This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AC4588C494209C910DFA4AA645CDCCAC7E644D58.cer File: AC4588C494209C910DFA4AA645CDCCAC7E644D58.cer (raw, json) Hash identifier: 7bTyVmIY5IZpQGF8TQNjK0EFBEmAXzrEkAJV7kaK41g= Subject key identifier: AC:45:88:C4:94:20:9C:91:0D:FA:4A:A6:45:CD:CC:AC:7E:64:4D:58 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 32610A7C34794B3A68DE3DCF3A9A7903C477922A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/AC4588C494209C910DFA4AA645CDCCAC7E644D58.mft caRepository: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 12 Jan 2026 16:01:27 +0000 Certificate not after: Mon 11 Jan 2027 16:06:27 +0000 Subordinate resources: AS: 52818 IP: 177.72.148.0/22 IP: 191.240.196.0/22 IP: 2804:111c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:61:0a:7c:34:79:4b:3a:68:de:3d:cf:3a:9a:79:03:c4:77:92:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 12 16:01:27 2026 GMT Not After : Jan 11 16:06:27 2027 GMT Subject: CN=AC4588C494209C910DFA4AA645CDCCAC7E644D58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:64:a2:6f:1c:1f:31:75:b5:30:3d:a5:6f:24: 3a:13:b8:f3:b3:d0:0b:59:82:90:da:69:92:e0:28: 05:7e:50:cc:3f:92:64:01:23:c3:23:76:4f:ce:30: 56:09:f5:10:2a:9c:f9:22:8f:0d:b7:a3:79:91:a4: 1d:d6:4f:c9:2b:c9:c7:91:b1:d4:01:e6:7b:ae:2c: b8:fe:0f:75:57:18:93:ea:49:a3:51:d7:74:5d:9b: 4a:3f:08:08:4d:c0:db:5d:dd:80:ee:41:c3:92:52: 99:08:14:2b:1f:78:0b:13:9d:39:d0:35:72:8d:0b: 03:42:67:9e:d7:f2:27:e8:ec:65:a6:29:fa:3a:08: ba:75:f4:81:96:79:b1:61:e5:75:8c:95:46:be:0a: 96:bc:7d:98:ce:a8:e9:c4:fa:bd:a0:15:24:d6:79: 28:9c:a9:e8:4a:28:3a:74:71:8c:cf:21:16:64:a0: df:95:ba:4a:63:91:65:e5:af:4a:3a:18:ed:6c:de: 8f:0b:20:cb:ff:3b:fa:fd:be:8a:a8:8c:93:9c:0f: 64:79:53:3f:33:15:35:62:29:58:0b:6c:69:31:37: 6b:d0:91:3a:c5:dd:a4:e8:e8:8d:60:a2:a1:c2:50: 0b:65:b2:5c:25:99:89:0e:ec:18:bb:94:a0:b0:e6: d1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:45:88:C4:94:20:9C:91:0D:FA:4A:A6:45:CD:CC:AC:7E:64:4D:58 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/AC4588C494209C910DFA4AA645CDCCAC7E644D58.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.72.148.0/22 191.240.196.0/22 IPv6: 2804:111c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52818 Signature Algorithm: sha256WithRSAEncryption 43:15:3b:29:c2:f0:af:7a:b6:be:a1:ce:d4:4e:42:b6:4e:f6: 32:0c:6e:cf:37:46:55:be:e8:cd:10:a4:e4:4f:50:8a:67:73: 22:f7:2d:0b:ba:21:31:0f:8e:f4:2f:2d:c5:69:7c:ea:cb:6f: 6d:01:6e:8c:0d:b6:f4:a6:83:d0:02:74:3e:96:01:fa:65:6d: b8:85:80:b3:86:7b:6f:37:e7:0b:9d:99:49:29:6f:a6:cd:85: fd:12:c3:8c:1a:0e:bb:4d:d4:86:5c:04:3b:2c:55:69:53:7e: db:14:1c:a6:9d:a2:8a:29:5a:f6:d7:6c:df:6f:cd:37:1d:20: d2:c9:13:40:ac:9a:97:70:a3:e9:64:7f:8f:1a:83:07:06:bd: a5:2a:29:e7:6f:02:18:2a:29:a4:65:88:af:57:91:de:e0:03: 2d:f7:0b:61:87:95:d7:5d:66:47:27:58:e3:97:a8:3d:51:7f: a6:39:8d:2f:56:53:5a:75:70:81:1d:b8:c8:27:ae:af:ad:7b: e3:a0:df:66:12:58:62:df:80:85:8a:c4:24:c1:4f:64:16:f3: 43:34:4e:83:c0:28:7a:74:03:5d:b5:3b:00:86:ed:aa:47:86: 70:88:01:61:db:c3:59:83:85:4e:91:7e:6e:c6:39:5b:9b:c3: 86:ff:0c:b9 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUMmEKfDR5Szpo3j3POpp5A8R3kiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMTIxNjAxMjdaFw0yNzAxMTExNjA2MjdaMDMxMTAvBgNV BAMTKEFDNDU4OEM0OTQyMDlDOTEwREZBNEFBNjQ1Q0RDQ0FDN0U2NDRENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZKJvHB8xdbUwPaVvJDoTuPOz 0AtZgpDaaZLgKAV+UMw/kmQBI8Mjdk/OMFYJ9RAqnPkijw23o3mRpB3WT8kryceR sdQB5nuuLLj+D3VXGJPqSaNR13Rdm0o/CAhNwNtd3YDuQcOSUpkIFCsfeAsTnTnQ NXKNCwNCZ57X8ifo7GWmKfo6CLp19IGWebFh5XWMlUa+Cpa8fZjOqOnE+r2gFSTW eSicqehKKDp0cYzPIRZkoN+VukpjkWXlr0o6GO1s3o8LIMv/O/r9voqojJOcD2R5 Uz8zFTViKVgLbGkxN2vQkTrF3aTo6I1goqHCUAtlslwlmYkO7Bi7lKCw5tExAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSsRYjElCCckQ36 SqZFzcysfmRNWDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGhZ TTVqN1k4WDdYYW9RNnNQbXJMdEZTVFpZaVpFcFBkc3o5RXpmY2EyTXIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ho WU01ajdZOFg3WGFvUTZzUG1yTHRGU1RaWWlaRXBQZHN6OUV6ZmNhMk1yLzAvQUM0 NTg4QzQ5NDIwOUM5MTBERkE0QUE2NDVDRENDQUM3RTY0NEQ1OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsUiUAwQCv/DEMA0EAgACMAcDBQAoBBEcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOUjANBgkqhkiG9w0BAQsFAAOCAQEAQxU7KcLw r3q2vqHO1E5Ctk72MgxuzzdGVb7ozRCk5E9QimdzIvctC7ohMQ+O9C8txWl86stv bQFujA229KaD0AJ0PpYB+mVtuIWAs4Z7bzfnC52ZSSlvps2F/RLDjBoOu03UhlwE OyxVaVN+2xQcpp2iiila9tds32/NNx0g0skTQKyal3Cj6WR/jxqDBwa9pSop528C GCoppGWIr1eR3uADLfcLYYeV111mRydY45eoPVF/pjmNL1ZTWnVwgR24yCeur617 46DfZhJYYt+AhYrEJMFPZBbzQzROg8AoenQDXbU7AIbtqkeGcIgBYdvDWYOFTpF+ bsY5W5vDhv8MuQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:52 2026 by rpki-client