This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer File: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer (raw, json) Hash identifier: 4GntI7GNxfAcnH94fEZr05lZ+9wRr2dD+KtQimJROy4= Subject key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1E6BBFD548EF6CAFB1823855F32DFC98614F945A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft caRepository: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 20 Dec 2025 04:48:48 +0000 Certificate not after: Sat 19 Dec 2026 04:53:48 +0000 Subordinate resources: AS: 61862 IP: 138.185.172.0/22 IP: 201.150.120.0/22 IP: 2804:1a7c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 22:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6b:bf:d5:48:ef:6c:af:b1:82:38:55:f3:2d:fc:98:61:4f:94:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 20 04:48:48 2025 GMT Not After : Dec 19 04:53:48 2026 GMT Subject: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:d5:51:7d:c3:62:67:3b:67:02:b8:f6:45: 8f:2b:1d:b2:e1:ac:e5:2f:d2:7b:50:c7:96:d2:17: ee:ba:91:6c:be:81:50:7c:b5:40:49:04:ea:32:c0: 71:b4:19:08:91:77:b7:60:07:e1:32:3d:ac:6e:ec: e1:36:75:ea:ba:44:7f:84:e2:b2:82:44:9b:65:20: 23:d1:b2:3c:0f:f4:07:fb:33:82:aa:65:42:49:33: af:01:ca:06:e1:f5:ad:aa:79:09:37:3f:4e:bd:27: 30:ec:5d:a9:71:26:1c:02:c6:15:48:bb:4d:13:87: f3:2b:e5:79:07:8c:1a:36:7f:cf:1b:f5:20:5a:53: 7e:d0:ec:02:23:fa:0f:0b:db:c1:9a:18:ef:46:d5: 20:75:d9:e5:58:9e:25:72:59:e4:b3:ba:56:6c:98: 91:b4:63:47:99:80:3f:6c:b8:67:de:e6:f2:d6:ca: d6:41:e0:3d:3e:ad:7b:5d:36:a6:d0:95:1e:a9:2c: 2d:b5:ec:a1:b3:dc:93:ca:ca:4c:e0:bf:4d:02:0b: 68:ba:6f:3d:00:64:4f:8f:ae:cb:c7:2b:26:f5:3d: bc:14:ea:56:5e:5f:c4:74:04:38:db:b9:2c:c1:d9: bd:b6:a6:81:d9:5f:7c:62:52:54:fa:c1:b3:ba:fd: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.172.0/22 201.150.120.0/22 IPv6: 2804:1a7c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61862 Signature Algorithm: sha256WithRSAEncryption a3:86:c6:83:fa:d7:3f:29:91:0f:a8:d8:e8:20:6a:c9:e2:2a: c4:c1:3b:2a:e0:f2:8e:0a:ba:90:15:69:60:42:f7:3e:56:81: 85:5d:a9:35:89:c3:ca:05:c0:ca:7c:3a:23:a2:e3:6f:7b:a4: 55:e5:ea:34:58:b8:2c:02:05:f1:41:d5:d8:96:c3:5a:f2:fd: ef:24:0b:f0:2a:0a:e0:b4:72:c7:0d:4f:c4:cb:f0:50:a5:37: 8b:dd:fd:79:ff:dd:fa:8f:de:9a:80:80:1f:88:e6:9c:87:e0: b0:f4:ca:9c:91:ce:f3:e3:aa:79:03:62:f7:4e:7b:29:f5:b9: 72:94:e2:be:33:58:a4:ec:a7:1e:57:d2:ab:4f:76:0f:23:99: 34:ac:2d:b3:78:84:56:33:dc:0a:f6:66:10:66:41:c5:fb:dd: 27:99:f5:c0:95:26:00:6f:78:fc:99:ba:72:91:31:31:21:01: a9:f9:67:60:cc:b2:a0:8c:58:87:0d:83:a8:d6:c2:b0:45:95: bc:d4:f7:da:58:10:fb:f6:8e:40:35:60:15:e6:39:2b:db:c5: 90:d6:0e:07:24:69:2f:30:94:a7:8f:a3:e7:89:11:8b:ea:40: 05:6d:cb:b0:8b:0b:ad:2e:20:81:d4:de:ff:d7:03:e9:da:77: 1e:4d:b8:f6 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUHmu/1UjvbK+xgjhV8y38mGFPlFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMjAwNDQ4NDhaFw0yNjEyMTkwNDUzNDhaMDMxMTAvBgNV BAMTKDRCODBCMjBCRDc0MERGOEFGQ0YwRjhDNUE2RkVCOEI5RTUzMDYzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHtVRfcNiZztnArj2RY8rHbLh rOUv0ntQx5bSF+66kWy+gVB8tUBJBOoywHG0GQiRd7dgB+EyPaxu7OE2deq6RH+E 4rKCRJtlICPRsjwP9Af7M4KqZUJJM68Bygbh9a2qeQk3P069JzDsXalxJhwCxhVI u00Th/Mr5XkHjBo2f88b9SBaU37Q7AIj+g8L28GaGO9G1SB12eVYniVyWeSzulZs mJG0Y0eZgD9suGfe5vLWytZB4D0+rXtdNqbQlR6pLC217KGz3JPKykzgv00CC2i6 bz0AZE+PrsvHKyb1PbwU6lZeX8R0BDjbuSzB2b22poHZX3xiUlT6wbO6/UyVAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLgLIL10Dfivzw +MWm/ri55TBjVTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vU29o dmpGSEtYcHBrTlFrN1FicXllak41ZlBrWjJjR3JQNDlyNnVBUXZjcy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vU29o dmpGSEtYcHBrTlFrN1FicXllak41ZlBrWjJjR3JQNDlyNnVBUXZjcy8wLzRCODBC MjBCRDc0MERGOEFGQ0YwRjhDNUE2RkVCOEI5RTUzMDYzNTUubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAoq5rAMEAsmWeDANBAIAAjAHAwUAKAQafDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA8aYwDQYJKoZIhvcNAQELBQADggEBAKOGxoP61z8p kQ+o2OggasniKsTBOyrg8o4KupAVaWBC9z5WgYVdqTWJw8oFwMp8OiOi4297pFXl 6jRYuCwCBfFB1diWw1ry/e8kC/AqCuC0cscNT8TL8FClN4vd/Xn/3fqP3pqAgB+I 5pyH4LD0ypyRzvPjqnkDYvdOeyn1uXKU4r4zWKTspx5X0qtPdg8jmTSsLbN4hFYz 3Ar2ZhBmQcX73SeZ9cCVJgBvePyZunKRMTEhAan5Z2DMsqCMWIcNg6jWwrBFlbzU 99pYEPv2jkA1YBXmOSvbxZDWDgckaS8wlKePo+eJEYvqQAVty7CLC60uIIHU3v/X A+nadx5NuPY= -----END CERTIFICATE-----Generated at Tue Dec 23 22:47:51 2025 by rpki-client