This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
File: F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer (raw, json)
Hash identifier: RJxxfEcXzy3B5ac6x4xQzYBHL+4TP6clPFAXZSjL3O8=
Subject key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3AF30EECEF7EDA191D06872C4425428AAC9FE781
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
caRepository: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 21 Jan 2026 12:37:59 +0000
Certificate not after: Wed 20 Jan 2027 12:42:59 +0000
Subordinate resources: AS: 28220
IP: 45.4.64.0/22
IP: 45.175.188.0/22
IP: 45.232.88.0/22
IP: 45.238.116.0/22
IP: 131.108.228.0/22
IP: 131.196.76.0/22
IP: 131.221.68.0/22
IP: 138.0.100.0/22
IP: 138.117.124.0/22
IP: 138.121.220.0/22
IP: 138.122.236.0/22
IP: 138.255.216.0/22
IP: 143.255.112.0/22
IP: 160.238.220.0/22
IP: 168.121.52.0/22
IP: 168.121.148.0/22
IP: 168.227.44.0/22
IP: 168.227.108.0/22
IP: 168.228.68.0/22
IP: 168.228.128.0/22
IP: 168.232.116.0/22
IP: 170.0.204.0/22
IP: 170.82.92.0/22
IP: 170.82.132.0/22
IP: 170.245.100.0/22
IP: 170.246.68.0/22
IP: 170.247.52.0/22
IP: 177.8.48.0/21
IP: 177.53.128.0/21
IP: 177.55.48.0/20
IP: 177.66.64.0/21
IP: 177.67.0.0/21
IP: 177.70.128.0/20
IP: 177.75.192.0/19
IP: 177.87.144.0/21
IP: 177.89.0.0/16
IP: 177.125.184.0/21
IP: 177.130.192.0/19
IP: 177.137.192.0/20
IP: 179.96.192.0/21
IP: 179.96.240.0/20
IP: 179.190.128.0/17
IP: 179.191.128.0/19
IP: 186.192.16.0/20
IP: 186.193.96.0/20
IP: 186.208.208.0/21
IP: 186.219.144.0/20
IP: 186.233.72.0/21
IP: 186.235.0.0/20
IP: 186.236.192.0/19
IP: 186.251.112.0/21
IP: 187.18.128.0/17
IP: 187.45.48.0/20
IP: 187.49.192.0/20
IP: 187.60.64.0/19
IP: 187.61.128.0/17
IP: 187.73.192.0/19
IP: 187.86.96.0/20
IP: 187.87.112.0/20
IP: 187.95.48.0/20
IP: 187.95.176.0/20
IP: 187.108.64.0/20
IP: 187.108.96.0/20
IP: 187.109.176.0/20
IP: 187.110.208.0/20
IP: 187.111.224.0/19
IP: 189.45.16.0/20
IP: 189.45.64.0/18
IP: 189.50.144.0/20
IP: 189.124.128.0/17
IP: 191.6.80.0/21
IP: 191.37.144.0/21
IP: 191.241.40.0/21
IP: 192.141.196.0/22
IP: 200.9.160.0/22
IP: 200.94.240.0/22
IP: 200.233.80.0/20
IP: 201.148.188.0/22
IP: 201.149.120.0/22
IP: 201.158.40.0/21
IP: 2804:54::/32
IP: 2804:880::/32
IP: 2804:a3c::/32
IP: 2804:fec::/32
IP: 2804:1d2c::/32
IP: 2804:2140::/32
IP: 2804:4f60::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f3:0e:ec:ef:7e:da:19:1d:06:87:2c:44:25:42:8a:ac:9f:e7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 21 12:37:59 2026 GMT
Not After : Jan 20 12:42:59 2027 GMT
Subject: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:4b:65:a4:26:52:9a:2d:35:b3:54:9f:6a:
85:43:48:d3:62:10:e7:cd:61:23:e5:4b:d0:e5:9f:
0a:06:7b:ca:66:7c:b2:0b:38:3e:a9:4b:c2:2e:b6:
a8:30:d6:33:97:e1:b0:0c:f2:4f:b7:08:cb:17:2b:
70:53:76:3c:20:dc:5c:17:22:02:e7:b5:ce:cd:af:
c9:37:6f:d7:21:07:9e:6e:4e:e8:c7:ca:b7:8b:d9:
4c:0d:fc:bf:b6:1e:2a:fe:a1:81:56:9e:e6:bf:45:
