This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer File: 4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer (raw, json) Hash identifier: 5BbrbfBHZrUkJqsbCRsq5KLBEnKqLdw8lTT8H9RJDCY= Subject key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1A914A893CB233AFE8E1B23010D5194DBCDDD7BB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft caRepository: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 08 Jan 2026 20:40:29 +0000 Certificate not after: Thu 07 Jan 2027 20:45:29 +0000 Subordinate resources: AS: 28184 IP: 189.89.64.0/20 IP: 2804:15bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Jan 2026 04:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:91:4a:89:3c:b2:33:af:e8:e1:b2:30:10:d5:19:4d:bc:dd:d7:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 8 20:40:29 2026 GMT Not After : Jan 7 20:45:29 2027 GMT Subject: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0e:b9:85:68:01:13:c0:c1:2c:6a:72:f0:e2: 02:91:e6:20:eb:81:fe:42:d2:d8:94:34:ff:8e:15: 8f:99:c8:48:31:7b:14:60:ca:75:22:0f:88:cd:32: 22:bf:cf:39:a2:23:4a:3b:64:15:8a:28:2d:57:a6: 91:83:d5:a9:eb:b6:b3:80:a7:2b:09:f5:82:cc:b5: 24:74:f5:7e:11:4f:38:4a:ad:e8:a4:ce:c6:06:2c: 1c:0b:dd:44:b7:70:d3:15:94:3e:bf:19:bf:10:6b: 2e:d7:94:c9:8e:26:62:47:3b:64:24:a4:24:1a:5b: 4a:e9:49:20:c9:ea:63:d3:8d:bf:6a:bf:63:81:20: 1d:92:3b:26:1c:bc:e7:05:a2:19:99:e9:c9:23:1a: 0d:c4:6a:61:48:45:8f:dd:ae:c3:4c:38:4c:86:d6: e7:ef:0c:fc:42:50:2f:18:87:e1:f9:c5:97:b5:52: 12:f3:0c:29:fd:c9:09:af:cb:c5:c5:ef:34:c2:68: ea:e3:51:e5:a8:82:a7:18:23:54:f8:09:41:80:52: 08:88:2c:69:1a:fa:63:35:40:1c:6c:2e:c2:ca:13: 09:c2:17:e9:24:07:08:b8:6e:81:79:a1:20:75:70: ed:89:43:be:de:69:b5:4c:2b:9a:12:fe:48:13:ac: b3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.64.0/20 IPv6: 2804:15bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28184 Signature Algorithm: sha256WithRSAEncryption bc:49:a9:5c:de:d1:61:62:15:af:a1:cf:f1:84:5b:ab:d8:ea: 6e:06:36:fb:70:35:d1:8c:18:f8:5b:a3:fc:81:8e:c2:1d:a5: 6a:4e:79:b1:ce:ca:20:d2:ec:5b:3e:fa:98:e1:60:3c:0d:14: d1:15:a7:e6:d0:9d:5d:80:f5:3c:8e:85:27:1c:38:2d:69:ca: 07:6b:06:e3:17:82:da:71:0f:1e:33:71:d4:ca:ac:73:f6:74: ec:ce:9f:d9:e1:98:45:03:1f:ef:f2:4e:8e:00:4a:cd:7d:89: 16:7e:4f:dd:d6:9f:b0:76:28:8e:0c:31:6a:2a:37:39:83:b1: 49:a6:d6:68:71:dc:75:6e:a8:fc:5c:d9:9b:bb:55:6b:d6:5c: 2d:ad:e4:db:36:e7:14:79:31:5b:c6:45:9c:44:f0:79:4d:4f: 4a:c5:8a:6d:07:b3:43:64:c1:bc:c7:f5:f9:52:1b:7a:b5:a0: 00:75:d2:49:80:d6:68:2f:76:4b:12:af:ec:7a:7b:67:63:74: f9:2e:c5:1e:15:af:46:9e:92:2f:90:a4:1b:9d:36:6d:66:b2: 19:c5:73:68:eb:c6:7f:78:2c:4e:e1:ee:f0:50:b8:b1:60:59: 6a:69:60:16:d1:66:04:74:ef:6f:28:6c:07:16:41:89:15:0f: e0:6b:31:c0 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUGpFKiTyyM6/o4bIwENUZTbzd17swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMDgyMDQwMjlaFw0yNzAxMDcyMDQ1MjlaMDMxMTAvBgNV BAMTKDRDRkM3ODBCQTcwRDlBQ0Q3MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDrmFaAETwMEsanLw4gKR5iDr gf5C0tiUNP+OFY+ZyEgxexRgynUiD4jNMiK/zzmiI0o7ZBWKKC1XppGD1anrtrOA pysJ9YLMtSR09X4RTzhKreikzsYGLBwL3US3cNMVlD6/Gb8Qay7XlMmOJmJHO2Qk pCQaW0rpSSDJ6mPTjb9qv2OBIB2SOyYcvOcFohmZ6ckjGg3EamFIRY/drsNMOEyG 1ufvDPxCUC8Yh+H5xZe1UhLzDCn9yQmvy8XF7zTCaOrjUeWogqcYI1T4CUGAUgiI LGka+mM1QBxsLsLKEwnCF+kkBwi4boF5oSB1cO2JQ77eabVMK5oS/kgTrLORAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRM/HgLpw2azXFK TvJrEUd4y/OfQDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUt1 Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JLemUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FL dVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAvNENG Qzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhDQkYzOUY0MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEvVlAMA0EAgACMAcDBQAoBBW8MBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm4YMA0GCSqGSIb3DQEBCwUAA4IBAQC8Salc3tFhYhWvoc/x hFur2OpuBjb7cDXRjBj4W6P8gY7CHaVqTnmxzsog0uxbPvqY4WA8DRTRFafm0J1d gPU8joUnHDgtacoHawbjF4LacQ8eM3HUyqxz9nTszp/Z4ZhFAx/v8k6OAErNfYkW fk/d1p+wdiiODDFqKjc5g7FJptZocdx1bqj8XNmbu1Vr1lwtreTbNucUeTFbxkWc RPB5TU9KxYptB7NDZMG8x/X5Uht6taAAddJJgNZoL3ZLEq/sentnY3T5LsUeFa9G npIvkKQbnTZtZrIZxXNo68Z/eCxO4e7wULixYFlqaWAW0WYEdO9vKGwHFkGJFQ/g azHA -----END CERTIFICATE-----Generated at Sat Jan 10 04:21:09 2026 by rpki-client