This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer File: A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer (raw, json) Hash identifier: vF0qV3kGd8rLPUwhONo1fONaJbBQb8zoRbocHx6jJA8= Subject key identifier: A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 071E13E0A2B7E9E60D2F69A1EF86B398229F5692 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.mft caRepository: rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 08 Dec 2025 01:28:36 +0000 Certificate not after: Mon 07 Dec 2026 01:33:36 +0000 Subordinate resources: AS: 28594 IP: 200.218.240.0/20 IP: 2804:5208::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 06:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:1e:13:e0:a2:b7:e9:e6:0d:2f:69:a1:ef:86:b3:98:22:9f:56:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 8 01:28:36 2025 GMT Not After : Dec 7 01:33:36 2026 GMT Subject: CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f1:3b:5c:72:06:fc:74:69:80:25:96:2b:46: 92:0d:f0:db:22:6f:a7:d5:45:8f:c7:34:7e:19:35: 64:e7:18:43:21:f2:c9:0e:9d:52:10:42:c9:88:00: 90:c6:f6:89:8f:39:61:f5:b7:cb:78:86:06:c2:c0: db:1f:00:0e:7a:7c:1d:65:a0:d4:0e:a7:5b:98:a7: 17:b8:d1:c2:ed:89:ab:a5:f4:e9:78:6d:7b:7d:d6: 3d:fb:1e:a9:9a:5a:ba:bd:2e:0d:77:fe:bf:e1:76: cd:84:02:ba:37:04:a7:5a:01:55:48:11:a1:52:1d: d6:9c:80:2d:d8:6f:e0:d9:46:83:ba:e8:cf:82:67: 36:fc:f3:c8:ae:08:b4:03:d2:50:c3:ae:24:00:41: 4c:59:99:2c:f7:d7:f1:4f:d4:5a:6a:2f:8f:46:87: cc:82:ec:f0:0b:4c:a2:79:6a:14:a0:7d:d2:74:e5: c3:71:e6:8f:88:b0:db:68:de:99:8c:cc:9c:62:13: fb:f8:ea:cb:aa:51:63:b3:99:09:79:83:89:07:ab: 42:3a:70:64:62:fb:01:48:6b:95:c0:85:31:b8:a6: 6d:21:eb:47:e5:c5:ce:ad:d4:24:bc:47:20:cd:c1: 04:6d:f5:f3:b8:ba:29:40:f1:7b:6d:14:32:3e:9f: 17:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.218.240.0/20 IPv6: 2804:5208::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28594 Signature Algorithm: sha256WithRSAEncryption 32:bd:ed:3d:cd:65:01:1f:5d:30:1d:6a:42:ba:94:ce:b4:07: 2f:c1:3b:b0:d5:1a:e6:2f:13:0a:a0:6c:e6:b1:c1:99:d4:1f: 04:3d:4a:60:7e:23:1f:53:e5:25:37:79:1b:c6:15:91:71:27: 74:be:c9:fa:5d:16:76:7d:bd:eb:c5:38:77:8f:28:a8:ba:85: 8b:d5:b3:14:40:fe:ee:46:1c:f6:98:40:68:f2:e5:1b:1c:f9: f6:b3:a2:1d:8f:94:70:fd:e8:2c:52:62:d6:95:32:6f:dc:1a: b3:3e:f0:97:50:75:bb:0c:49:e7:ab:ba:53:55:80:2b:40:98: ef:0b:42:d1:91:7b:cb:48:50:0b:a2:ff:22:38:f8:60:89:13: 6e:6b:b7:d1:c0:d0:0d:95:60:75:65:60:8c:8c:57:fa:53:85: 4f:13:49:b9:73:c4:be:39:5f:49:0d:58:ed:7e:da:a3:a6:f1: 49:80:42:0d:d3:db:51:35:4f:a1:ba:96:c5:25:15:23:58:81: c6:d4:15:1e:bf:a8:1e:79:38:8b:b2:24:c4:b6:b2:f7:03:7d: 22:72:a5:51:d1:fb:8d:db:12:d7:91:39:77:e4:c1:f0:5e:a2: 94:5c:d2:34:18:fa:28:dd:1f:bb:70:d4:be:dc:2f:43:fb:dd: e9:7b:f3:a8 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUBx4T4KK36eYNL2mh74azmCKfVpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMDgwMTI4MzZaFw0yNjEyMDcwMTMzMzZaMDMxMTAvBgNV BAMTKEEyOUQyQTZBMDlCODJFMjRGNkVDNkJEQjZGRUMyRUVDRUI1NUNFNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8Ttccgb8dGmAJZYrRpIN8Nsi b6fVRY/HNH4ZNWTnGEMh8skOnVIQQsmIAJDG9omPOWH1t8t4hgbCwNsfAA56fB1l oNQOp1uYpxe40cLtiaul9Ol4bXt91j37HqmaWrq9Lg13/r/hds2EAro3BKdaAVVI EaFSHdacgC3Yb+DZRoO66M+CZzb888iuCLQD0lDDriQAQUxZmSz31/FP1FpqL49G h8yC7PALTKJ5ahSgfdJ05cNx5o+IsNto3pmMzJxiE/v46suqUWOzmQl5g4kHq0I6 cGRi+wFIa5XAhTG4pm0h60flxc6t1CS8RyDNwQRt9fO4uilA8XttFDI+nxd/AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSinSpqCbguJPbs a9tv7C7s61XOXTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTNq ampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5d3ovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUz ampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzAvQTI5 RDJBNkEwOUI4MkUyNEY2RUM2QkRCNkZFQzJFRUNFQjU1Q0U1RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEyNrwMA0EAgACMAcDBQAoBFIIMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm+yMA0GCSqGSIb3DQEBCwUAA4IBAQAyve09zWUBH10wHWpC upTOtAcvwTuw1RrmLxMKoGzmscGZ1B8EPUpgfiMfU+UlN3kbxhWRcSd0vsn6XRZ2 fb3rxTh3jyiouoWL1bMUQP7uRhz2mEBo8uUbHPn2s6Idj5Rw/egsUmLWlTJv3Bqz PvCXUHW7DEnnq7pTVYArQJjvC0LRkXvLSFALov8iOPhgiRNua7fRwNANlWB1ZWCM jFf6U4VPE0m5c8S+OV9JDVjtftqjpvFJgEIN09tRNU+hupbFJRUjWIHG1BUev6ge eTiLsiTEtrL3A30icqVR0fuN2xLXkTl35MHwXqKUXNI0GPoo3R+7cNS+3C9D+93p e/Oo -----END CERTIFICATE-----Generated at Sat Dec 20 06:08:26 2025 by rpki-client