04:c1:31:b3:8e:7e:05:8b:bc:91:31:c1:10:59:77:
32:44:b6:96:0c:b5:97:cd:53:4a:92:9d:76:b8:93:
85:0c:af:b3:85:cd:3b:00:d5:a8:68:4f:e2:40:5e:
ce:f4:bb:be:05:7a:c9:20:0e:aa:a8:ff:b1:75:57:
0c:72:3f:7c:84:c9:7a:34:20:a6:27:00:4b:18:cd:
7a:20:da:6d:f0:47:89:97:0b:30:70:de:cb:5e:a0:
dd:25:16:10:c0:a3:a7:7e:e4:5c:2a:60:b6:9e:19:
3b:c7:b8:48:ce:58:af:45:78:ed:49:9d:12:46:d5:
1f:6d:18:c8:50:c7:b7:4c:c9:a4:3e:6c:cf:b6:e0:
89:7a:88:92:3f:ad:12:d5:e9:fa:1a:62:3d:3e:3f:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.64.0/22
45.175.188.0/22
45.232.88.0/22
45.238.116.0/22
131.108.228.0/22
131.196.76.0/22
131.221.68.0/22
138.0.100.0/22
138.117.124.0/22
138.121.220.0/22
138.122.236.0/22
138.255.216.0/22
143.255.112.0/22
160.238.220.0/22
168.121.52.0/22
168.121.148.0/22
168.227.44.0/22
168.227.108.0/22
168.228.68.0/22
168.228.128.0/22
168.232.116.0/22
170.0.204.0/22
170.82.92.0/22
170.82.132.0/22
170.245.100.0/22
170.246.68.0/22
170.247.52.0/22
177.8.48.0/21
177.53.128.0/21
177.55.48.0/20
177.66.64.0/21
177.67.0.0/21
177.70.128.0/20
177.75.192.0/19
177.87.144.0/21
177.89.0.0/16
177.125.184.0/21
177.130.192.0/19
177.137.192.0/20
179.96.192.0/21
179.96.240.0/20
179.190.128.0/17
179.191.128.0/19
186.192.16.0/20
186.193.96.0/20
186.208.208.0/21
186.219.144.0/20
186.233.72.0/21
186.235.0.0/20
186.236.192.0/19
186.251.112.0/21
187.18.128.0/17
187.45.48.0/20
187.49.192.0/20
187.60.64.0/19
187.61.128.0/17
187.73.192.0/19
187.86.96.0/20
187.87.112.0/20
187.95.48.0/20
187.95.176.0/20
187.108.64.0/20
187.108.96.0/20
187.109.176.0/20
187.110.208.0/20
187.111.224.0/19
189.45.16.0/20
189.45.64.0/18
189.50.144.0/20
189.124.128.0/17
191.6.80.0/21
191.37.144.0/21
191.241.40.0/21
192.141.196.0/22
200.9.160.0/22
200.94.240.0/22
200.233.80.0/20
201.148.188.0/22
201.149.120.0/22
201.158.40.0/21
IPv6:
2804:54::/32
2804:880::/32
2804:a3c::/32
2804:fec::/32
2804:1d2c::/32
2804:2140::/32
2804:4f60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28220
Signature Algorithm: sha256WithRSAEncryption
16:a3:c6:3b:8d:a6:42:c7:17:25:62:75:dc:18:8d:60:0b:2a:
a0:29:f5:b2:61:7b:bb:33:0c:2e:ad:2d:4d:10:84:95:2c:e6:
00:27:9a:81:66:6e:4e:e7:d9:6e:25:eb:9f:27:d1:b6:c4:cf:
0e:3c:6d:5d:1e:d6:5c:c3:ed:cb:37:5b:0b:fe:e8:06:d4:ca:
0a:e5:88:c9:02:50:30:93:ba:3c:18:df:0b:eb:b3:8c:db:14:
0a:3e:7e:82:1f:eb:17:49:c5:c1:6a:7a:61:66:c4:80:cb:80:
3e:92:51:fe:ea:f5:98:16:81:6b:ff:b5:39:a6:47:25:79:69:
ef:20:e6:95:01:04:81:15:d5:ef:27:a5:1b:00:ad:8b:a6:ce:
41:d3:8e:dd:4e:3e:59:d7:9b:90:bf:58:92:8a:a6:91:02:d3:
04:aa:04:4b:96:32:8d:3c:e2:13:f6:3a:91:a9:d0:ea:79:be:
7d:73:a0:53:1c:3b:68:aa:7e:43:45:b6:96:2c:3c:27:0e:03:
63:46:f0:66:5f:18:7e:96:a2:35:c1:e3:63:ac:97:3a:9b:34:
41:fa:fa:d4:05:b3:9a:f1:c3:bb:13:11:ab:68:35:8f:fc:55:
3c:68:fe:d7:1d:f6:a1:d1:a3:47:59:c7:49:34:7f:fa:80:59:
f9:82:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:14:59 2026 by rpki-client