This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CFA1CA49218661A39B46B40A14BAB96BE84A322C.cer File: CFA1CA49218661A39B46B40A14BAB96BE84A322C.cer (raw, json) Hash identifier: letgJHqCJdIf2Rgw72B8+Fh5KCnd9abZ3+NI4rZatnI= Subject key identifier: CF:A1:CA:49:21:86:61:A3:9B:46:B4:0A:14:BA:B9:6B:E8:4A:32:2C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7651E3593F7A9DD4FAED65F7673EA51E435595E8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/CFA1CA49218661A39B46B40A14BAB96BE84A322C.mft caRepository: rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 08 Jan 2026 17:36:18 +0000 Certificate not after: Thu 07 Jan 2027 17:41:18 +0000 Subordinate resources: AS: 268556 IP: 45.163.172.0/22 IP: 2804:5300::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Jan 2026 03:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:51:e3:59:3f:7a:9d:d4:fa:ed:65:f7:67:3e:a5:1e:43:55:95:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 8 17:36:18 2026 GMT Not After : Jan 7 17:41:18 2027 GMT Subject: CN=CFA1CA49218661A39B46B40A14BAB96BE84A322C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:54:d2:ee:53:7d:07:54:27:16:0d:94:39:0b: 1d:d6:cd:9a:bb:f0:9c:ae:60:39:89:e9:5e:77:ff: 5b:28:c8:50:c7:2a:ba:e9:8e:f0:88:59:05:8b:55: e5:12:6c:cb:0e:ef:3c:0c:2f:8f:d0:21:2e:66:6d: 30:0a:2c:bb:54:55:23:21:f1:8c:be:f3:22:14:b8: 56:6b:10:49:f3:cf:05:12:9c:27:3e:e7:81:73:14: 24:e0:61:71:52:ea:46:e0:75:9c:69:30:d0:82:1c: 0a:5b:d5:9c:03:55:4d:eb:7f:55:66:d4:65:68:94: ae:9a:c9:11:b5:24:c1:d2:3f:38:7c:10:51:5a:31: ff:d7:ab:34:9e:cb:6c:a7:81:39:1c:c9:c8:fe:3b: 9a:89:27:06:eb:3c:73:85:0e:01:cb:4d:e0:f9:31: 0a:9d:15:bd:d5:7d:97:ec:03:70:fa:38:21:c2:40: a5:c4:24:a7:91:c9:c1:42:ca:0b:c6:ce:08:7d:fc: ee:a8:96:8a:1e:f5:ba:97:04:5e:7a:4e:4b:11:ff: f8:4c:7a:f7:85:a4:61:2c:ee:89:53:58:3c:8f:9f: f6:5b:d8:7c:cc:80:64:4c:8f:22:c3:d3:36:0d:e3: 3f:8d:11:a5:fc:d7:e0:2d:d4:0d:5b:31:47:c5:2e: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:A1:CA:49:21:86:61:A3:9B:46:B4:0A:14:BA:B9:6B:E8:4A:32:2C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/CFA1CA49218661A39B46B40A14BAB96BE84A322C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.163.172.0/22 IPv6: 2804:5300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268556 Signature Algorithm: sha256WithRSAEncryption 91:a5:d9:87:8f:53:a5:dc:85:60:e6:e4:ae:d4:3b:84:1a:9e: 7b:e8:1f:27:c9:36:9f:26:09:ee:58:ff:02:ac:20:8e:55:6b: 66:df:14:7b:ce:f5:08:64:b8:f7:ba:53:fb:72:60:56:ef:aa: f9:45:00:a5:d7:6d:b7:e2:64:06:0d:89:95:2a:cf:28:cc:6b: 2f:e7:c8:c3:14:7d:04:54:29:b0:22:a6:27:4f:bf:bc:bd:a0: ad:65:82:cb:30:9c:68:09:48:78:ef:8f:f4:f7:1f:b8:0e:8e: 75:14:f2:1e:80:21:df:35:67:46:8b:a3:22:a8:2a:99:bc:3c: 9d:9e:a8:96:0a:f9:7e:34:94:c0:a9:a7:ee:a7:b6:6e:e2:84: 2d:f1:cf:7f:56:f4:08:df:f3:fb:b7:47:dc:4a:aa:b7:b9:e9: cf:06:f0:68:65:10:bc:71:15:1b:dd:3e:74:50:c6:35:82:82: e0:b2:a2:2a:79:a1:39:49:ce:b8:ed:f3:b6:b2:14:38:20:71: 70:ce:9d:3a:9e:e2:cb:c9:a3:0e:0d:32:34:ca:99:44:6a:4c: f6:ef:7e:3d:49:f7:bb:d5:6a:76:ca:b9:d4:3f:c7:19:62:0f: 2b:e5:f2:7d:63:7c:cc:8a:35:af:e9:16:d1:29:17:c8:d9:ad: a0:26:3f:c3 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUdlHjWT96ndT67WX3Zz6lHkNVlegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMDgxNzM2MThaFw0yNzAxMDcxNzQxMThaMDMxMTAvBgNV BAMTKENGQTFDQTQ5MjE4NjYxQTM5QjQ2QjQwQTE0QkFCOTZCRTg0QTMyMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVNLuU30HVCcWDZQ5Cx3WzZq7 8JyuYDmJ6V53/1soyFDHKrrpjvCIWQWLVeUSbMsO7zwML4/QIS5mbTAKLLtUVSMh 8Yy+8yIUuFZrEEnzzwUSnCc+54FzFCTgYXFS6kbgdZxpMNCCHApb1ZwDVU3rf1Vm 1GVolK6ayRG1JMHSPzh8EFFaMf/XqzSey2yngTkcycj+O5qJJwbrPHOFDgHLTeD5 MQqdFb3VfZfsA3D6OCHCQKXEJKeRycFCygvGzgh9/O6olooe9bqXBF56TksR//hM eveFpGEs7olTWDyPn/Zb2HzMgGRMjyLD0zYN4z+NEaX81+At1A1bMUfFLmzJAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPocpJIYZho5tG tAoUurlr6EoyLDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vdXhQ cXNIeDVacko3TUhUMUo0aGJIWk1yWEJXSlpLNHpTeW13QzNDeU0zaC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vdXhQ cXNIeDVacko3TUhUMUo0aGJIWk1yWEJXSlpLNHpTeW13QzNDeU0zaC8wL0NGQTFD QTQ5MjE4NjYxQTM5QjQ2QjQwQTE0QkFCOTZCRTg0QTMyMkMubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAi2jrDANBAIAAjAHAwUAKARTADAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEGQwwDQYJKoZIhvcNAQELBQADggEBAJGl2YePU6XchWDm5K7U O4QannvoHyfJNp8mCe5Y/wKsII5Va2bfFHvO9QhkuPe6U/tyYFbvqvlFAKXXbbfi ZAYNiZUqzyjMay/nyMMUfQRUKbAipidPv7y9oK1lgsswnGgJSHjvj/T3H7gOjnUU 8h6AId81Z0aLoyKoKpm8PJ2eqJYK+X40lMCpp+6ntm7ihC3xz39W9Ajf8/u3R9xK qre56c8G8GhlELxxFRvdPnRQxjWCguCyoip5oTlJzrjt87ayFDggcXDOnTqe4svJ ow4NMjTKmURqTPbvfj1J97vVanbKudQ/xxliDyvl8n1jfMyKNa/pFtEpF8jZraAm P8M= -----END CERTIFICATE-----Generated at Mon Jan 26 01:25:38 2026 by rpki-client