This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer File: AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer (raw, json) Hash identifier: 0tPElphKE5GIxh/az3QGJweOBxWzApwb5C0b48zoP5c= Subject key identifier: AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5950A11469CE9683C93F1C186E5C7F15090D1618 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.mft caRepository: rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 23 Jan 2026 16:38:07 +0000 Certificate not after: Fri 22 Jan 2027 16:43:07 +0000 Subordinate resources: AS: 61793 IP: 201.130.28.0/22 IP: 2804:1968::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 14:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:50:a1:14:69:ce:96:83:c9:3f:1c:18:6e:5c:7f:15:09:0d:16:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 23 16:38:07 2026 GMT Not After : Jan 22 16:43:07 2027 GMT Subject: CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:76:ee:fd:d3:15:75:5c:ae:51:9b:91:ab: de:9a:7c:fa:2c:c1:45:56:e4:fa:34:b2:f2:27:a0: 27:b9:27:73:7d:98:0f:69:93:1e:3a:33:24:10:46: bf:6c:5a:e7:8f:be:5a:43:66:db:7f:e5:4a:74:d7: 14:56:b3:35:26:52:70:64:15:f9:35:78:60:3d:b9: 60:91:51:ea:7e:c8:23:fc:fc:8c:e7:a8:90:49:40: d1:34:62:89:1c:26:33:01:dc:f6:d9:28:a7:80:52: 36:0f:ff:b8:d1:8b:7c:a2:70:1b:57:0b:c4:19:00: 32:52:12:b7:9e:98:e3:ab:48:03:bf:82:6a:28:6a: 6e:c5:1f:06:00:0a:17:c0:16:37:19:3d:45:af:57: ca:62:4c:6e:9a:e5:76:ba:c9:a5:78:a5:61:a8:c1: a1:81:d3:d4:61:f3:dc:28:c8:9c:fb:f4:56:d9:41: a1:44:d7:40:aa:0c:0e:09:4c:4a:3f:76:23:f3:28: c1:dd:2b:93:e1:46:1a:7a:3a:b3:3c:49:a9:7e:44: 3a:d0:8e:46:ef:3e:0b:f0:2a:19:bc:bf:a5:fb:1a: 69:f6:a0:2b:23:53:06:bf:fd:f6:d3:2b:9c:62:32: 3f:f2:33:74:23:eb:ab:e1:ab:e0:2f:84:d8:7e:27: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.130.28.0/22 IPv6: 2804:1968::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61793 Signature Algorithm: sha256WithRSAEncryption 2d:e8:f8:ca:51:99:dd:c6:0a:de:8f:b1:eb:11:d1:fb:93:f9: 93:f0:77:bc:9e:7a:ae:60:07:5a:55:e0:a2:40:37:36:e5:ea: 95:e4:ed:f2:c7:c7:77:21:30:a4:47:c4:3c:2e:9f:76:c4:b5: 10:ae:4f:ce:05:02:1c:84:eb:60:b4:c9:56:cc:9b:96:31:76: 51:b0:6d:f2:47:c1:cb:e8:51:35:95:0c:21:81:72:e9:bd:e4: 3f:6e:6e:b5:19:58:ee:2b:e3:03:65:07:c6:ec:c8:98:76:64: ac:be:dd:f3:d3:64:f0:cb:5a:71:6d:9d:43:be:70:8d:f2:54: 94:63:fb:4f:f1:c1:b6:aa:ef:cb:23:db:12:4b:ad:d1:c1:ae: e0:46:f5:b6:c3:ca:57:93:4c:15:b7:0e:b3:1f:b4:5c:b5:06: 53:2c:c0:ac:e1:cc:34:0d:e6:87:cd:8f:62:52:b7:7d:2c:35: cb:a3:ce:e9:4f:31:94:74:8d:ba:08:ea:64:62:65:dd:e2:71: 47:06:85:d6:36:33:c9:00:5b:34:98:89:74:e3:50:0d:bc:22: bd:ea:5f:17:1a:d3:b6:40:ca:fa:35:21:02:8b:a3:30:10:cf: 93:f6:59:87:f6:5d:1e:8e:2a:e8:3a:32:db:ff:d4:5e:94:ac: 2a:d2:e5:73 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWVChFGnOloPJPxwYblx/FQkNFhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMjMxNjM4MDdaFw0yNzAxMjIxNjQzMDdaMDMxMTAvBgNV BAMTKEFGNzkxNEM3ODdBRkRDQkZDRkZGREQ5NDVDNUEwRUNGRDhEQkM2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/3bu/dMVdVyuUZuRq96afPos wUVW5Po0svInoCe5J3N9mA9pkx46MyQQRr9sWuePvlpDZtt/5Up01xRWszUmUnBk Ffk1eGA9uWCRUep+yCP8/IznqJBJQNE0YokcJjMB3PbZKKeAUjYP/7jRi3yicBtX C8QZADJSEreemOOrSAO/gmooam7FHwYAChfAFjcZPUWvV8piTG6a5Xa6yaV4pWGo waGB09Rh89woyJz79FbZQaFE10CqDA4JTEo/diPzKMHdK5PhRhp6OrM8Sal+RDrQ jkbvPgvwKhm8v6X7Gmn2oCsjUwa//fbTK5xiMj/yM3Qj66vhq+AvhNh+J2ctAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSveRTHh6/cv8// 3ZRcWg7P2NvGsTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWU1 S21kYm9EQ2NKbjY5b3F1OWtqaEhoeG52Z1hZYzZZTUh0VnBhRkd5UFEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzll NUttZGJvRENjSm42OW9xdTlramhIaHhudmdYWWM2WU1IdFZwYUZHeVBRLzAvQUY3 OTE0Qzc4N0FGRENCRkNGRkZERDk0NUM1QTBFQ0ZEOERCQzZCMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyYIcMA0EAgACMAcDBQAoBBloMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxYTANBgkqhkiG9w0BAQsFAAOCAQEALej4ylGZ3cYK3o+x 6xHR+5P5k/B3vJ56rmAHWlXgokA3NuXqleTt8sfHdyEwpEfEPC6fdsS1EK5PzgUC HITrYLTJVsybljF2UbBt8kfBy+hRNZUMIYFy6b3kP25utRlY7ivjA2UHxuzImHZk rL7d89Nk8MtacW2dQ75wjfJUlGP7T/HBtqrvyyPbEkut0cGu4Eb1tsPKV5NMFbcO sx+0XLUGUyzArOHMNA3mh82PYlK3fSw1y6PO6U8xlHSNugjqZGJl3eJxRwaF1jYz yQBbNJiJdONQDbwivepfFxrTtkDK+jUhAoujMBDPk/ZZh/ZdHo4q6Doy2//UXpSs KtLlcw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:23 2026 by rpki-client