This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer File: 4940EEB21B4128216F8FFB3B0A997946697632F5.cer (raw, json) Hash identifier: FqPxZczKBGxhpr0CnQSu5d6Q4P5RP/5w0T0w7I41vk8= Subject key identifier: 49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2635B7D1CF0B94B0D7001A6A35F0BEEF3EBC00B8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.mft caRepository: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 20 Jan 2026 13:35:52 +0000 Certificate not after: Tue 19 Jan 2027 13:40:52 +0000 Subordinate resources: AS: 2716 AS: 19200 IP: 143.54.0.0/16 IP: 168.228.252.0/22 IP: 168.232.236.0/22 IP: 200.17.80.0/20 IP: 200.17.160.0/20 IP: 200.18.64.0/20 IP: 200.19.0.0/21 IP: 200.19.240.0/20 IP: 200.128.240.0/20 IP: 200.132.0.0/16 IP: 2804::/32 IP: 2804:1f20::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:35:b7:d1:cf:0b:94:b0:d7:00:1a:6a:35:f0:be:ef:3e:bc:00:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 20 13:35:52 2026 GMT Not After : Jan 19 13:40:52 2027 GMT Subject: CN=4940EEB21B4128216F8FFB3B0A997946697632F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:aa:bb:48:6b:c8:3d:dc:2c:11:d1:7c:48: 62:7c:b5:7e:7d:ad:c5:c4:97:91:89:c4:2e:e0:e5: ef:65:37:00:d1:59:bb:82:47:56:25:7b:53:f6:a9: 64:06:b4:6f:59:10:66:33:27:6d:66:27:62:05:22: f3:9f:22:e4:14:6d:0b:81:67:ce:06:60:c4:ca:b6: 14:91:4b:8a:b0:94:96:06:19:89:5f:fa:ce:7e:70: 86:12:8e:ec:49:1e:fd:2e:b3:19:4e:b5:d5:ec:a7: c4:1f:7a:cd:d6:cb:c9:ef:6a:51:19:18:c4:a8:75: 44:30:0f:8f:39:70:0e:78:a5:03:78:42:7c:99:d5: 98:0a:53:ca:06:3a:2b:7d:22:6c:df:42:5b:5a:49: fa:11:82:9b:84:4a:2d:ae:c2:24:3b:89:50:8e:d4: 18:be:e1:17:ee:bb:23:fa:28:ce:51:02:26:eb:a2: 7d:16:ba:a1:d3:f5:33:fc:fe:25:75:e1:09:2a:09: 1b:65:78:bf:33:7f:c8:2c:f9:a6:08:9a:c1:02:d1: 7e:fb:71:e0:be:89:b4:9e:bb:77:6f:81:7f:a7:db: 66:2c:20:cc:b9:f6:d0:03:68:d4:4a:8e:56:3e:95: f3:53:0c:f8:02:cf:a9:d6:f0:3b:05:e8:54:31:57: d6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.54.0.0/16 168.228.252.0/22 168.232.236.0/22 200.17.80.0/20 200.17.160.0/20 200.18.64.0/20 200.19.0.0/21 200.19.240.0/20 200.128.240.0/20 200.132.0.0/16 IPv6: 2804::/32 2804:1f20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2716 19200 Signature Algorithm: sha256WithRSAEncryption 68:85:b1:e3:f3:f4:c0:94:77:6f:ad:8c:71:b5:4a:6b:a6:a5: 2b:6e:ff:8a:4d:7e:34:07:e4:51:2f:35:44:86:5e:97:f5:eb: 7f:e2:20:1c:65:5c:90:c3:54:eb:7a:9f:f8:db:1b:ca:ab:8c: 