This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer (raw, json) Hash identifier: UDOK/yPaUqk6oMyDszaDYwip0hBRM5A7ojkm4ACLX0w= Subject key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 374A6407B19DBF11D10A17E162457D75590BF3CC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft caRepository: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 21 Dec 2025 18:12:46 +0000 Certificate not after: Sun 20 Dec 2026 18:17:46 +0000 Subordinate resources: AS: 52694 IP: 177.73.36.0/22 IP: 200.6.128.0/22 IP: 2804:c58::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 05:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4a:64:07:b1:9d:bf:11:d1:0a:17:e1:62:45:7d:75:59:0b:f3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 21 18:12:46 2025 GMT Not After : Dec 20 18:17:46 2026 GMT Subject: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:45:bf:2d:ad:9c:19:85:9e:c1:a4:8b:86: 57:a5:2b:3d:55:ae:19:f6:14:bc:c1:f0:aa:a3:24: 7e:f1:56:5b:1c:85:4f:1b:4b:d1:7e:a8:9d:bc:b9: 8d:6b:5c:47:9f:8c:5f:f9:53:2c:2c:0a:04:10:e5: e0:12:8b:8b:d0:97:ca:08:99:c8:51:ac:46:9b:56: 00:24:22:da:0a:8f:82:cb:16:b2:80:49:6e:df:5d: 27:8e:45:32:ad:8a:6a:28:68:50:69:d8:47:b4:7a: 15:53:2e:88:19:b6:87:62:16:5b:ea:56:b1:e5:04: 00:c3:67:bb:9f:79:90:24:04:c3:19:d1:67:69:67: fe:02:65:f9:16:76:e1:54:0c:aa:ac:34:41:5d:67: 27:d0:d7:b6:32:c1:19:94:a1:cb:be:80:4e:b2:9c: 8e:48:7a:37:ec:62:4e:fa:7e:49:fb:07:af:eb:ef: eb:61:ae:2c:07:aa:c2:02:c5:11:f9:6f:93:b1:c1: 2c:2a:4a:54:f6:1e:d4:2e:a8:c1:fb:6c:05:0f:c9: 37:4f:60:1b:0f:e0:58:0d:e1:4a:a2:35:c7:ee:08: 53:cb:3f:a1:88:bd:42:ca:5d:a3:14:e4:04:d9:c9: dd:fb:3c:12:54:86:c4:b2:46:f8:40:e8:1d:ff:5b: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.73.36.0/22 200.6.128.0/22 IPv6: 2804:c58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52694 Signature Algorithm: sha256WithRSAEncryption 56:c3:51:6f:2f:de:4c:93:e5:f1:54:72:f5:c4:9b:a0:fe:68: cc:eb:d5:1d:bf:ee:74:03:65:0d:b5:2f:96:de:86:8f:92:77: 27:d5:da:7a:ea:e6:7b:dd:97:75:ad:a5:6b:db:5f:43:d0:ad: 95:98:11:dc:34:7b:94:c8:e2:32:be:41:5a:1a:e2:ac:38:a9: 17:c5:2d:09:a5:8b:a8:69:90:5a:01:54:3a:28:e8:10:4f:22: 69:ac:85:fd:29:06:d4:de:7f:74:f5:ab:d9:a8:f2:7b:8f:7e: 6c:48:22:41:fc:f5:7a:e1:3e:fe:ab:78:91:0a:bb:0f:bb:1d: eb:50:53:87:a1:54:77:a8:a2:6a:fb:8f:5a:a3:50:11:85:28: d1:39:63:97:43:16:34:6d:6b:58:77:c3:a4:6a:79:5a:a4:84: 5b:d9:33:3f:55:eb:08:b1:1b:93:b8:0a:2a:df:86:8b:25:7a: af:01:db:43:29:a5:2b:d7:af:b5:6b:09:96:73:f7:e4:31:60: 0e:c7:f2:a1:ea:e6:59:dd:3b:69:87:5d:c5:4b:8d:36:ee:8d: 90:93:b4:58:60:87:17:3e:01:92:24:a9:02:a5:c7:13:1a:6b: de:34:64:62:78:6d:b4:91:b1:3f:93:d6:2d:e3:45:42:1a:e2: 87:bb:92:7d -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUN0pkB7GdvxHRChfhYkV9dVkL88wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMjExODEyNDZaFw0yNjEyMjAxODE3NDZaMDMxMTAvBgNV BAMTKDNEQUYxQ0E0ODYzM0Q0MkYzODk1NUM0N0M4QkEwRkFEQTczRDcwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKUW/La2cGYWewaSLhlelKz1V rhn2FLzB8KqjJH7xVlschU8bS9F+qJ28uY1rXEefjF/5UywsCgQQ5eASi4vQl8oI mchRrEabVgAkItoKj4LLFrKASW7fXSeORTKtimooaFBp2Ee0ehVTLogZtodiFlvq VrHlBADDZ7ufeZAkBMMZ0WdpZ/4CZfkWduFUDKqsNEFdZyfQ17YywRmUocu+gE6y nI5IejfsYk76fkn7B6/r7+thriwHqsICxRH5b5OxwSwqSlT2HtQuqMH7bAUPyTdP YBsP4FgN4UqiNcfuCFPLP6GIvULKXaMU5ATZyd37PBJUhsSyRvhA6B3/W7LrAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9rxykhjPULziV XEfIug+tpz1wBzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjk2 OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y5 Njk1WEVua2hWemV1ZFhma1U2RlZQYkdGWDZXVUs3ZXNOQnpoSFJMN3BkLzAvM0RB RjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURBNzNENzAwNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsUkkAwQCyAaAMA0EAgACMAcDBQAoBAxYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDN1jANBgkqhkiG9w0BAQsFAAOCAQEAVsNRby/e TJPl8VRy9cSboP5ozOvVHb/udANlDbUvlt6Gj5J3J9Xaeurme92Xda2la9tfQ9Ct lZgR3DR7lMjiMr5BWhrirDipF8UtCaWLqGmQWgFUOijoEE8iaayF/SkG1N5/dPWr 2ajye49+bEgiQfz1euE+/qt4kQq7D7sd61BTh6FUd6iiavuPWqNQEYUo0Tljl0MW NG1rWHfDpGp5WqSEW9kzP1XrCLEbk7gKKt+GiyV6rwHbQymlK9evtWsJlnP35DFg DsfyoermWd07aYddxUuNNu6NkJO0WGCHFz4BkiSpAqXHExpr3jRkYnhttJGxP5PW LeNFQhrih7uSfQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:25:30 2025 by rpki-client