This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.cer File: 40D5C3F55AE08CF30E4668447D1C5168A90E7C72.cer (raw, json) Hash identifier: tNFgJSWGMBqK5O5M0+FwP8U+bObx4k3EegxTVqDZxNU= Subject key identifier: 40:D5:C3:F5:5A:E0:8C:F3:0E:46:68:44:7D:1C:51:68:A9:0E:7C:72 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2D342A40DF6AD4DBF464E14F3BF3E8F1EA63E443 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.mft caRepository: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 05 Jan 2026 18:24:51 +0000 Certificate not after: Mon 04 Jan 2027 18:29:51 +0000 Subordinate resources: AS: 263086 IP: 138.99.40.0/22 IP: 186.208.248.0/22 IP: 2804:970::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Jan 2026 07:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:34:2a:40:df:6a:d4:db:f4:64:e1:4f:3b:f3:e8:f1:ea:63:e4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 5 18:24:51 2026 GMT Not After : Jan 4 18:29:51 2027 GMT Subject: CN=40D5C3F55AE08CF30E4668447D1C5168A90E7C72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:66:ae:df:88:2f:bd:13:5d:4c:26:6e:72:02: da:fd:4d:b4:38:0f:10:69:07:2c:56:59:61:44:cd: 01:06:13:23:b3:6c:4f:ef:5c:92:af:dd:23:67:fc: a3:34:35:8a:a5:77:1a:b1:c7:24:1a:cf:7d:c3:95: 2d:87:7c:3b:bd:df:9f:3c:f2:e6:c5:0e:39:e1:46: 10:43:ee:51:81:a9:0f:7b:51:1d:09:79:12:fd:7e: 46:8b:49:d2:7f:b9:0f:db:9c:05:3e:0a:a5:7b:3f: 15:78:ce:3a:90:c5:94:9e:a5:72:7f:f7:4b:0a:9d: 82:79:39:34:0a:d3:61:0a:9b:40:fc:3c:14:ee:20: 8b:cc:88:39:e4:85:e1:f9:51:be:cb:5e:4c:bf:44: 00:bf:b1:e0:90:94:ec:00:41:df:52:17:7a:f6:ec: c7:7d:39:1d:df:01:d5:fe:62:e5:fa:2c:1e:18:59: 36:d1:83:74:22:83:56:32:14:e4:e4:3f:07:9c:6e: 75:1b:fd:2b:75:d8:fc:7a:34:ff:f4:c9:69:de:e4: b1:5f:fc:2e:0c:1f:82:0c:85:ba:c3:38:ac:89:17: 06:f5:d9:50:69:3c:07:6c:ce:fd:53:d0:8a:d7:90: d4:6b:ec:89:26:7a:e1:3d:9e:6b:82:fb:f6:7f:bd: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:D5:C3:F5:5A:E0:8C:F3:0E:46:68:44:7D:1C:51:68:A9:0E:7C:72 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.40.0/22 186.208.248.0/22 IPv6: 2804:970::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263086 Signature Algorithm: sha256WithRSAEncryption d5:aa:43:3f:44:7d:87:55:5b:7b:4d:89:a8:94:50:2e:f3:70: 17:71:c9:4c:ea:fb:2f:0a:cb:22:19:f6:52:77:65:3b:3a:5c: 08:08:ed:3f:0f:6a:50:3e:62:94:89:f3:03:81:a9:c7:69:bf: c5:2f:4d:a1:07:f7:30:6b:f2:33:f0:a2:5f:91:11:79:83:bf: 7f:90:17:a6:66:05:60:7f:21:cf:a8:d3:59:47:43:e4:df:24: d5:e2:1a:d8:4f:f8:f1:47:da:25:a5:2d:12:d0:c6:9e:eb:d4: 08:93:9f:48:61:6c:5e:bb:61:95:ef:f0:3a:ce:27:2b:f7:ce: 4e:ee:51:0a:d2:62:16:6f:1a:1c:fa:01:ad:23:73:8b:40:26: aa:fe:de:3c:05:6f:41:cf:94:45:36:f4:2b:09:f9:6c:81:d9: f4:8d:78:bc:46:f7:fb:4f:d5:4e:aa:57:02:8e:0c:ab:94:89: 98:8d:4b:6c:9f:f7:11:e8:4e:fc:80:db:d0:dc:92:93:79:40: c5:48:ce:60:bb:a8:20:d7:4a:ee:31:0d:10:fb:38:47:0e:8c: a8:98:83:1c:da:7a:8f:fe:4e:c9:c9:1c:0e:f4:19:0f:9d:40: 54:ba:f9:d6:67:36:3c:ea:e4:2e:ae:d9:48:fa:84:9c:3e:d0: c1:14:60:b5 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIULTQqQN9q1Nv0ZOFPO/Po8epj5EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMDUxODI0NTFaFw0yNzAxMDQxODI5NTFaMDMxMTAvBgNV BAMTKDQwRDVDM0Y1NUFFMDhDRjMwRTQ2Njg0NDdEMUM1MTY4QTkwRTdDNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqZq7fiC+9E11MJm5yAtr9TbQ4 DxBpByxWWWFEzQEGEyOzbE/vXJKv3SNn/KM0NYqldxqxxyQaz33DlS2HfDu93588 8ubFDjnhRhBD7lGBqQ97UR0JeRL9fkaLSdJ/uQ/bnAU+CqV7PxV4zjqQxZSepXJ/ 90sKnYJ5OTQK02EKm0D8PBTuIIvMiDnkheH5Ub7LXky/RAC/seCQlOwAQd9SF3r2 7Md9OR3fAdX+YuX6LB4YWTbRg3Qig1YyFOTkPwecbnUb/St12Px6NP/0yWne5LFf /C4MH4IMhbrDOKyJFwb12VBpPAdszv1T0IrXkNRr7IkmeuE9nmuC+/Z/vbWnAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRA1cP1WuCM8w5G aER9HFFoqQ58cjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFU2 SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5bmQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RV Nko0N0NRY2RicnJHd0o2WFdNMkVHUmNtU1U1dDUzQnY2RVhMeXRoeW5kLzAvNDBE NUMzRjU1QUUwOENGMzBFNDY2ODQ0N0QxQzUxNjhBOTBFN0M3Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimMoAwQCutD4MA0EAgACMAcDBQAoBAlwMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQDrjANBgkqhkiG9w0BAQsFAAOCAQEA1apDP0R9 h1Vbe02JqJRQLvNwF3HJTOr7LwrLIhn2UndlOzpcCAjtPw9qUD5ilInzA4Gpx2m/ xS9NoQf3MGvyM/CiX5EReYO/f5AXpmYFYH8hz6jTWUdD5N8k1eIa2E/48UfaJaUt EtDGnuvUCJOfSGFsXrthle/wOs4nK/fOTu5RCtJiFm8aHPoBrSNzi0Amqv7ePAVv Qc+URTb0Kwn5bIHZ9I14vEb3+0/VTqpXAo4Mq5SJmI1LbJ/3EehO/IDb0NySk3lA xUjOYLuoINdK7jENEPs4Rw6MqJiDHNp6j/5OyckcDvQZD51AVLr51mc2POrkLq7Z SPqEnD7QwRRgtQ== -----END CERTIFICATE-----Generated at Thu Jan 8 08:56:42 2026 by rpki-client