This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.cer File: 5A1F4CB5F026D65948F99DC818591DC9E96E24F6.cer (raw, json) Hash identifier: Tb0eDNNJ5Bbd9sYZHy7LssStZSFgsfR+BQIJEu3zXig= Subject key identifier: 5A:1F:4C:B5:F0:26:D6:59:48:F9:9D:C8:18:59:1D:C9:E9:6E:24:F6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 259E976633F0F9DEE53FD9573ACE0546D744B1D4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.mft caRepository: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 22 Dec 2025 11:58:06 +0000 Certificate not after: Mon 21 Dec 2026 12:03:06 +0000 Subordinate resources: AS: 28182 IP: 170.231.128.0/21 IP: 189.89.0.0/20 IP: 2001:1294::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 13:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9e:97:66:33:f0:f9:de:e5:3f:d9:57:3a:ce:05:46:d7:44:b1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 22 11:58:06 2025 GMT Not After : Dec 21 12:03:06 2026 GMT Subject: CN=5A1F4CB5F026D65948F99DC818591DC9E96E24F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:f0:57:e3:7d:fc:d2:b5:a4:de:d2:d0:7c: 2b:ec:ff:ed:1c:b6:4f:6f:c3:bd:89:02:14:ea:69: ae:8b:06:f9:54:c6:4d:35:54:99:ef:80:47:d2:f8: a5:19:e3:98:8e:80:65:6d:d0:ab:01:f5:70:0a:fe: c7:3c:79:d4:2d:ea:1a:a6:d4:11:36:52:50:5f:92: e6:a4:40:9d:b6:e0:53:94:1c:b1:93:2e:d9:17:0c: 11:3e:aa:af:fb:b7:69:9a:23:89:ff:03:26:ee:17: c1:91:da:63:ca:d1:b7:41:57:37:a6:4b:13:91:69: 21:e6:3b:ee:81:55:9a:32:8e:63:7a:89:fc:df:0a: 11:56:5e:32:95:2a:21:14:0e:b5:f6:c6:b4:2d:6a: 83:f6:c5:02:fc:f6:aa:d2:e8:88:38:28:ea:da:02: 75:dc:db:e5:e6:c2:8c:0e:2f:ff:66:21:9b:78:86: 1e:1b:a9:ee:7d:2c:ae:7f:89:e5:bf:0c:36:7f:e1: 53:e9:2f:e2:b4:a3:76:f0:3c:92:95:57:2f:62:71: f5:2d:4f:23:5a:75:2b:ba:c8:d4:f6:28:fe:9e:3f: c0:8c:c6:c1:8a:ac:78:9d:6e:ec:cd:ff:c8:14:0b: 2b:b2:40:85:40:c1:6c:ce:f6:48:a6:6a:3e:89:c5: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:1F:4C:B5:F0:26:D6:59:48:F9:9D:C8:18:59:1D:C9:E9:6E:24:F6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/5A1F4CB5F026D65948F99DC818591DC9E96E24F6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.231.128.0/21 189.89.0.0/20 IPv6: 2001:1294::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28182 Signature Algorithm: sha256WithRSAEncryption 44:0d:3c:c5:8c:a3:11:3b:89:78:4a:2a:f7:75:48:4c:f5:cb: ae:67:99:48:95:ec:28:5d:fc:4c:af:d4:cd:33:5b:c6:36:f4: c7:4d:c0:29:4e:7e:ce:fe:78:d3:70:16:e8:40:76:4d:a8:71: af:a6:b5:bc:c7:88:95:85:9e:54:b9:5d:4c:ad:28:12:f4:0e: b9:93:c5:21:b8:8c:56:49:b9:fa:41:2e:d0:d2:bc:7f:1a:94: 38:f5:41:6a:3c:5f:3b:8e:9f:89:cf:ee:5d:87:47:80:e0:bd: 23:d3:a5:be:83:5c:96:39:82:cb:50:15:78:65:09:0a:d2:de: 7f:de:36:96:3b:e4:15:57:13:1e:fd:bf:bf:5c:d0:e7:c4:02: 97:6e:50:10:be:27:b3:78:95:e0:0f:d3:bb:90:5f:e2:fd:b7: a6:3b:ea:2c:33:b3:4f:8a:10:f5:bd:86:1c:16:6a:12:4b:d9: cc:29:11:43:30:a8:13:55:fd:d3:28:03:2c:e4:a7:c7:eb:59: f4:bc:85:4d:bf:03:9b:22:c4:6c:7f:ab:7d:33:95:b8:3f:a1: 0a:37:4d:c3:cb:c5:72:d1:fc:b4:fc:4f:c0:c3:35:27:7c:2c: 81:16:6c:3d:67:2a:ed:db:07:ec:9b:95:b3:79:e1:58:94:cf: 02:35:53:79 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUJZ6XZjPw+d7lP9lXOs4FRtdEsdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMjIxMTU4MDZaFw0yNjEyMjExMjAzMDZaMDMxMTAvBgNV BAMTKDVBMUY0Q0I1RjAyNkQ2NTk0OEY5OURDODE4NTkxREM5RTk2RTI0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jPBX43380rWk3tLQfCvs/+0c tk9vw72JAhTqaa6LBvlUxk01VJnvgEfS+KUZ45iOgGVt0KsB9XAK/sc8edQt6hqm 1BE2UlBfkuakQJ224FOUHLGTLtkXDBE+qq/7t2maI4n/AybuF8GR2mPK0bdBVzem SxORaSHmO+6BVZoyjmN6ifzfChFWXjKVKiEUDrX2xrQtaoP2xQL89qrS6Ig4KOra AnXc2+XmwowOL/9mIZt4hh4bqe59LK5/ieW/DDZ/4VPpL+K0o3bwPJKVVy9icfUt TyNadSu6yNT2KP6eP8CMxsGKrHidbuzN/8gUCyuyQIVAwWzO9kimaj6JxYwNAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaH0y18CbWWUj5 ncgYWR3J6W4k9jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Vq ejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJwNnovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d1 ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAvNUEx RjRDQjVGMDI2RDY1OTQ4Rjk5REM4MTg1OTFEQzlFOTZFMjRGNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDqueAAwQEvVkAMA0EAgACMAcDBQAgARKUMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm4WMA0GCSqGSIb3DQEBCwUAA4IBAQBEDTzFjKMR O4l4Sir3dUhM9cuuZ5lIlewoXfxMr9TNM1vGNvTHTcApTn7O/njTcBboQHZNqHGv prW8x4iVhZ5UuV1MrSgS9A65k8UhuIxWSbn6QS7Q0rx/GpQ49UFqPF87jp+Jz+5d h0eA4L0j06W+g1yWOYLLUBV4ZQkK0t5/3jaWO+QVVxMe/b+/XNDnxAKXblAQviez eJXgD9O7kF/i/bemO+osM7NPihD1vYYcFmoSS9nMKRFDMKgTVf3TKAMs5KfH61n0 vIVNvwObIsRsf6t9M5W4P6EKN03Dy8Vy0fy0/E/AwzUnfCyBFmw9Zyrt2wfsm5Wz eeFYlM8CNVN5 -----END CERTIFICATE-----Generated at Wed Dec 24 12:29:15 2025 by rpki-client