This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer File: 4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer (raw, json) Hash identifier: iUpMYOzjpNxF4XoM2qbLIZgz1bpKfh2zSz8sqL8G0js= Subject key identifier: 4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2FF6FFE0D7ECB21AF3D1B47A87763A23226CC131 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.mft caRepository: rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 11 Nov 2025 15:39:08 +0000 Certificate not after: Tue 10 Nov 2026 15:44:08 +0000 Subordinate resources: AS: 22381 AS: 28320 AS: 28329 AS: 268852 IP: 45.174.132.0/22 IP: 131.108.184.0/22 IP: 170.78.232.0/22 IP: 170.81.128.0/22 IP: 177.107.32.0/19 IP: 177.126.0.0/24 IP: 177.126.2.0 -- 177.126.5.255 IP: 177.126.7.0/24 IP: 177.126.9.0/24 IP: 177.126.12.0/24 IP: 177.126.14.0/24 IP: 179.96.0.0/17 IP: 186.226.64.0/19 IP: 186.237.128.0/20 IP: 187.120.0.0 -- 187.120.11.255 IP: 187.120.13.0 -- 187.120.15.255 IP: 189.39.208.0/21 IP: 189.39.220.0/22 IP: 189.50.112.0 -- 189.50.143.255 IP: 200.150.160.0/22 IP: 200.150.166.0/24 IP: 200.150.168.0/24 IP: 200.150.171.0/24 IP: 200.150.173.0/24 IP: 201.87.129.0 -- 201.87.130.255 IP: 201.87.132.0/24 IP: 201.87.138.0/24 IP: 201.87.143.0/24 IP: 201.87.145.0/24 IP: 201.87.151.0/24 IP: 201.87.154.0 -- 201.87.156.255 IP: 201.87.158.0/23 IP: 2804:e0::/32 IP: 2804:368::/32 IP: 2804:39c::/32 IP: 2804:5b84::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f6:ff:e0:d7:ec:b2:1a:f3:d1:b4:7a:87:76:3a:23:22:6c:c1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 11 15:39:08 2025 GMT Not After : Nov 10 15:44:08 2026 GMT Subject: CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:be:2d:9a:c5:bb:00:1f:88:ce:56:c0:da: 37:d6:3d:58:3a:97:29:42:9c:8a:8b:f5:f2:4e:fc: a9:9d:a5:0c:a7:e3:d6:75:1f:ec:85:cc:73:53:5c: b2:e2:a8:58:74:73:51:d9:82:22:f1:7f:6d:8c:ee: b2:e4:52:77:4f:6a:bd:96:6d:87:07:f2:02:74:07: 98:89:ee:24:4a:45:2e:6c:4a:64:6b:71:4e:80:dd: 4e:b5:a7:50:72:3a:bc:a8:c2:74:12:8c:39:7a:00: 9e:c3:06:d1:7a:2a:2b:93:bc:58:a1:ae:1e:37:a6: 73:66:37:88:2e:d3:c9:99:48:17:f6:c3:2e:62:69: 8e:c1:1c:02:d5:f8:3b:8c:4a:cc:f9:f8:5a:ae:26: 8a:99:bc:43:d0:d2:5e:ba:82:26:55:ce:40:4c:ab: 57:6e:8c:06:ae:98:ff:ef:4c:8a:81:4e:74:a4:f8: 3d:94:ca:a1:eb:8f:69:77:28:14:98:0d:24:32:a1: e9:75:2b:bf:a2:d6:1b:2a:b3:a2:e3:21:0c:cd:89: 2e:ac:ca:c0:c7:ab:82:5b:28:3e:0e:9c:90:c8:3a: 39:c4:f8:cc:df:71:fa:55:b6:c8:c2:6e:e1:69:8a: 57:99:ab:8c:61:b4:0e:cb:4c:49:3f:7f:82:d0:bb: 5c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.132.0/22 131.108.184.0/22 170.78.232.0/22 170.81.128.0/22 177.107.32.0/19 177.126.0.0/24 177.126.2.0-177.126.5.255 177.126.7.0/24 177.126.9.0/24 177.126.12.0/24 177.126.14.0/24 179.96.0.0/17 186.226.64.0/19 186.237.128.0/20 187.120.0.0-187.120.11.255 187.120.13.0-187.120.15.255 189.39.208.0/21 189.39.220.0/22 189.50.112.0-189.50.143.255 200.150.160.0/22 200.150.166.0/24 200.150.168.0/24 200.150.171.0/24 200.150.173.0/24 201.87.129.0-201.87.130.255 201.87.132.0/24 201.87.138.0/24 201.87.143.0/24 201.87.145.0/24 