This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/344D475815D7589B4DF7A89667E09AD7156C9FA3.cer File: 344D475815D7589B4DF7A89667E09AD7156C9FA3.cer (raw, json) Hash identifier: +hICK+YqqQLcshy3O9gGcwnpt73ZVUfshfAjwwBP7tc= Subject key identifier: 34:4D:47:58:15:D7:58:9B:4D:F7:A8:96:67:E0:9A:D7:15:6C:9F:A3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 49964BBF51097AE08747F569A8AAC628B7AD0FA9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/344D475815D7589B4DF7A89667E09AD7156C9FA3.mft caRepository: rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 22 Dec 2025 19:32:18 +0000 Certificate not after: Mon 21 Dec 2026 19:37:18 +0000 Subordinate resources: AS: 52675 IP: 177.66.180.0/22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 13:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:96:4b:bf:51:09:7a:e0:87:47:f5:69:a8:aa:c6:28:b7:ad:0f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 22 19:32:18 2025 GMT Not After : Dec 21 19:37:18 2026 GMT Subject: CN=344D475815D7589B4DF7A89667E09AD7156C9FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:28:7a:21:fb:93:d3:7c:43:f2:53:1b:b9: eb:39:a6:56:3e:03:d6:97:fc:f8:96:bb:d5:f7:d5: e4:41:de:ea:87:50:a3:4d:9c:e8:5c:b0:34:8f:f4: 0d:c0:a0:63:5b:9c:e4:50:62:79:d5:fb:2f:0d:4c: 56:24:db:ea:ee:2d:10:6f:67:63:aa:d6:89:43:79: 08:5e:62:9a:75:cf:cc:52:73:a9:eb:cc:52:55:3d: 6c:b5:e3:07:a2:7d:43:34:12:88:70:71:12:c4:79: 3b:e6:0c:b0:a2:86:e1:68:75:f8:65:e8:88:31:f0: b0:60:9a:ab:bb:30:fe:f8:db:b0:55:82:84:cc:7a: d3:64:02:f2:84:90:2c:5f:63:bb:ad:1d:80:7d:ba: 59:c4:6a:a5:8a:3c:df:32:2a:c2:b4:67:1d:7e:81: 09:e6:f4:99:93:9c:6e:9f:73:c1:6a:ec:6f:a1:d1: 24:09:3f:6f:f5:16:25:76:3a:44:3d:11:4d:4c:90: 4b:c6:9b:bf:4e:bd:06:54:10:92:ec:76:66:d4:0a: 2b:b0:a9:98:8d:65:95:62:2f:4a:5a:b6:ed:65:11: e8:5b:a2:00:dd:38:0e:40:45:97:5e:9b:62:70:b3: 6f:61:ca:ae:5a:c5:83:6d:df:ef:eb:d9:f7:11:04: 86:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:4D:47:58:15:D7:58:9B:4D:F7:A8:96:67:E0:9A:D7:15:6C:9F:A3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/344D475815D7589B4DF7A89667E09AD7156C9FA3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.66.180.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52675 Signature Algorithm: sha256WithRSAEncryption b4:20:93:f2:f9:a0:58:17:c8:1c:26:00:59:66:e7:83:1e:f1: 83:07:d6:57:d1:a3:03:2c:8c:9c:a6:75:b1:de:c7:5c:23:65: 1c:35:b2:eb:b4:f1:07:33:16:06:9c:6a:b1:62:c2:bc:57:bc: 8f:70:61:92:0c:c6:6d:dc:b1:da:e6:0d:4d:b4:12:f3:f5:39: b4:39:29:cb:54:85:68:9b:03:8e:9f:5a:56:bf:02:21:52:33: 97:cd:80:41:17:ec:ea:96:00:2d:b4:fb:cf:68:8f:ca:1e:6a: 1b:bb:2a:c8:36:4a:55:21:f1:22:39:c2:a6:a3:a7:d5:78:b7: cf:d0:6b:20:14:3c:24:aa:2b:0c:b1:06:51:ff:78:df:6f:6c: cd:ff:b7:c8:65:0d:a7:68:c2:8e:72:96:56:ec:67:ab:e0:5c: b3:9d:81:9b:73:a0:85:be:08:03:85:6a:57:0a:fa:85:af:32: 5c:29:3a:e7:e7:d4:f3:67:3b:c6:8c:ba:8b:d2:9c:3e:f8:a6: 74:2a:70:f4:15:bc:55:11:ca:09:f6:e7:52:fb:8a:fc:6f:6e: 01:1e:90:70:91:ac:9f:5b:58:1f:ac:8f:59:4b:fd:fa:3c:1e: 4a:49:db:37:9d:39:6b:7f:ad:52:ee:d0:43:e2:d8:a6:b0:25: 9d:f5:27:25 -----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgIUSZZLv1EJeuCHR/VpqKrGKLetD6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMjIxOTMyMThaFw0yNjEyMjExOTM3MThaMDMxMTAvBgNV BAMTKDM0NEQ0NzU4MTVENzU4OUI0REY3QTg5NjY3RTA5QUQ3MTU2QzlGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsoih6IfuT03xD8lMbues5plY+ A9aX/PiWu9X31eRB3uqHUKNNnOhcsDSP9A3AoGNbnORQYnnV+y8NTFYk2+ruLRBv Z2Oq1olDeQheYpp1z8xSc6nrzFJVPWy14weifUM0EohwcRLEeTvmDLCihuFodfhl 6Igx8LBgmqu7MP7427BVgoTMetNkAvKEkCxfY7utHYB9ulnEaqWKPN8yKsK0Zx1+ gQnm9JmTnG6fc8Fq7G+h0SQJP2/1FiV2OkQ9EU1MkEvGm79OvQZUEJLsdmbUCiuw qZiNZZViL0patu1lEehbogDdOA5ARZdem2Jws29hyq5axYNt3+/r2fcRBIY1AgMB AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0TUdYFddYm033 qJZn4JrXFWyfozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Bl RG9TUWt0SEhYbjZFZ25FRXQ1UXBTWkVTdjFMaXJ2dUVRNjR3OWhKd04vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nw ZURvU1FrdEhIWG42RWduRUV0NVFwU1pFU3YxTGlydnVFUTY0dzloSndOLzAvMzQ0 RDQ3NTgxNUQ3NTg5QjRERjdBODk2NjdFMDlBRDcxNTZDOUZBMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCsUK0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDN wzANBgkqhkiG9w0BAQsFAAOCAQEAtCCT8vmgWBfIHCYAWWbngx7xgwfWV9GjAyyM nKZ1sd7HXCNlHDWy67TxBzMWBpxqsWLCvFe8j3BhkgzGbdyx2uYNTbQS8/U5tDkp y1SFaJsDjp9aVr8CIVIzl82AQRfs6pYALbT7z2iPyh5qG7sqyDZKVSHxIjnCpqOn 1Xi3z9BrIBQ8JKorDLEGUf94329szf+3yGUNp2jCjnKWVuxnq+Bcs52Bm3Oghb4I A4VqVwr6ha8yXCk65+fU82c7xoy6i9KcPvimdCpw9BW8VRHKCfbnUvuK/G9uAR6Q cJGsn1tYH6yPWUv9+jweSknbN505a3+tUu7QQ+LYprAlnfUnJQ== -----END CERTIFICATE-----Generated at Wed Dec 24 12:31:04 2025 by rpki-client