This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BD00E9521BEE85D9D64499CF90A2EBECB5B70F1D.cer File: BD00E9521BEE85D9D64499CF90A2EBECB5B70F1D.cer (raw, json) Hash identifier: Fxw1Hf8z7ZU2JgsEMjGPEecg6vQTeDXlqL/BQIBUAnk= Subject key identifier: BD:00:E9:52:1B:EE:85:D9:D6:44:99:CF:90:A2:EB:EC:B5:B7:0F:1D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1F3D5BD703F1AA73F4DD7BF818162B126F267D0C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/BD00E9521BEE85D9D64499CF90A2EBECB5B70F1D.mft caRepository: rsync://rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 17 Dec 2025 16:48:59 +0000 Certificate not after: Wed 16 Dec 2026 16:53:59 +0000 Subordinate resources: AS: 61731 IP: 131.72.160.0/22 IP: 2804:1b7c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 06:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3d:5b:d7:03:f1:aa:73:f4:dd:7b:f8:18:16:2b:12:6f:26:7d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 17 16:48:59 2025 GMT Not After : Dec 16 16:53:59 2026 GMT Subject: CN=BD00E9521BEE85D9D64499CF90A2EBECB5B70F1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:34:ec:0d:c9:d7:97:38:60:4f:e6:b0:45: 70:16:34:63:0e:a9:7c:c6:dc:dc:a7:ef:c8:99:33: e6:9b:67:bc:3a:7a:79:4b:19:28:57:d2:91:ae:4b: e2:3b:07:fb:14:c0:2e:9b:71:32:ab:dc:d5:98:74: cb:38:c7:2c:47:a5:89:5d:6d:6d:81:6a:a6:dc:fd: 20:c8:cf:0c:22:54:c7:ed:d6:03:d1:26:b3:68:70: 99:5d:fb:66:d0:62:9b:84:7b:08:6b:30:da:37:93: fd:75:1f:95:4a:ef:9e:87:65:23:2b:f8:02:5c:e8: c7:fd:cf:ea:51:05:ae:e1:e7:e9:2e:d1:06:33:73: 88:48:ba:f9:71:aa:c1:b2:9a:f0:51:31:72:84:85: a8:f2:92:a5:63:8e:cb:31:a9:b9:27:5e:04:8c:9a: 46:af:49:62:5d:ca:27:c8:b2:53:46:48:6a:59:a6: 58:b2:12:aa:f1:e1:40:34:f2:8d:10:fa:a0:29:d7: bf:13:ba:66:57:6f:98:bd:ee:1c:18:07:6a:73:0e: 0a:d0:ca:5f:dc:46:8e:5e:b9:b9:33:68:e7:40:5f: ff:99:c9:79:d3:75:ac:58:4a:10:e5:33:ea:80:28: 90:cc:da:be:2b:a5:98:3e:a4:d5:0a:c5:4a:9b:24: 05:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:00:E9:52:1B:EE:85:D9:D6:44:99:CF:90:A2:EB:EC:B5:B7:0F:1D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/BD00E9521BEE85D9D64499CF90A2EBECB5B70F1D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.160.0/22 IPv6: 2804:1b7c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61731 Signature Algorithm: sha256WithRSAEncryption 2b:8b:68:d8:db:e3:e7:f0:fe:95:a0:ee:ce:a9:ba:15:f2:3c: 06:47:20:d1:e5:b3:74:1a:b2:59:14:70:84:b5:cb:12:1f:6a: 6d:73:90:2a:67:2a:ef:99:36:a9:77:8f:17:7c:66:e9:06:71: b5:50:25:e5:2d:95:77:fd:59:1d:7a:08:97:97:42:c0:be:d0: ed:4d:a5:d4:29:0a:a6:bc:18:38:bb:89:aa:22:43:83:ea:d1: fd:b2:cc:52:47:ef:69:e6:de:45:a7:4b:05:f1:2d:16:54:8c: 23:15:c3:cf:9f:53:6e:7c:12:da:47:b4:e0:ff:12:c2:b5:71: 5d:59:82:3c:8b:10:b8:dd:fb:e5:af:a7:94:5b:b5:a9:1a:bd: 6a:92:c5:70:62:12:06:d2:5f:17:7b:40:5f:13:dc:cd:af:09: 88:64:ec:fa:c8:2a:63:84:6b:8a:48:32:dc:05:c8:40:31:7a: 10:0a:f4:f8:50:86:17:63:3a:9a:9d:20:46:7f:1c:c6:6b:d3: ac:b0:d0:f7:80:61:92:c1:7d:00:75:5b:75:df:fc:80:5e:33: ef:e1:69:f9:69:37:b6:83:d2:31:51:a5:3b:73:07:00:aa:ec: 48:2e:da:fb:02:73:49:75:36:25:4d:50:e5:b1:38:f0:25:db: 50:86:76:e4 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUHz1b1wPxqnP03Xv4GBYrEm8mfQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMTcxNjQ4NTlaFw0yNjEyMTYxNjUzNTlaMDMxMTAvBgNV BAMTKEJEMDBFOTUyMUJFRTg1RDlENjQ0OTlDRjkwQTJFQkVDQjVCNzBGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwbzTsDcnXlzhgT+awRXAWNGMO qXzG3Nyn78iZM+abZ7w6enlLGShX0pGuS+I7B/sUwC6bcTKr3NWYdMs4xyxHpYld bW2Baqbc/SDIzwwiVMft1gPRJrNocJld+2bQYpuEewhrMNo3k/11H5VK756HZSMr +AJc6Mf9z+pRBa7h5+ku0QYzc4hIuvlxqsGymvBRMXKEhajykqVjjssxqbknXgSM mkavSWJdyifIslNGSGpZpliyEqrx4UA08o0Q+qAp178TumZXb5i97hwYB2pzDgrQ yl/cRo5eubkzaOdAX/+ZyXnTdaxYShDlM+qAKJDM2r4rpZg+pNUKxUqbJAV5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9AOlSG+6F2dZE mc+QouvstbcPHTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXN0 d2s3Unk4REx1WmJKcWR0emgzS3lzc0IzQW9rUGk3MVozWEpMem9lVTMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlz dHdrN1J5OERMdVpiSnFkdHpoM0t5c3NCM0Fva1BpNzFaM1hKTHpvZVUzLzAvQkQw MEU5NTIxQkVFODVEOUQ2NDQ5OUNGOTBBMkVCRUNCNUI3MEYxRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg0igMA0EAgACMAcDBQAoBBt8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxIzANBgkqhkiG9w0BAQsFAAOCAQEAK4to2Nvj5/D+laDu zqm6FfI8Bkcg0eWzdBqyWRRwhLXLEh9qbXOQKmcq75k2qXePF3xm6QZxtVAl5S2V d/1ZHXoIl5dCwL7Q7U2l1CkKprwYOLuJqiJDg+rR/bLMUkfvaebeRadLBfEtFlSM IxXDz59TbnwS2ke04P8SwrVxXVmCPIsQuN375a+nlFu1qRq9apLFcGISBtJfF3tA XxPcza8JiGTs+sgqY4Rrikgy3AXIQDF6EAr0+FCGF2M6mp0gRn8cxmvTrLDQ94Bh ksF9AHVbdd/8gF4z7+Fp+Wk3toPSMVGlO3MHAKrsSC7a+wJzSXU2JU1Q5bE48CXb UIZ25A== -----END CERTIFICATE-----Generated at Sat Dec 20 06:08:14 2025 by rpki-client