This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer File: E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer (raw, json) Hash identifier: i759NmsIrTOPF0fcvTgaD+DdYNINHffO+uI1zyrquLo= Subject key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0F6FD646C39AD1D72C53C4F401FA4935ED28CE17 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.mft caRepository: rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 26 Sep 2025 11:33:25 +0000 Certificate not after: Fri 25 Sep 2026 11:38:25 +0000 Subordinate resources: AS: 28188 IP: 177.12.132.0/23 IP: 177.12.137.0 -- 177.12.140.255 IP: 177.12.142.0/23 IP: 177.12.152.0/21 IP: 189.89.224.0 -- 189.89.233.255 IP: 189.89.235.0/24 IP: 189.89.237.0 -- 189.89.239.255 IP: 189.89.241.0 -- 189.89.245.255 IP: 189.89.248.0/22 IP: 189.89.254.0/24 IP: 2804:2f8::/32 Validation: Failed, certificate revoked on Wed 01 Oct 2025 11:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6f:d6:46:c3:9a:d1:d7:2c:53:c4:f4:01:fa:49:35:ed:28:ce:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 26 11:33:25 2025 GMT Not After : Sep 25 11:38:25 2026 GMT Subject: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:d1:c2:95:bf:84:69:4f:d8:33:b0:48:12: 01:69:d5:63:24:f3:8c:a2:1d:69:e9:2b:4d:10:72: ef:b5:53:9f:04:bb:a5:01:3c:dc:74:f0:70:75:79: 11:ca:3d:27:6c:a4:de:c9:3e:5f:0b:9b:fe:cd:23: c6:7d:ec:eb:8f:cc:82:90:ae:f6:09:d2:9a:07:2f: 61:f1:15:7d:9d:d8:f3:42:95:eb:04:1f:5f:03:27: 22:0c:f1:dc:3e:5c:3b:ae:75:88:49:67:64:39:40: d6:03:b3:ca:54:41:a0:40:58:3e:78:d9:fd:91:74: 3b:35:c1:c4:b4:21:c5:ce:30:c8:aa:2e:5a:ca:8a: db:87:1e:c7:76:e7:f6:6a:b4:ad:5c:b1:62:29:3b: e9:3f:09:43:43:ef:c1:95:f7:21:f8:bd:b6:0b:be: 42:ba:28:38:21:b1:80:2e:46:49:45:10:03:cf:70: dc:ea:7a:b2:cf:b3:0e:29:7e:11:9c:5b:7d:d1:81: f3:f3:31:f8:f7:02:cd:97:a4:b5:3c:d4:2e:38:0b: 7a:7c:77:e9:1c:b6:81:9c:b4:04:93:96:5c:93:93: f0:e5:d4:90:e7:a7:f0:8e:27:02:56:b6:4d:87:e6: 38:ce:8c:2f:6f:22:88:1e:fe:ca:84:da:47:be:ea: 3b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.12.132.0/23 177.12.137.0-177.12.140.255 177.12.142.0/23 177.12.152.0/21 189.89.224.0-189.89.233.255 189.89.235.0/24 189.89.237.0-189.89.239.255 189.89.241.0-189.89.245.255 189.89.248.0/22 189.89.254.0/24 IPv6: 2804:2f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28188 Signature Algorithm: sha256WithRSAEncryption b6:d6:c3:c2:16:0b:e7:b6:10:e4:37:9e:68:e6:6c:da:2e:69: eb:f4:ef:ae:37:6f:32:9a:c7:2b:ee:37:e3:fa:2d:6d:03:6a: 