This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/703A0CD811A69A5124FD18D0E69AB4829B388433.cer File: 703A0CD811A69A5124FD18D0E69AB4829B388433.cer (raw, json) Hash identifier: pfVZgC+qcg6wQfsQi6vuNZEW6EwKM+iPDplrRQis/rg= Subject key identifier: 70:3A:0C:D8:11:A6:9A:51:24:FD:18:D0:E6:9A:B4:82:9B:38:84:33 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7E3C775316B549E7CEFF73323999B44167ACE57C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/703A0CD811A69A5124FD18D0E69AB4829B388433.mft caRepository: rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 12 Nov 2025 17:06:03 +0000 Certificate not after: Wed 11 Nov 2026 17:11:03 +0000 Subordinate resources: AS: 52557 IP: 177.86.8.0/21 IP: 2804:cd0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 06:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3c:77:53:16:b5:49:e7:ce:ff:73:32:39:99:b4:41:67:ac:e5:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 12 17:06:03 2025 GMT Not After : Nov 11 17:11:03 2026 GMT Subject: CN=703A0CD811A69A5124FD18D0E69AB4829B388433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b3:d6:61:8c:bb:7e:67:9f:fc:01:d9:9f:34: 32:be:07:ce:30:36:6c:93:e3:ad:d7:a7:6e:c6:6a: 11:37:44:2a:55:f5:ec:6a:25:08:3a:d7:f0:fa:7b: 77:df:48:47:b4:83:fe:fd:ca:8b:c4:6f:2b:75:63: fe:62:33:f3:04:42:94:ab:99:88:4d:08:a2:3b:d2: 72:e7:28:f1:c3:cb:a2:6e:47:45:00:b1:69:f8:a8: 48:0b:a6:4a:e0:80:ff:30:85:57:29:ad:2a:1f:90: a5:67:be:bc:8f:87:ee:b7:b9:04:28:98:6e:7e:ca: f4:b2:2c:e1:a0:8e:f9:8a:26:e1:dd:07:fa:0b:b7: 69:14:b0:c7:84:f7:cd:36:47:d1:00:a5:ee:6d:9c: 99:45:8c:9c:ce:0a:1e:6e:b1:a7:0d:01:ed:b2:c3: 07:d1:84:64:d9:33:65:1d:f5:a4:10:74:27:54:13: ca:42:fe:da:5c:ae:13:0b:12:be:af:ff:2a:24:58: c0:95:d0:7d:b4:19:0c:41:a5:07:82:8f:75:e4:1c: 27:9e:a0:65:94:85:eb:62:24:95:34:ea:2a:cb:ac: 27:01:2d:c8:d8:3d:00:37:85:b8:11:ae:32:9b:ea: 7e:7b:10:32:3e:4e:bf:34:5f:70:2c:c3:ba:74:da: 38:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:3A:0C:D8:11:A6:9A:51:24:FD:18:D0:E6:9A:B4:82:9B:38:84:33 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/703A0CD811A69A5124FD18D0E69AB4829B388433.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.86.8.0/21 IPv6: 2804:cd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52557 Signature Algorithm: sha256WithRSAEncryption a8:50:0a:c2:30:5c:c2:26:33:bc:a6:ca:fa:2f:f4:2d:01:2f: d1:6c:7d:e4:7b:4e:65:b1:62:9a:f9:5c:65:fb:99:5c:da:39: 21:a4:1d:46:39:11:51:6f:48:93:c8:0c:39:f4:37:4c:db:93: 8d:e7:19:c5:e5:0e:19:96:d3:39:51:6d:cc:c5:1d:43:77:41: bf:e0:56:23:b8:a1:ad:8b:51:9a:31:df:40:a8:8d:8e:a4:ac: 76:3e:66:c3:25:fe:42:a5:32:db:37:4a:d1:56:2c:7d:53:d5: 85:c8:60:0c:25:88:2e:44:43:41:0f:77:05:fa:a9:0e:9a:69: a3:f0:b8:36:b4:d6:da:dd:47:e5:dc:d0:66:91:0e:9b:0a:1c: bc:66:36:c1:e6:2d:58:ba:1a:79:24:dd:8a:3d:d3:98:2e:f3: b6:84:9b:40:00:aa:b9:bf:57:ae:d5:ec:d9:ad:37:dd:bb:28: 40:1f:b4:1a:d6:ab:bd:3c:6b:04:20:05:04:69:9a:8b:6f:df: 7b:6a:fb:18:ab:10:ce:09:52:6c:a4:0c:0a:4c:62:80:f6:e2: 69:44:e3:b6:da:22:0c:76:25:60:e7:fd:14:40:22:3a:36:eb: 63:93:c7:aa:80:bc:12:45:80:fa:15:54:a1:23:c1:8e:44:5a: f1:55:fa:b4 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfjx3Uxa1SefO/3MyOZm0QWes5XwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMTIxNzA2MDNaFw0yNjExMTExNzExMDNaMDMxMTAvBgNV BAMTKDcwM0EwQ0Q4MTFBNjlBNTEyNEZEMThEMEU2OUFCNDgyOUIzODg0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMs9ZhjLt+Z5/8AdmfNDK+B84w NmyT463Xp27GahE3RCpV9exqJQg61/D6e3ffSEe0g/79yovEbyt1Y/5iM/MEQpSr mYhNCKI70nLnKPHDy6JuR0UAsWn4qEgLpkrggP8whVcprSofkKVnvryPh+63uQQo mG5+yvSyLOGgjvmKJuHdB/oLt2kUsMeE9802R9EApe5tnJlFjJzOCh5usacNAe2y wwfRhGTZM2Ud9aQQdCdUE8pC/tpcrhMLEr6v/yokWMCV0H20GQxBpQeCj3XkHCee oGWUhetiJJU06irLrCcBLcjYPQA3hbgRrjKb6n57EDI+Tr80X3Asw7p02jjVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRwOgzYEaaaUST9 GNDmmrSCmziEMzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTlL NjFzazVTNUE1MUVGZWt6M2JIY05oOWZVZG1EZnhBODlramt6UERXTHEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk5 SzYxc2s1UzVBNTFFRmVrejNiSGNOaDlmVWRtRGZ4QTg5a2prelBEV0xxLzAvNzAz QTBDRDgxMUE2OUE1MTI0RkQxOEQwRTY5QUI0ODI5QjM4ODQzMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDsVYIMA0EAgACMAcDBQAoBAzQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDNTTANBgkqhkiG9w0BAQsFAAOCAQEAqFAKwjBcwiYzvKbK +i/0LQEv0Wx95HtOZbFimvlcZfuZXNo5IaQdRjkRUW9Ik8gMOfQ3TNuTjecZxeUO GZbTOVFtzMUdQ3dBv+BWI7ihrYtRmjHfQKiNjqSsdj5mwyX+QqUy2zdK0VYsfVPV hchgDCWILkRDQQ93BfqpDpppo/C4NrTW2t1H5dzQZpEOmwocvGY2weYtWLoaeSTd ij3TmC7ztoSbQACqub9XrtXs2a033bsoQB+0GtarvTxrBCAFBGmai2/fe2r7GKsQ zglSbKQMCkxigPbiaUTjttoiDHYlYOf9FEAiOjbrY5PHqoC8EkWA+hVUoSPBjkRa 8VX6tA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:05:42 2025 by rpki-client