This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.cer File: F59F0917DC2784889616CA6E5F885D25D0E0D1E5.cer (raw, json) Hash identifier: sAgFOuPvBN1TveY6G0xBjK+8qpmjVMAxHqFOp3VIAZU= Subject key identifier: F5:9F:09:17:DC:27:84:88:96:16:CA:6E:5F:88:5D:25:D0:E0:D1:E5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6C37BFFE3BDDD8A81C1427F383066033622C876D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.mft caRepository: rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 18 Nov 2025 18:20:33 +0000 Certificate not after: Tue 17 Nov 2026 18:25:33 +0000 Subordinate resources: AS: 28233 IP: 186.194.32.0/20 IP: 189.127.48.0/20 IP: 2804:2e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:37:bf:fe:3b:dd:d8:a8:1c:14:27:f3:83:06:60:33:62:2c:87:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 18 18:20:33 2025 GMT Not After : Nov 17 18:25:33 2026 GMT Subject: CN=F59F0917DC2784889616CA6E5F885D25D0E0D1E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:01:83:a3:f4:3e:7f:86:e8:02:ed:72:62:32: 43:85:52:cf:5c:e7:94:16:af:2e:46:4d:66:80:23: 09:87:7b:ca:d9:fb:2a:a8:03:5d:2c:d6:7a:5b:1f: 04:de:fb:ed:93:c1:2d:60:b7:ed:98:8e:be:2f:8c: cb:a8:1a:06:d1:89:d0:26:b8:94:3b:e2:6f:72:df: 7d:8f:d1:f8:1f:16:04:a9:d2:29:8a:92:c6:c4:af: 5a:74:b7:86:70:00:72:90:db:ab:d5:3b:e1:1b:f7: 15:e3:c6:7f:cd:08:b1:2e:9b:15:d5:d6:06:79:11: 9d:bd:3e:73:f5:71:d1:e8:05:8c:b2:7f:6e:79:41: bd:26:52:ee:0d:fa:e4:51:c7:31:60:ba:38:1e:b4: 86:9f:aa:b6:50:88:42:08:2e:e8:bd:01:a5:9f:a6: 4b:35:cf:72:f6:b7:24:97:a4:a2:c6:a5:99:c8:84: 35:93:fa:a3:17:11:3b:c5:21:4d:45:ef:64:24:c0: e9:64:ec:9a:8b:62:03:9a:4c:4c:dc:21:ac:53:22: ba:75:6e:87:73:0a:31:df:23:f5:b3:47:03:46:fe: 81:b4:f9:70:29:dd:60:74:77:fe:23:1b:3d:b7:52: 3b:56:db:9c:4f:e5:47:3b:ac:a0:c1:7e:6d:f9:10: bd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:9F:09:17:DC:27:84:88:96:16:CA:6E:5F:88:5D:25:D0:E0:D1:E5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.194.32.0/20 189.127.48.0/20 IPv6: 2804:2e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28233 Signature Algorithm: sha256WithRSAEncryption ca:a9:24:85:db:af:5c:c1:32:56:98:b1:2b:46:34:32:1f:5e: de:65:45:06:d9:94:21:50:df:61:52:47:bc:0c:65:24:47:5d: 2c:f5:57:c0:63:6b:5e:df:63:0d:9a:80:69:07:6d:91:d4:bd: 58:d7:c3:73:95:38:b9:0c:3a:7f:47:9a:de:3e:53:2d:10:67: ab:61:f7:5c:96:22:87:f6:dc:5c:9f:bf:c2:33:c8:00:b1:f0: df:50:7c:37:e2:94:2c:d9:f2:65:aa:40:d2:26:24:d6:52:7a: 34:5e:7f:0f:92:19:a5:a7:5f:5d:0e:fc:9a:d3:88:a6:eb:69: 14:3e:c8:64:08:ba:3d:05:0c:66:e6:38:29:5f:b2:44:b7:74: 9a:ca:fa:8b:f6:e1:c0:3c:cb:d0:b6:27:a2:30:2d:46:d7:e7: 3a:5d:d0:5f:92:65:37:bc:fe:62:3d:d4:94:59:50:60:92:bf: 0e:cf:b7:ef:69:c7:47:4c:8a:5e:26:80:7b:c4:91:90:bd:ee: a6:b1:ec:ef:5a:e8:1c:85:df:c5:39:4c:1c:6e:ce:e6:43:4e: 83:a4:60:52:55:52:cc:45:7b:b8:3a:bd:44:69:2e:1b:ef:91: 96:fc:2a:b7:e1:1c:5b:b2:c9:64:88:02:49:22:6e:26:22:db: 27:9c:4c:6a -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUbDe//jvd2KgcFCfzgwZgM2Ish20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMTgxODIwMzNaFw0yNjExMTcxODI1MzNaMDMxMTAvBgNV BAMTKEY1OUYwOTE3REMyNzg0ODg5NjE2Q0E2RTVGODg1RDI1RDBFMEQxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYAYOj9D5/hugC7XJiMkOFUs9c 55QWry5GTWaAIwmHe8rZ+yqoA10s1npbHwTe++2TwS1gt+2Yjr4vjMuoGgbRidAm uJQ74m9y332P0fgfFgSp0imKksbEr1p0t4ZwAHKQ26vVO+Eb9xXjxn/NCLEumxXV 1gZ5EZ29PnP1cdHoBYyyf255Qb0mUu4N+uRRxzFgujgetIafqrZQiEIILui9AaWf pks1z3L2tySXpKLGpZnIhDWT+qMXETvFIU1F72QkwOlk7JqLYgOaTEzcIaxTIrp1 bodzCjHfI/WzRwNG/oG0+XAp3WB0d/4jGz23UjtW25xP5Uc7rKDBfm35EL1vAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT1nwkX3CeEiJYW ym5fiF0l0ODR5TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0gy eXAzUkpDVDl0R1RHNHhVblRON0JXMlI2ek1tczlkTnlHang1WFhzRnQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNI MnlwM1JKQ1Q5dEdURzR4VW5UTjdCVzJSNnpNbXM5ZE55R2p4NVhYc0Z0LzAvRjU5 RjA5MTdEQzI3ODQ4ODk2MTZDQTZFNUY4ODVEMjVEMEUwRDFFNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEusIgAwQEvX8wMA0EAgACMAcDBQAoBALgMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm5JMA0GCSqGSIb3DQEBCwUAA4IBAQDKqSSF269c wTJWmLErRjQyH17eZUUG2ZQhUN9hUke8DGUkR10s9VfAY2te32MNmoBpB22R1L1Y 18NzlTi5DDp/R5rePlMtEGerYfdcliKH9txcn7/CM8gAsfDfUHw34pQs2fJlqkDS JiTWUno0Xn8Pkhmlp19dDvya04im62kUPshkCLo9BQxm5jgpX7JEt3SayvqL9uHA PMvQtieiMC1G1+c6XdBfkmU3vP5iPdSUWVBgkr8Oz7fvacdHTIpeJoB7xJGQve6m sezvWugchd/FOUwcbs7mQ06DpGBSVVLMRXu4Or1EaS4b75GW/Cq34RxbsslkiAJJ Im4mItsnnExq -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:48 2025 by rpki-client