This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C6D32F231785FEA26541B55E3CF768D365266570.cer File: C6D32F231785FEA26541B55E3CF768D365266570.cer (raw, json) Hash identifier: Qg45alnZXJ/UHGmX9amm5BfuFqv5QwV4Tz9Fdlw+3kU= Subject key identifier: C6:D3:2F:23:17:85:FE:A2:65:41:B5:5E:3C:F7:68:D3:65:26:65:70 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7DF09756A16EB518F3CA5D813D4D65DA3E7DC0D0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/C6D32F231785FEA26541B55E3CF768D365266570.mft caRepository: rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Jun 2025 07:56:17 +0000 Certificate not after: Wed 03 Jun 2026 08:01:17 +0000 Subordinate resources: AS: 61602 AS: 265950 IP: 164.163.108.0/22 IP: 177.124.156.0/22 IP: 2804:404c::/32 IP: 2804:7004::/32 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f0:97:56:a1:6e:b5:18:f3:ca:5d:81:3d:4d:65:da:3e:7d:c0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 4 07:56:17 2025 GMT Not After : Jun 3 08:01:17 2026 GMT Subject: CN=C6D32F231785FEA26541B55E3CF768D365266570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:9a:88:25:54:3e:70:84:3d:c6:b8:06:1f: 3c:2f:6d:0f:61:93:c4:38:7e:f4:d8:59:8e:e7:34: 81:85:c6:f1:80:1c:5f:17:68:1b:af:71:95:1d:cd: d6:6e:29:39:ef:ef:6b:44:a5:af:29:bb:0e:7d:a8: f0:9c:29:ce:cc:3a:17:c7:4b:4e:82:01:f4:2f:60: 83:32:fe:59:d5:dc:79:82:e3:e1:37:17:23:25:8a: a2:cd:aa:24:3a:62:c3:3d:12:31:38:d0:9d:c9:d7: 3f:f5:f7:8e:e2:41:7e:66:ef:7c:0d:88:47:84:84: 72:56:92:14:94:75:de:4e:19:8a:9d:4c:48:58:71: a2:6d:af:ff:c6:fe:fd:3d:18:d2:cb:e3:f6:50:de: 01:a4:dd:b6:d9:27:2b:c1:5f:c6:5a:30:97:d5:b9: a1:0f:a0:47:61:a1:23:1b:e0:29:77:c2:d4:52:b6: 56:dd:a6:af:3f:af:48:39:6d:eb:5b:9a:22:90:17: e4:3b:ec:21:25:e6:f1:1e:e9:e1:35:0f:06:f7:e9: a8:1f:80:34:d0:d1:ab:f8:cb:cb:ea:f2:b9:bf:73: 60:0c:46:4b:9e:60:1e:41:2d:53:89:a5:b3:c8:17: 88:ee:d0:40:fd:9b:70:4b:50:7f:64:5c:7b:40:af: 85:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:D3:2F:23:17:85:FE:A2:65:41:B5:5E:3C:F7:68:D3:65:26:65:70 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/C6D32F231785FEA26541B55E3CF768D365266570.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.108.0/22 177.124.156.0/22 IPv6: 2804:404c::/32 2804:7004::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61602 265950 Signature Algorithm: sha256WithRSAEncryption 6c:00:6a:6b:f6:19:07:86:3c:ef:17:d8:b9:c4:c5:f1:09:51: 51:04:7c:19:11:96:22:46:5e:0d:90:aa:c2:eb:a0:e7:c6:9e: 58:be:01:94:0d:4b:42:e0:29:71:7b:31:86:f0:b6:6a:e1:a7: ff:f4:0b:9a:85:20:bd:00:7b:2f:4c:9b:7a:db:9a:9b:fb:86: 1f:0e:ea:87:4e:28:74:cf:c8:b4:f2:52:af:7a:f3:cd:72:10: a5:17:79:d2:50:f1:17:3f:2e:7f:3c:45:ec:0e:46:1e:35:27: f5:21:e9:66:f6:d1:36:c5:94:3a:24:3c:73:90:bc:c9:e3:da: 0d:97:0e:9f:7d:8f:9f:a9:f8:55:2e:bb:69:b0:27:69:80:d8: 61:e2:88:43:ca:1e:b6:49:14:15:d3:93:02:69:65:38:91:f5: 0b:21:d2:9c:c3:87:b1:4e:f2:4b:ee:a3:52:e6:6c:d8:2e:e9: c1:cf:41:e2:8e:9d:2f:b8:5e:3b:4a:4a:01:a1:73:3c:34:1c: f0:04:40:ba:55:bd:a3:c5:9e:32:03:64:14:e9:11:0b:1d:0c: f3:ad:56:97:1d:8d:1a:35:27:5b:8a:b7:b2:e6:18:51:62:5a: ba:ac:f0:4c:a4:45:34:44:9b:af:57:f8:a0:7e:e5:61:cc:12: db:e8:3a:47 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUffCXVqFutRjzyl2BPU1l2j59wNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDQwNzU2MTdaFw0yNjA2MDMwODAxMTdaMDMxMTAvBgNV BAMTKEM2RDMyRjIzMTc4NUZFQTI2NTQxQjU1RTNDRjc2OEQzNjUyNjY1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJb5qIJVQ+cIQ9xrgGHzwvbQ9h k8Q4fvTYWY7nNIGFxvGAHF8XaBuvcZUdzdZuKTnv72tEpa8puw59qPCcKc7MOhfH S06CAfQvYIMy/lnV3HmC4+E3FyMliqLNqiQ6YsM9EjE40J3J1z/1947iQX5m73wN iEeEhHJWkhSUdd5OGYqdTEhYcaJtr//G/v09GNLL4/ZQ3gGk3bbZJyvBX8ZaMJfV uaEPoEdhoSMb4Cl3wtRStlbdpq8/r0g5betbmiKQF+Q77CEl5vEe6eE1Dwb36agf gDTQ0av4y8vq8rm/c2AMRkueYB5BLVOJpbPIF4ju0ED9m3BLUH9kXHtAr4UnAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTG0y8jF4X+omVB tV4892jTZSZlcDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnk1 UTlDOUx3ZnJlU0xrSzhYc01GN3hBanc1aDlLcWp5Ym1OVnZQd2c0dUMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ5 NVE5QzlMd2ZyZVNMa0s4WHNNRjd4QWp3NWg5S3FqeWJtTlZ2UHdnNHVDLzAvQzZE MzJGMjMxNzg1RkVBMjY1NDFCNTVFM0NGNzY4RDM2NTI2NjU3MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEH AQH/BCwwKjASBAIAATAMAwQCpKNsAwQCsXycMBQEAgACMA4DBQAoBEBMAwUAKARw BDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA8KICAwQO3jANBgkqhkiG9w0BAQsF AAOCAQEAbABqa/YZB4Y87xfYucTF8QlRUQR8GRGWIkZeDZCqwuug58aeWL4BlA1L QuApcXsxhvC2auGn//QLmoUgvQB7L0ybetuam/uGHw7qh04odM/ItPJSr3rzzXIQ pRd50lDxFz8ufzxF7A5GHjUn9SHpZvbRNsWUOiQ8c5C8yePaDZcOn32Pn6n4VS67 abAnaYDYYeKIQ8oetkkUFdOTAmllOJH1CyHSnMOHsU7yS+6jUuZs2C7pwc9B4o6d L7heO0pKAaFzPDQc8ARAulW9o8WeMgNkFOkRCx0M861Wlx2NGjUnW4q3suYYUWJa uqzwTKRFNESbr1f4oH7lYcwS2+g6Rw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:45:18 2025 by rpki-client