This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer File: 090356FA0F721D9A2449A75F672A23DBF91DA79D.cer (raw, json) Hash identifier: fyiTZrhOElb8sZJOAgtc+g4yYUdpX4iOtmzN4hdN944= Subject key identifier: 09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2F0B0F1D9CD1E52538D745489BD985AEEFB9FB4A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft caRepository: rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 09 Jan 2026 19:11:27 +0000 Certificate not after: Fri 08 Jan 2027 19:16:27 +0000 Subordinate resources: AS: 61823 IP: 201.222.24.0/22 IP: 2804:19dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0b:0f:1d:9c:d1:e5:25:38:d7:45:48:9b:d9:85:ae:ef:b9:fb:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 9 19:11:27 2026 GMT Not After : Jan 8 19:16:27 2027 GMT Subject: CN=090356FA0F721D9A2449A75F672A23DBF91DA79D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:32:63:70:21:1c:4a:a3:6d:e9:d1:77:ad:f4: 32:6f:88:2c:20:fe:eb:fc:8d:a6:a9:25:dc:ec:4f: 89:8e:aa:14:11:6a:3a:4a:5a:fc:27:44:7e:b5:b1: cd:9f:2a:32:ba:05:7e:3f:84:87:34:6d:70:77:9e: d2:ff:ec:33:a2:08:7e:f9:cb:de:8b:2b:90:e9:b8: a3:54:0b:24:d8:6f:4f:28:b9:c8:a9:c7:96:7f:5d: 08:8c:a2:d7:60:da:c7:58:04:f2:01:af:f3:2a:7e: 5f:54:85:07:74:14:ad:cd:5d:f7:3a:6b:38:03:0d: 74:c9:b4:62:c3:83:30:77:db:19:77:fd:59:ba:e7: f9:d2:50:8b:3c:01:b7:26:ec:a1:3d:09:14:eb:f0: 9c:48:f4:e7:ab:c6:07:b6:ab:7c:f5:26:b1:ee:0e: 89:cf:ad:4d:27:6c:6f:74:1d:6d:6b:88:24:e3:7f: 8b:46:29:68:f1:8f:5e:18:eb:e0:7b:39:a9:bc:4d: 86:51:4d:3d:db:2d:3c:d3:08:32:52:00:df:6e:71: da:10:e1:81:fd:c8:f3:70:23:46:8b:a5:16:44:65: 79:81:63:cf:99:89:81:68:86:89:b9:3f:36:c6:67: c5:35:ae:ea:f6:e5:03:52:7a:e2:40:97:85:6a:44: 88:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.222.24.0/22 IPv6: 2804:19dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61823 Signature Algorithm: sha256WithRSAEncryption 21:10:db:44:9e:0e:9e:3a:9f:2b:2b:95:27:12:e4:af:41:da: 91:b8:1c:80:87:49:04:3d:0e:1d:3f:51:38:27:bf:06:7f:d2: 01:80:ef:56:18:65:59:39:31:0a:b7:ea:f2:46:d6:2f:84:b6: 33:37:39:ab:97:9d:ea:60:68:8e:00:7d:70:59:9b:45:92:42: 95:3a:a3:d9:96:84:f9:18:d2:e1:50:4b:0a:02:72:2a:5e:6b: 5e:72:82:f5:5b:7c:4e:96:d6:d3:1e:ad:7f:d1:b2:e0:73:d2: 4b:2d:14:c2:55:cd:72:95:c8:68:0c:69:3d:72:b3:9f:b0:c7: 03:21:06:d8:3a:0e:d7:b6:ce:8b:b0:42:c6:ca:6e:bb:72:19: 9a:b1:0a:73:24:6a:38:0c:d4:95:bf:9c:7d:08:af:47:67:56: 30:5f:24:f6:12:80:8e:97:1f:ed:f8:2b:fd:d1:af:2f:cc:c4: 89:8d:d3:3f:c0:af:4c:d1:5b:e5:74:04:d5:c7:8c:67:b0:81: 9d:1f:e6:fa:92:55:97:ac:89:ff:64:55:7c:78:56:d3:65:73: a7:44:e6:27:d9:82:d6:f6:1d:80:75:32:60:a5:20:44:f9:55: ee:47:1e:77:5b:1b:61:79:10:61:9b:db:9d:7f:41:f3:e3:0b: 1a:5a:f1:62 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULwsPHZzR5SU410VIm9mFru+5+0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMDkxOTExMjdaFw0yNzAxMDgxOTE2MjdaMDMxMTAvBgNV BAMTKDA5MDM1NkZBMEY3MjFEOUEyNDQ5QTc1RjY3MkEyM0RCRjkxREE3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfMmNwIRxKo23p0Xet9DJviCwg /uv8jaapJdzsT4mOqhQRajpKWvwnRH61sc2fKjK6BX4/hIc0bXB3ntL/7DOiCH75 y96LK5DpuKNUCyTYb08oucipx5Z/XQiMotdg2sdYBPIBr/Mqfl9UhQd0FK3NXfc6 azgDDXTJtGLDgzB32xl3/Vm65/nSUIs8Abcm7KE9CRTr8JxI9Oerxge2q3z1JrHu DonPrU0nbG90HW1riCTjf4tGKWjxj14Y6+B7Oam8TYZRTT3bLTzTCDJSAN9ucdoQ 4YH9yPNwI0aLpRZEZXmBY8+ZiYFohom5PzbGZ8U1rur25QNSeuJAl4VqRIiBAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJA1b6D3IdmiRJ p19nKiPb+R2nnTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEM0 M1BWaWV6bjN2V1JkUDE2a0Z6UkwydGN6cUhKMVNQUkg4UVBXTmNYalovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hD NDNQVmllem4zdldSZFAxNmtGelJMMnRjenFISjFTUFJIOFFQV05jWGpaLzAvMDkw MzU2RkEwRjcyMUQ5QTI0NDlBNzVGNjcyQTIzREJGOTFEQTc5RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyd4YMA0EAgACMAcDBQAoBBncMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxfzANBgkqhkiG9w0BAQsFAAOCAQEAIRDbRJ4OnjqfKyuV JxLkr0HakbgcgIdJBD0OHT9ROCe/Bn/SAYDvVhhlWTkxCrfq8kbWL4S2Mzc5q5ed 6mBojgB9cFmbRZJClTqj2ZaE+RjS4VBLCgJyKl5rXnKC9Vt8TpbW0x6tf9Gy4HPS Sy0UwlXNcpXIaAxpPXKzn7DHAyEG2DoO17bOi7BCxspuu3IZmrEKcyRqOAzUlb+c fQivR2dWMF8k9hKAjpcf7fgr/dGvL8zEiY3TP8CvTNFb5XQE1ceMZ7CBnR/m+pJV l6yJ/2RVfHhW02Vzp0TmJ9mC1vYdgHUyYKUgRPlV7kced1sbYXkQYZvbnX9B8+ML GlrxYg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:23 2026 by rpki-client