201.87.151.0/24 201.87.154.0-201.87.156.255 201.87.158.0/23 IPv6: 2804:e0::/32 2804:368::/32 2804:39c::/32 2804:5b84::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22381 28320 28329 268852 Signature Algorithm: sha256WithRSAEncryption 96:df:f8:29:ff:5e:46:60:7c:67:13:ab:6c:51:6a:2c:3c:c3: 25:d4:99:9a:10:34:41:68:54:2c:e6:b3:12:b9:9a:f5:ce:3a: 3a:aa:75:58:71:02:53:76:74:46:13:77:c9:55:71:5b:6a:eb: 08:04:ef:e9:04:d3:e3:96:91:e7:31:a9:9f:32:d7:15:fa:4f: 75:2b:ba:42:57:36:5e:68:a2:f5:52:4e:91:90:3a:fe:f1:e4: 60:db:6b:4d:10:80:94:7a:7f:45:ba:08:64:ce:65:02:7b:5f: 43:00:83:74:79:63:94:1a:24:3d:a2:bd:7f:fb:bd:b2:7d:b1: c8:20:f8:8f:90:d6:11:45:44:2d:f6:cb:59:c8:cc:d8:94:6b: f7:e5:74:e3:74:ab:34:bd:bc:14:65:44:78:28:b1:fa:8e:6e: ed:86:be:00:e6:97:ca:fd:de:2f:2e:ac:68:5a:42:7c:63:35: 38:e3:9b:a7:54:01:1b:43:39:cf:35:1e:c8:6f:c5:1e:bd:fe: 3b:91:f1:3f:d9:d0:eb:ec:9d:66:b7:be:53:62:2e:2e:0f:67: 18:f2:b2:f4:da:d9:be:3c:10:ea:0e:e9:b0:63:fe:b9:6b:8d: 85:1c:b8:54:12:b9:7f:1d:df:32:88:f6:68:78:50:e3:97:2a: 2e:fc:f1:5f -----BEGIN CERTIFICATE----- MIIHQjCCBiqgAwIBAgIUL/b/4Nfsshrz0bR6h3Y6IyJswTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMTExNTM5MDhaFw0yNjExMTAxNTQ0MDhaMDMxMTAvBgNV BAMTKDRGMzlCRkQ4QkJBOEVDM0ExNERDODVDRDRBQzM4MUUzNkEyOUYxMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFb4tmsW7AB+IzlbA2jfWPVg6 lylCnIqL9fJO/KmdpQyn49Z1H+yFzHNTXLLiqFh0c1HZgiLxf22M7rLkUndPar2W bYcH8gJ0B5iJ7iRKRS5sSmRrcU6A3U61p1ByOryownQSjDl6AJ7DBtF6KiuTvFih rh43pnNmN4gu08mZSBf2wy5iaY7BHALV+DuMSsz5+FquJoqZvEPQ0l66giZVzkBM q1dujAaumP/vTIqBTnSk+D2UyqHrj2l3KBSYDSQyoel1K7+i1hsqs6LjIQzNiS6s ysDHq4JbKD4OnJDIOjnE+MzfcfpVtsjCbuFpileZq4xhtA7LTEk/f4LQu1zrAgMB AAGjggRMMIIESDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRPOb/Yu6jsOhTc hc1Kw4HjainxEjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWJC ZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVyVHgvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzli QmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzIvNEYz OUJGRDhCQkE4RUMzQTE0REM4NUNENEFDMzgxRTM2QTI5RjExMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBMgYIKwYBBQUH AQcBAf8EggEhMIIBHTCB9gQCAAEwge8DBAItroQDBAKDbLgDBAKqTugDBAKqUYAD BAWxayADBACxfgAwDAMEAbF+AgMEAbF+BAMEALF+BwMEALF+CQMEALF+DAMEALF+ DgMEB7NgAAMEBbriQAMEBLrtgDALAwMDu3gDBAK7eAgwDAMEALt4DQMEBLt4AAME A70n0AMEAr0n3DAMAwQEvTJwAwQEvTKAAwQCyJagAwQAyJamAwQAyJaoAwQAyJar AwQAyJatMAwDBADJV4EDBADJV4IDBADJV4QDBADJV4oDBADJV48DBADJV5EDBADJ V5cwDAMEAclXmgMEAMlXnAMEAclXnjAiBAIAAjAcAwUAKAQA4AMFACgEA2gDBQAo BAOcAwUAKARbhDAmBggrBgEFBQcBCAEB/wQXMBWgEzARAgJXbQICbqACAm6pAgME GjQwDQYJKoZIhvcNAQELBQADggEBAJbf+Cn/XkZgfGcTq2xRaiw8wyXUmZoQNEFo VCzmsxK5mvXOOjqqdVhxAlN2dEYTd8lVcVtq6wgE7+kE0+OWkecxqZ8y1xX6T3Ur ukJXNl5oovVSTpGQOv7x5GDba00QgJR6f0W6CGTOZQJ7X0MAg3R5Y5QaJD2ivX/7 vbJ9scgg+I+Q1hFFRC32y1nIzNiUa/fldON0qzS9vBRlRHgosfqObu2GvgDml8r9 3i8urGhaQnxjNTjjm6dUARtDOc81HshvxR69/juR8T/Z0OvsnWa3vlNiLi4PZxjy svTa2b48EOoO6bBj/rlrjYUcuFQSuX8d3zKI9mh4UOOXKi788V8= -----END CERTIFICATE-----Generated at Sat Dec 6 06:37:39 2025 by rpki-client