This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.cer
File: E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.cer (raw, json)
Hash identifier: rcWtngXugUaB+jskNa0po1u6vbfjYZCQTTUvyYZgmcA=
Subject key identifier: E2:5C:8B:AC:5F:3F:0E:1B:15:85:38:E0:C8:8D:15:00:37:FB:D4:3A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 22AB9CE1ECF13117E19AEF8AFCAFE26A95B0F3F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.mft
caRepository: rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 07 Jan 2026 18:32:21 +0000
Certificate not after: Wed 06 Jan 2027 18:37:21 +0000
Subordinate resources: AS: 61653
IP: 131.100.224.0/22
IP: 2804:1c64::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 03:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ab:9c:e1:ec:f1:31:17:e1:9a:ef:8a:fc:af:e2:6a:95:b0:f3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 7 18:32:21 2026 GMT
Not After : Jan 6 18:37:21 2027 GMT
Subject: CN=E25C8BAC5F3F0E1B158538E0C88D150037FBD43A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:54:b3:9d:c6:de:93:81:06:99:3f:bd:2f:
64:66:a4:1a:96:4e:09:17:98:20:32:90:59:39:d8:
d7:09:d8:cd:a3:35:a0:28:90:83:3c:8f:48:4b:16:
78:8a:99:e7:9f:61:0c:07:db:ee:aa:4d:6f:18:45:
c9:80:55:f1:e6:7d:61:ff:d0:76:41:46:a2:39:60:
b1:0b:74:20:4e:0b:f1:47:2b:2d:7f:0c:cb:06:33:
27:49:66:9d:7c:9e:43:95:4a:64:fe:bd:b9:dd:e9:
f0:d9:29:f7:b7:74:fc:80:be:7d:92:14:e7:8e:b7:
67:f1:e4:ae:f6:24:ca:a0:21:2a:b4:89:45:5d:3b:
16:ae:bf:3b:5e:e9:92:db:14:3e:e6:50:a0:ef:7e:
74:26:5b:75:58:dc:c0:49:fc:da:cc:fd:03:67:02:
9d:09:93:15:08:7f:35:09:06:80:f9:47:b5:9c:76:
cf:ec:3c:8c:31:fb:7e:ac:9e:2f:87:6c:eb:28:8e:
52:ec:a3:df:d9:10:c8:6b:fb:d2:8a:9d:84:f7:5f:
e6:07:05:45:9b:b8:98:8b:22:00:50:59:f9:13:47:
4a:d6:29:a4:18:0e:bf:5c:a1:90:e4:13:59:01:7e:
4e:81:e1:06:04:c3:05:d3:a8:9e:4e:f3:57:21:ee:
fe:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E2:5C:8B:AC:5F:3F:0E:1B:15:85:38:E0:C8:8D:15:00:37:FB:D4:3A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.224.0/22
IPv6:
2804:1c64::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61653
Signature Algorithm: sha256WithRSAEncryption
2b:a4:57:d0:ef:86:aa:8a:e4:eb:c6:bb:61:3a:7f:03:70:2c:
b7:a8:4e:75:40:a4:82:b5:e8:a3:5c:a5:1e:0e:4c:b5:3f:e3:
45:22:0c:f4:18:e8:cd:af:55:a6:72:0a:73:ee:42:ca:ee:c9:
fa:b6:5d:e1:0b:94:f0:3d:4d:c9:fe:ce:e3:ab:ec:1a:a5:42:
07:a3:4b:89:79:44:9a:06:9b:f4:18:9c:c8:50:43:71:3f:fe:
75:ad:74:fa:9d:69:8b:44:1a:93:46:e3:70:5a:02:90:97:ba:
6f:da:3e:ee:f4:8d:67:be:a3:48:0b:86:b9:c9:44:b6:a4:35:
dc:dc:a7:c6:27:8e:17:be:f5:70:02:08:27:84:e0:e0:cf:15:
dd:7e:e5:f1:f5:eb:bc:96:e1:18:37:59:cb:21:2d:a5:8e:9f:
4c:e0:53:a9:84:77:8f:6f:58:82:4a:71:a0:d9:75:ae:65:17:
80:2f:4d:82:7f:e6:d5:e0:a7:94:90:52:7b:27:eb:2c:a2:9a:
f1:3e:16:de:af:7b:36:bf:98:de:85:e9:3d:ee:fc:07:66:99:
78:c2:90:39:2f:6b:61:f4:9b:c5:e5:d9:11:6b:58:72:5c:ee:
f3:aa:0c:b4:9c:91:0e:87:33:fa:aa:0b:c2:fe:66:fe:e3:eb:
e0:44:9e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:25:57 2026 by rpki-client