This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer File: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer (raw, json) Hash identifier: BAeMXfZp/4GL/S/i050V789uKCz6R+A3ADJVlx9PrCA= Subject key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 02A12FA9E416CF7A9F86B7A2249C58971478C50A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft caRepository: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 18 Dec 2025 08:39:03 +0000 Certificate not after: Thu 17 Dec 2026 08:44:03 +0000 Subordinate resources: AS: 262725 IP: 186.192.0.0/20 IP: 186.235.64.0/20 IP: 2804:3360::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 10:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a1:2f:a9:e4:16:cf:7a:9f:86:b7:a2:24:9c:58:97:14:78:c5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 18 08:39:03 2025 GMT Not After : Dec 17 08:44:03 2026 GMT Subject: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:98:8f:dd:8c:03:b7:4f:50:da:04:b6:c8:32: 58:6b:62:4c:71:36:4b:af:3b:a6:47:75:b0:47:8e: d1:03:8a:b2:5c:26:b0:45:85:a8:78:63:c2:69:16: 7e:d1:a4:d4:71:55:e2:4b:e8:19:be:67:8b:70:97: 99:69:d1:21:76:7b:fa:d6:86:d0:50:82:58:19:89: f2:ee:43:63:e7:a1:48:1b:61:7e:1b:cf:53:70:7f: 6e:a2:d2:5a:82:28:cb:1d:4f:28:69:f3:61:e8:7c: 1b:64:00:0b:ed:42:d3:5e:4e:f1:aa:0d:42:2b:d3: 4c:72:e0:72:0b:75:af:bd:df:e3:33:2b:fc:5a:17: ac:69:b6:20:ae:2f:4d:6c:6e:63:2c:5b:f9:cc:84: 2a:9e:1d:39:f9:71:7f:d9:53:c8:e8:b0:a2:2f:a5: 45:48:58:df:7c:b5:92:c8:35:06:2e:60:c1:0c:b7: d8:d4:82:9b:bb:90:ee:24:91:4c:57:6d:9f:3c:33: 81:26:7a:b6:a9:05:b3:41:1a:c8:55:e6:0c:aa:9e: 1d:6b:2c:50:a1:16:a5:b3:b1:38:b9:95:22:fe:9f: 8a:0b:08:e9:28:d7:d6:0e:f7:2a:a8:c2:4a:c5:ee: 8b:20:d6:f3:5b:1c:cc:1d:ca:69:9c:d0:fa:20:85: 94:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.192.0.0/20 186.235.64.0/20 IPv6: 2804:3360::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262725 Signature Algorithm: sha256WithRSAEncryption 61:c0:c9:4c:93:f4:f0:e0:3b:56:5d:f7:ed:1c:92:fa:b1:e2: ef:8b:9f:80:48:55:ef:7c:f2:e6:a4:3c:ec:d3:26:6d:d4:b8: 82:09:43:0f:e5:3c:61:79:19:0f:e2:ed:0d:83:cf:e9:b1:a6: b3:ec:bd:a7:d2:a0:b5:0f:e9:cf:a6:47:a9:a0:d9:e0:8a:a4: 12:6c:2d:9d:0f:69:3a:6c:80:f3:ab:ce:dc:91:4e:66:6f:2e: d8:da:88:94:51:8e:61:23:be:31:2c:d8:b3:f0:d3:c6:4a:63: cb:43:0c:92:58:c4:bd:b9:c8:49:f1:ca:7f:9d:e4:fb:a7:c6: 7e:e3:be:a8:ce:a1:68:20:03:c7:1e:7d:fa:c4:c8:83:0a:cc: a9:b4:35:dc:5d:44:c3:ce:f1:8a:ec:1c:3c:ea:04:26:cf:91: 3c:3b:1e:00:3e:b0:ac:2f:47:d4:1d:f8:14:ef:e3:87:fd:9a: ba:b9:46:bf:91:cd:f0:5a:a8:14:50:ca:f6:c1:88:ab:cf:19: 9c:17:28:d4:6a:26:a2:f8:0f:2f:1d:c1:0f:d4:cd:59:d9:86: 6c:05:bf:5a:d0:f6:bf:11:b8:89:0b:0e:1e:ac:c6:6d:a2:da: 00:b5:fd:20:34:6b:6e:f3:d0:81:1a:29:c7:25:73:a7:c8:ff: 1a:e1:54:50 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUAqEvqeQWz3qfhreiJJxYlxR4xQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMTgwODM5MDNaFw0yNjEyMTcwODQ0MDNaMDMxMTAvBgNV BAMTKDMzRDk5RDk4QkZEOTkzQ0I3REU0Mjg0Q0QwQjgzNEJEQUExRkI3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnmI/djAO3T1DaBLbIMlhrYkxx NkuvO6ZHdbBHjtEDirJcJrBFhah4Y8JpFn7RpNRxVeJL6Bm+Z4twl5lp0SF2e/rW htBQglgZifLuQ2PnoUgbYX4bz1Nwf26i0lqCKMsdTyhp82HofBtkAAvtQtNeTvGq DUIr00xy4HILda+93+MzK/xaF6xptiCuL01sbmMsW/nMhCqeHTn5cX/ZU8josKIv pUVIWN98tZLINQYuYMEMt9jUgpu7kO4kkUxXbZ88M4EmerapBbNBGshV5gyqnh1r LFChFqWzsTi5lSL+n4oLCOko19YO9yqowkrF7osg1vNbHMwdymmc0PoghZQTAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQz2Z2Yv9mTy33k KEzQuDS9qh+3aDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0tY a2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNOVVIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNL WGthbjFQMXhjN0pOSmp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzAvMzNE OTlEOThCRkQ5OTNDQjdERTQyODRDRDBCODM0QkRBQTFGQjc2OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEusAAAwQEuutAMA0EAgACMAcDBQAoBDNgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQCRTANBgkqhkiG9w0BAQsFAAOCAQEAYcDJTJP0 8OA7Vl337RyS+rHi74ufgEhV73zy5qQ87NMmbdS4gglDD+U8YXkZD+LtDYPP6bGm s+y9p9KgtQ/pz6ZHqaDZ4IqkEmwtnQ9pOmyA86vO3JFOZm8u2NqIlFGOYSO+MSzY s/DTxkpjy0MMkljEvbnISfHKf53k+6fGfuO+qM6haCADxx59+sTIgwrMqbQ13F1E w87xiuwcPOoEJs+RPDseAD6wrC9H1B34FO/jh/2aurlGv5HN8FqoFFDK9sGIq88Z nBco1GomovgPLx3BD9TNWdmGbAW/WtD2vxG4iQsOHqzGbaLaALX9IDRrbvPQgRop xyVzp8j/GuFUUA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:28:22 2025 by rpki-client