88:83:da:8a:96:c0:e4:63:d9:64:1d:c0:de:d2:e2:be:eb:fa: 11:e9:83:9e:6b:d4:05:8f:e3:52:bf:57:2a:8f:f7:16:57:9e: 2a:8f:e6:b8:53:37:e3:5a:f5:45:58:a4:c9:19:d6:3c:62:b0: 25:4d:80:79:74:6a:ad:e7:24:50:b1:50:f4:00:60:88:cb:6b: 82:e3:f0:f8:b7:f3:a4:d8:cb:65:20:0b:82:d8:6d:13:60:e1: 97:75:ac:76:7f:d4:35:f5:d6:e9:12:28:e3:6e:17:28:f6:d5: 97:4c:4f:ea:6d:9f:c8:e5:7b:dd:91:b5:0c:94:4c:d6:9c:c0: d9:84:de:bd:d5:78:9a:ba:3c:09:e0:62:cc:3a:47:09:eb:e2: 40:a1:7c:d7:5c:8d:d4:d0:83:48:5c:fd:e3:b9:75:ad:83:87: c3:75:13:c6:68:aa:03:3f:d8:2b:21:31:15:8a:da:6f:5b:54: 1e:2f:b7:b7:48:d2:f9:32:46:54:57:bb:40:66:2b:29:9a:87: e7:b3:1a:fc:7e:22:c0:e0:86:ab:e1:1b:22:8b:3b:f8:69:1c: 6e:eb:38:3d -----BEGIN CERTIFICATE----- MIIGhDCCBWygAwIBAgIUD2/WRsOa0dcsU8T0AfpJNe0ozhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjYxMTMzMjVaFw0yNjA5MjUxMTM4MjVaMDMxMTAvBgNV BAMTKEUzOEFDMkNGQjI5OTcxNUIzQjZENTg2NkMxNUNGMzUzQkU0OEE3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuo9HClb+EaU/YM7BIEgFp1WMk 84yiHWnpK00Qcu+1U58Eu6UBPNx08HB1eRHKPSdspN7JPl8Lm/7NI8Z97OuPzIKQ rvYJ0poHL2HxFX2d2PNClesEH18DJyIM8dw+XDuudYhJZ2Q5QNYDs8pUQaBAWD54 2f2RdDs1wcS0IcXOMMiqLlrKituHHsd25/ZqtK1csWIpO+k/CUND78GV9yH4vbYL vkK6KDghsYAuRklFEAPPcNzqerLPsw4pfhGcW33RgfPzMfj3As2XpLU81C44C3p8 d+kctoGctASTllyTk/Dl1JDnp/COJwJWtk2H5jjOjC9vIoge/sqE2ke+6jvTAgMB AAGjggOOMIIDijAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjisLPsplxWztt WGbBXPNTvkincDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREtO dEdBN3NwZDRmNVIzUUFDYTU2cmN6WURReUFjODF3cW81Y2pCRFUzZC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREtO dEdBN3NwZDRmNVIzUUFDYTU2cmN6WURReUFjODF3cW81Y2pCRFUzZC8wL0UzOEFD MkNGQjI5OTcxNUIzQjZENTg2NkMxNUNGMzUzQkU0OEE3NzAubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBhAYIKwYBBQUHAQcB Af8EdTBzMGIEAgABMFwDBAGxDIQwDAMEALEMiQMEALEMjAMEAbEMjgMEA7EMmDAM AwQFvVngAwQBvVnoAwQAvVnrMAwDBAC9We0DBAS9WeAwDAMEAL1Z8QMEAb1Z9AME Ar1Z+AMEAL1Z/jANBAIAAjAHAwUAKAQC+DAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJuHDANBgkqhkiG9w0BAQsFAAOCAQEAttbDwhYL57YQ5DeeaOZs2i5p6/Tvrjdv MprHK+434/otbQNqiIPaipbA5GPZZB3A3tLivuv6EemDnmvUBY/jUr9XKo/3Flee Ko/muFM341r1RVikyRnWPGKwJU2AeXRqreckULFQ9ABgiMtrguPw+LfzpNjLZSAL gthtE2Dhl3Wsdn/UNfXW6RIo424XKPbVl0xP6m2fyOV73ZG1DJRM1pzA2YTevdV4 mro8CeBizDpHCeviQKF811yN1NCDSFz947l1rYOHw3UTxmiqAz/YKyExFYrab1tU Hi+3t0jS+TJGVFe7QGYrKZqH57Ma/H4iwOCGq+EbIos7+Gkcbus4PQ== -----END CERTIFICATE-----Generated at Wed Dec 17 15:28:06 2025 by rpki-client