This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer (raw, json) Hash identifier: cvT3YvMNPmNxE9CA4ccMKfpQ8AxGSHKQB5TYfCmt0LA= Subject key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 193B00443FF6AEB45C5DB3E5B8F5F6CD62E69F69 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft caRepository: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 05 Jan 2026 21:34:23 +0000 Certificate not after: Mon 04 Jan 2027 21:39:23 +0000 Subordinate resources: AS: 264880 IP: 168.227.56.0/22 IP: 170.246.184.0/22 IP: 2804:2f40::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 14:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3b:00:44:3f:f6:ae:b4:5c:5d:b3:e5:b8:f5:f6:cd:62:e6:9f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 5 21:34:23 2026 GMT Not After : Jan 4 21:39:23 2027 GMT Subject: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8c:e7:23:a9:63:00:29:d8:b7:74:9c:fb:b5: b1:4e:54:fa:45:01:63:d2:97:54:b9:34:9c:26:f0: b1:29:4b:17:03:98:0e:54:41:2c:b2:bb:09:0e:bf: 8d:dd:85:3a:ba:9b:d5:8e:a1:0b:0f:30:de:c5:d3: d1:cb:71:91:18:cb:71:ae:61:d8:2c:9f:da:fe:8d: 56:f8:96:bd:2b:a6:42:8c:80:90:90:b1:6c:2f:99: b6:9d:f4:81:37:f8:bd:cd:dd:b6:f7:bd:db:73:0b: ce:8f:66:5b:29:93:4a:0e:a6:98:3f:90:64:f5:f0: 5c:ea:18:dc:af:07:19:d5:d5:c4:41:df:15:82:1a: a8:ae:88:83:86:a4:4c:bf:52:32:19:b4:77:d0:41: ce:9e:ca:44:42:af:fa:42:f5:8c:9b:e3:88:7e:24: 4c:ef:f4:43:e2:0e:4f:da:d8:c6:ca:55:02:1c:88: 6a:64:2e:4a:87:1e:76:c7:92:84:a2:f5:46:b9:af: 17:28:28:06:4d:af:f4:1a:f7:91:be:16:a5:8d:f9: ec:0f:73:7c:15:c2:e4:7c:b5:e8:d2:8e:31:75:47: 97:4d:e7:3b:6c:4c:61:59:89:e0:83:c0:fa:74:99: 58:75:03:70:28:3e:da:06:8e:4e:56:98:91:69:3b: 18:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.56.0/22 170.246.184.0/22 IPv6: 2804:2f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264880 Signature Algorithm: sha256WithRSAEncryption 0a:ee:4f:42:fd:74:cd:76:35:44:bf:54:6a:92:a0:cb:c3:20: 11:28:2c:d5:b5:59:24:77:74:e7:23:01:13:d8:d5:60:c6:ec: bb:c7:3e:aa:a5:1c:50:41:89:ec:6b:5f:64:06:43:0d:7d:16: 4f:e3:18:4a:1e:08:d1:44:55:bc:b5:5e:29:1e:eb:8c:73:94: 8e:02:35:42:2b:dc:71:70:6d:67:cd:7e:60:d1:63:2a:e1:bc: b4:bb:a4:ee:ec:a3:5e:53:35:1f:fd:c4:2a:01:82:19:3d:9d: da:67:72:12:02:b6:a2:41:e4:a3:aa:53:bb:02:c2:0f:77:53: 34:b5:56:3b:0b:6e:e0:82:06:6b:e2:03:83:dc:85:5e:b9:85: b3:69:9d:93:52:04:2e:72:92:b1:11:b6:94:f5:cf:b1:55:af: 9d:34:a9:b9:16:5a:2b:6a:45:43:b9:d3:fe:6a:2e:dd:73:82: 9b:2a:f3:be:3b:32:51:46:bd:2b:50:d1:2b:e1:5e:82:a3:86: f4:5b:b3:db:41:03:cf:15:c3:ec:ed:06:8e:46:e3:b3:4b:33: 4d:fe:97:55:bf:74:64:36:db:5f:46:d6:29:3a:dc:3c:83:2b: 6a:55:0b:7f:29:64:cf:cd:01:e6:7f:e7:f4:9a:7f:d5:6c:0d: 2e:20:38:d9 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUGTsARD/2rrRcXbPluPX2zWLmn2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMDUyMTM0MjNaFw0yNzAxMDQyMTM5MjNaMDMxMTAvBgNV BAMTKDlBMzJDRDkxRkNFOUNBREJGMjhCRURGNEM3MjBFNjdCNzlBRkI5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjOcjqWMAKdi3dJz7tbFOVPpF AWPSl1S5NJwm8LEpSxcDmA5UQSyyuwkOv43dhTq6m9WOoQsPMN7F09HLcZEYy3Gu Ydgsn9r+jVb4lr0rpkKMgJCQsWwvmbad9IE3+L3N3bb3vdtzC86PZlspk0oOppg/ kGT18FzqGNyvBxnV1cRB3xWCGqiuiIOGpEy/UjIZtHfQQc6eykRCr/pC9Yyb44h+ JEzv9EPiDk/a2MbKVQIciGpkLkqHHnbHkoSi9Ua5rxcoKAZNr/Qa95G+FqWN+ewP c3wVwuR8tejSjjF1R5dN5ztsTGFZieCDwPp0mVh1A3AoPtoGjk5WmJFpOxhxAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSaMs2R/OnK2/KL 7fTHIOZ7ea+5zDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0Fz M0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1Q2gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNB czNCZDVvb3NGdE5oUXREdHhUd1h6dGt3UEFoY0UxSmZxOXJTQjdidUNoLzAvOUEz MkNEOTFGQ0U5Q0FEQkYyOEJFREY0QzcyMEU2N0I3OUFGQjlDQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqOM4AwQCqva4MA0EAgACMAcDBQAoBC9AMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQKsDANBgkqhkiG9w0BAQsFAAOCAQEACu5PQv10 zXY1RL9UapKgy8MgESgs1bVZJHd05yMBE9jVYMbsu8c+qqUcUEGJ7GtfZAZDDX0W T+MYSh4I0URVvLVeKR7rjHOUjgI1QivccXBtZ81+YNFjKuG8tLuk7uyjXlM1H/3E KgGCGT2d2mdyEgK2okHko6pTuwLCD3dTNLVWOwtu4IIGa+IDg9yFXrmFs2mdk1IE LnKSsRG2lPXPsVWvnTSpuRZaK2pFQ7nT/mou3XOCmyrzvjsyUUa9K1DRK+FegqOG 9Fuz20EDzxXD7O0Gjkbjs0szTf6XVb90ZDbbX0bWKTrcPIMralULfylkz80B5n/n 9Jp/1WwNLiA42Q== -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:08 2026 by rpki-client