This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer File: 149DF6958A59FCFA910071567BAB07904ED0751D.cer (raw, json) Hash identifier: maJrZTqMYhONpYjqqoRlUK1d5vEttXLhwdpVHst2wzI= Subject key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 75F3F2CC135572CBEFC34E3482C503F7E663BDDD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft caRepository: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 11 Dec 2025 20:15:04 +0000 Certificate not after: Thu 10 Dec 2026 20:20:04 +0000 Subordinate resources: AS: 4230 IP: 179.68.0.0/16 IP: 179.237.0.0 -- 179.237.25.255 IP: 186.249.160.0/20 IP: 187.28.0.0 -- 187.30.255.255 IP: 187.43.0.0/16 IP: 189.2.0.0/15 IP: 189.16.0.0/15 IP: 189.22.0.0/15 IP: 189.42.0.0/15 IP: 189.52.0.0/15 IP: 189.86.0.0 -- 189.88.255.255 IP: 191.38.0.0/15 IP: 191.56.0.0/13 IP: 200.10.159.0/24 IP: 200.139.192.0/18 IP: 200.166.0.0/15 IP: 200.172.0.0 -- 200.174.255.255 IP: 200.178.0.0/15 IP: 200.182.0.0/15 IP: 200.190.0.0 -- 200.192.63.255 IP: 200.200.0.0/16 IP: 200.208.0.0 -- 200.214.255.255 IP: 200.227.0.0 -- 200.228.255.255 IP: 200.230.0.0/15 IP: 200.241.0.0 -- 200.255.255.255 IP: 201.30.0.0/15 IP: 201.38.0.0/15 IP: 201.44.0.0/15 IP: 201.56.0.0/15 IP: 201.64.0.0/15 IP: 201.72.0.0/15 IP: 201.90.0.0/16 IP: 2804:a8::/32 IP: 2804:17c::/32 IP: 2804:1388::/30 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Dec 2025 15:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f3:f2:cc:13:55:72:cb:ef:c3:4e:34:82:c5:03:f7:e6:63:bd:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 11 20:15:04 2025 GMT Not After : Dec 10 20:20:04 2026 GMT Subject: CN=149DF6958A59FCFA910071567BAB07904ED0751D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:80:6a:85:84:fc:54:ea:56:5d:f3:08:38: b0:e4:4e:8a:b2:ae:29:79:ee:d8:4a:43:d6:41:92: a1:02:2f:7c:70:d6:ea:ac:f3:56:20:19:41:53:cf: 78:cf:77:48:84:b1:30:d5:7d:c6:2d:b7:05:eb:84: 59:67:a2:24:59:4b:a9:81:42:67:ff:8a:cb:68:81: 6b:61:f8:6e:f1:71:cb:77:1c:57:9b:84:44:f9:c4: 54:e4:b1:62:a6:2b:53:04:e7:c2:2c:cc:ef:80:e8: 36:e3:80:14:92:98:30:37:8b:2e:5c:35:a2:29:61: 5c:0b:82:0c:5d:2d:5d:34:69:30:b3:10:de:c5:97: 76:0d:49:2c:97:ae:e0:2f:8d:6f:f1:c3:00:e4:46: 6f:94:8e:eb:51:28:39:c1:1c:ad:69:3d:84:2a:2d: 09:e8:8d:a7:80:81:51:4c:9a:0d:49:f6:e2:d7:21: 8f:ec:21:30:41:d0:95:00:17:5c:d4:ca:f5:d3:a7: 13:0c:12:21:21:b3:cf:06:6a:30:c5:a7:fc:a1:75: f4:c4:55:88:ad:91:f3:da:80:1f:64:89:a0:bb:93: ed:3b:8d:e9:25:7e:80:d0:77:11:6b:cf:fb:ab:e7: b9:72:d7:97:d0:cb:3b:3d:08:e9:c6:0b:50:9c:85: 4b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.68.0.0/16 179.237.0.0-179.237.25.255 186.249.160.0/20 187.28.0.0-187.30.255.255 187.43.0.0/16 189.2.0.0/15 189.16.0.0/15 189.22.0.0/15 189.42.0.0/15 189.52.0.0/15 189.86.0.0-189.88.255.255 191.38.0.0/15 191.56.0.0/13 200.10.159.0/24 200.139.192.0/18 200.166.0.0/15 200.172.0.0-200.174.255.255 200.178.0.0/15 200.182.0.0/15 200.190.0.0-200.192.63.255 200.200.0.0/16 200.208.0.0-200.214.255.255 200.227.0.0-200.228.255.255 200.230.0.0/15 200.241.0.0-200.255.255.255 