366E41D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft caRepository: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 21 Nov 2025 13:21:19 +0000 Certificate not after: Fri 20 Nov 2026 13:26:19 +0000 Subordinate resources: AS: 22706 IP: 200.152.80.0/20 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:47:d7:86:cf:db:3e:19:ee:db:f0:05:9d:d6:cc:9f:43:66:e4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 21 13:21:19 2025 GMT Not After : Nov 20 13:26:19 2026 GMT Subject: CN=D1F5C9A11A2575A29CEC01F3361C418408534072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:af:5d:c5:29:9e:48:34:ca:1f:20:52:78:5a: 4d:8e:73:7b:17:5f:4b:c6:1e:d8:5e:3d:55:0e:a8: ec:dc:70:27:53:35:e1:58:f3:57:e5:f3:b8:2a:90: de:0e:a4:9b:7d:24:f1:d2:99:be:19:12:e5:17:a0: 2d:9d:d6:e6:ea:a8:e8:4b:c3:73:df:c9:89:e8:0d: 76:68:89:e0:dd:33:14:2a:a9:88:c3:0c:38:f0:aa: 89:ce:c0:6f:11:49:85:8b:ea:26:a8:32:29:aa:18: 42:df:05:ef:05:1c:60:d2:e9:bd:e2:65:6c:e2:c0: 6c:c9:34:e4:65:af:95:a6:c2:85:b8:8d:34:8f:95: bb:23:d7:b5:f5:e2:16:57:9e:5e:eb:3d:ca:cf:0c: dd:8b:d2:df:52:cb:ae:59:7a:13:25:ce:16:7e:6b: ee:f7:31:af:47:05:16:52:21:08:d7:fe:95:1a:b7: 2f:a5:57:97:5d:af:df:e3:36:51:5a:1d:6f:d8:86: c6:8a:9d:85:6b:e9:8d:23:f1:31:55:22:b8:8d:2b: df:0f:56:5e:e8:a3:95:46:b1:0b:9e:7c:6a:b6:23: cd:1b:07:8f:15:dd:d0:b9:46:f5:06:12:7b:5e:37: ca:59:30:21:23:1d:a2:0e:6a:d9:a4:17:92:c2:24: a4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.152.80.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22706 Signature Algorithm: sha256WithRSAEncryption 89:8f:e3:11:cc:69:39:e7:84:d0:70:32:ba:98:ae:b0:77:1a: 72:e7:22:03:d7:7e:3d:ae:ff:ea:df:4f:79:fd:7a:b6:44:b9: 7a:bb:48:13:50:3c:56:7b:9b:ca:fd:bf:3d:b1:0e:53:70:2f: 06:21:d5:6d:ef:9b:fa:c1:2e:fa:68:ed:3d:7c:d3:50:b3:31: b9:c0:64:e8:f7:b4:21:22:58:5c:cd:9b:35:78:c9:a7:c2:f3: 4e:c0:ee:63:b7:59:5d:6e:20:8c:04:d7:a2:e9:eb:f2:38:ec: 50:91:24:2a:2a:3f:53:45:ea:09:fa:7f:a4:47:28:9b:f4:46: 51:d0:1e:32:44:81:0e:72:44:85:42:86:c3:64:56:0a:38:de: 00:da:b1:0b:c3:75:b8:29:8c:24:22:e1:cf:c2:5e:4e:9b:60: c9:4f:61:90:20:48:7e:1b:0a:cf:4e:b2:fd:6c:10:0b:93:3c: b5:b5:fa:46:e4:3c:ca:3b:a2:55:d9:0a:25:dc:ff:83:e9:26: a8:41:32:04:62:84:cd:62:04:96:5f:ae:72:9f:41:f0:36:08: 46:72:c4:9b:96:a6:2b:74:94:b9:8b:cb:56:f6:d5:01:65:1d: e5:77:84:eb:fe:9b:09:15:06:cd:20:9d:c8:1c:46:e9:0d:8c: 10:78:fe:e2 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIUcUfXhs/bPhnu2/AFndbMn0Nm5B0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMjExMzIxMTlaFw0yNjExMjAxMzI2MTlaMDMxMTAvBgNV BAMTKEQxRjVDOUExMUEyNTc1QTI5Q0VDMDFGMzM2MUM0MTg0MDg1MzQwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkr13FKZ5INMofIFJ4Wk2Oc3sX X0vGHthePVUOqOzccCdTNeFY81fl87gqkN4OpJt9JPHSmb4ZEuUXoC2d1ubqqOhL w3PfyYnoDXZoieDdMxQqqYjDDDjwqonOwG8RSYWL6iaoMimqGELfBe8FHGDS6b3i ZWziwGzJNORlr5WmwoW4jTSPlbsj17X14hZXnl7rPcrPDN2L0t9Sy65ZehMlzhZ+ a+73Ma9HBRZSIQjX/pUaty+lV5ddr9/jNlFaHW/YhsaKnYVr6Y0j8TFVIriNK98P Vl7oo5VGsQuefGq2I80bB48V3dC5RvUGEnteN8pZMCEjHaIOatmkF5LCJKQzAgMB AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTR9cmhGiV1opzs AfM2HEGECFNAcjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Ay a3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40bVkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nw Mmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAvRDFG NUM5QTExQTI1NzVBMjlDRUMwMUYzMzYxQzQxODQwODUzNDA3Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQEyJhQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAliy MA0GCSqGSIb3DQEBCwUAA4IBAQCJj+MRzGk554TQcDK6mK6wdxpy5yID1349rv/q 3095/Xq2RLl6u0gTUDxWe5vK/b89sQ5TcC8GIdVt75v6wS76aO09fNNQszG5wGTo 97QhIlhczZs1eMmnwvNOwO5jt1ldbiCMBNei6evyOOxQkSQqKj9TReoJ+n+kRyib 9EZR0B4yRIEOckSFQobDZFYKON4A2rELw3W4KYwkIuHPwl5Om2DJT2GQIEh+GwrP TrL9bBALkzy1tfpG5DzKO6JV2Qol3P+D6SaoQTIEYoTNYgSWX65yn0HwNghGcsSb lqYrdJS5i8tW9tUBZR3ld4Tr/psJFQbNIJ3IHEbpDYwQeP7i -----END CERTIFICATE-----Generated at Sat Dec 6 06:37:06 2025 by rpki-client