6e:a4:f3:47:c3:ed:3b:65:a8:67:5b:a7:8a:be:49:1e:d8:fc: 0e:75:8e:4a:d6:2e:73:87:14:5f:92:d8:d5:cb:78:a1:f2:7b: 9f:b9:7c:9a:18:01:a9:ac:8b:c8:80:c2:84:00:80:95:11:0f: f1:8a:47:13:06:42:e3:04:ca:30:03:0b:44:5d:2e:b5:63:6d: 93:51:55:39:13:c1:88:97:cc:ed:31:0d:5c:fe:36:8e:e3:a8: da:d4:5a:4f:71:4d:e5:d0:cb:eb:a6:3f:73:28:08:c3:ac:f4: b2:e8:72:39:0b:90:ec:38:fa:ff:71:fb:d0:a8:fd:6d:c1:2a: 43:fb:fa:37:67:b1:1d:49:a6:7e:0c:1a:85:14:a7:55:7d:e7: 50:16:29:2a:2e:07:1c:a3:1b:ba:c3:0f:f4:4c:04:53:21:ea: ba:ef:08:44:f2:f5:ec:2d:d7:84:f8:30:48:a3:2b:bb:10:d5: 37:e2:34:45:2c:57:23:61:ff:24:f8:6d:dc:ce:7a:ba:40:a5: 1b:98:8f:b9 -----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgIUJjW30c8LlLDXABpqNfC+7z68ALgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMjAxMzM1NTJaFw0yNzAxMTkxMzQwNTJaMDMxMTAvBgNV BAMTKDQ5NDBFRUIyMUI0MTI4MjE2RjhGRkIzQjBBOTk3OTQ2Njk3NjMyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsqq7SGvIPdwsEdF8SGJ8tX59 rcXEl5GJxC7g5e9lNwDRWbuCR1Yle1P2qWQGtG9ZEGYzJ21mJ2IFIvOfIuQUbQuB Z84GYMTKthSRS4qwlJYGGYlf+s5+cIYSjuxJHv0usxlOtdXsp8Qfes3Wy8nvalEZ GMSodUQwD485cA54pQN4QnyZ1ZgKU8oGOit9ImzfQltaSfoRgpuESi2uwiQ7iVCO 1Bi+4RfuuyP6KM5RAibron0WuqHT9TP8/iV14QkqCRtleL8zf8gs+aYImsEC0X77 ceC+ibSeu3dvgX+n22YsIMy59tADaNRKjlY+lfNTDPgCz6nW8DsF6FQxV9ZXAgMB AAGjggN4MIIDdDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJQO6yG0EoIW+P +zsKmXlGaXYy9TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEVi NEFHamZOWTl6ZDd0Qm13aFRYTFRKeUZGQUZ6VUZxUGdlSFVDTjFTd2EvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhF YjRBR2pmTlk5emQ3dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzAvNDk0 MEVFQjIxQjQxMjgyMTZGOEZGQjNCMEE5OTc5NDY2OTc2MzJGNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEH AQH/BFowWDBABAIAATA6AwMAjzYDBAKo5PwDBAKo6OwDBATIEVADBATIEaADBATI EkADBAPIEwADBATIE/ADBATIgPADAwDIhDAUBAIAAjAOAwUAKAQAAAMFACgEHyAw HQYIKwYBBQUHAQgBAf8EDjAMoAowCAICCpwCAksAMA0GCSqGSIb3DQEBCwUAA4IB AQBohbHj8/TAlHdvrYxxtUprpqUrbv+KTX40B+RRLzVEhl6X9et/4iAcZVyQw1Tr ep/42xvKq4xupPNHw+07ZahnW6eKvkke2PwOdY5K1i5zhxRfktjVy3ih8nufuXya GAGprIvIgMKEAICVEQ/xikcTBkLjBMowAwtEXS61Y22TUVU5E8GIl8ztMQ1c/jaO 46ja1FpPcU3l0Mvrpj9zKAjDrPSy6HI5C5DsOPr/cfvQqP1twSpD+/o3Z7EdSaZ+ DBqFFKdVfedQFikqLgccoxu6ww/0TARTIeq67whE8vXsLdeE+DBIoyu7ENU34jRF LFcjYf8k+G3cznq6QKUbmI+5 -----END CERTIFICATE-----Generated at Sun Jan 25 13:09:11 2026 by rpki-client