201.30.0.0/15 201.38.0.0/15 201.44.0.0/15 201.56.0.0/15 201.64.0.0/15 201.72.0.0/15 201.90.0.0/16 IPv6: 2804:a8::/32 2804:17c::/32 2804:1388::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4230 Signature Algorithm: sha256WithRSAEncryption 01:f2:00:11:92:25:3d:35:73:96:71:b4:94:17:cb:cb:4d:f7: 74:ff:b0:4f:7f:ea:05:d1:7d:00:1b:6e:74:f9:67:97:ea:66: 6a:7d:13:38:6c:11:f0:24:5e:a6:77:d3:87:01:df:7e:0a:bd: cd:31:aa:43:24:ad:33:b5:14:2e:0e:ba:df:23:47:12:78:72: 98:a2:2f:d3:35:d5:bb:98:6e:7a:d2:86:c4:ff:94:4f:41:67: 9c:b9:b2:9c:68:2d:b1:fd:01:7f:70:9c:de:c9:52:1c:43:22: 38:dc:9d:56:a6:35:61:25:dc:a5:ad:7c:52:6d:f8:69:47:79: f9:20:e8:76:06:37:f1:7f:5a:e6:d8:9b:4c:ac:9b:51:f0:99: 06:45:f0:61:8f:74:a4:d1:3e:b8:c4:4a:f5:42:fa:aa:cc:8a: fd:92:e1:c4:ca:a7:7c:6d:c2:fd:bd:3b:6b:ad:89:10:0a:84: 2a:dd:d3:47:00:a3:1c:7a:98:7b:26:94:f2:d9:22:0f:1e:71: 02:4c:9d:00:a1:51:2d:3e:50:b3:8d:e5:4c:e3:e9:df:12:87: f2:4e:46:ed:9b:5c:8a:e5:a1:6d:e6:ca:ae:19:6f:e9:12:ff: c3:07:82:58:90:48:c2:5b:1e:5c:a3:46:55:62:38:e3:ec:5b: 3d:7a:53:5c -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUdfPyzBNVcsvvw040gsUD9+Zjvd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMTEyMDE1MDRaFw0yNjEyMTAyMDIwMDRaMDMxMTAvBgNV BAMTKDE0OURGNjk1OEE1OUZDRkE5MTAwNzE1NjdCQUIwNzkwNEVEMDc1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEYBqhYT8VOpWXfMIOLDkToqy ril57thKQ9ZBkqECL3xw1uqs81YgGUFTz3jPd0iEsTDVfcYttwXrhFlnoiRZS6mB Qmf/istogWth+G7xcct3HFebhET5xFTksWKmK1ME58IszO+A6DbjgBSSmDA3iy5c NaIpYVwLggxdLV00aTCzEN7Fl3YNSSyXruAvjW/xwwDkRm+UjutRKDnBHK1pPYQq LQnojaeAgVFMmg1J9uLXIY/sITBB0JUAF1zUyvXTpxMMEiEhs88GajDFp/yhdfTE VYitkfPagB9kiaC7k+07jeklfoDQdxFrz/ur57ly15fQyzs9COnGC1CchUtHAgMB AAGjggQkMIIEIDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUnfaViln8+pEA cVZ7qweQTtB1HTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1VS NEplZHZaU25iOGhLbU1VZ1E2ODdiNE1YWG0zNW1TWkRNTFFOSFNGcHAvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1VS NEplZHZaU25iOGhLbU1VZ1E2ODdiNE1YWG0zNW1TWkRNTFFOSFNGcHAvMS8xNDlE RjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3NTFELm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggEYBggrBgEFBQcB BwEB/wSCAQcwggEDMIHjBAIAATCB3AMDALNEMAsDAwCz7QMEAbPtGAMEBLr5oDAK AwMCuxwDAwC7HgMDALsrAwMBvQIDAwG9EAMDAb0WAwMBvSoDAwG9NDAKAwMBvVYD AwC9WAMDAb8mAwMDvzgDBADICp8DBAbIi8ADAwHIpjAKAwMCyKwDAwDIrgMDAciy AwMByLYwCwMDAci+AwQGyMAAAwMAyMgwCgMDBMjQAwMAyNYwCgMDAMjjAwMAyOQD AwHI5jAJAwMAyPEDAgDIAwMByR4DAwHJJgMDAcksAwMByTgDAwHJQAMDAclIAwMA yVowGwQCAAIwFQMFACgEAKgDBQAoBAF8AwUCKAQTiDAZBggrBgEFBQcBCAEB/wQK MAigBjAEAgIQhjANBgkqhkiG9w0BAQsFAAOCAQEAAfIAEZIlPTVzlnG0lBfLy033 dP+wT3/qBdF9ABtudPlnl+pman0TOGwR8CRepnfThwHffgq9zTGqQyStM7UULg66 3yNHEnhymKIv0zXVu5huetKGxP+UT0FnnLmynGgtsf0Bf3Cc3slSHEMiONydVqY1 YSXcpa18Um34aUd5+SDodgY38X9a5tibTKybUfCZBkXwYY90pNE+uMRK9UL6qsyK /ZLhxMqnfG3C/b07a62JEAqEKt3TRwCjHHqYeyaU8tkiDx5xAkydAKFRLT5Qs43l TOPp3xKH8k5G7ZtciuWhbebKrhlv6RL/wweCWJBIwlseXKNGVWI44+xbPXpTXA== -----END CERTIFICATE-----Generated at Wed Dec 17 15:25:43 2025 by rpki-client