This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer File: 5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer (raw, json) Hash identifier: kyleVPVoo7te/gaCL2DTanfeYmWgdkTQS9FZ0N1AVmo= Subject key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 01CF249FE68898FD2A525B57AA86038DAB294CB9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft caRepository: rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 11 Dec 2025 20:15:08 +0000 Certificate not after: Thu 10 Dec 2026 20:20:08 +0000 Subordinate resources: AS: 28351 AS: 28573 IP: 177.32.0.0/14 IP: 177.64.0.0/15 IP: 177.80.0.0/14 IP: 177.100.0.0/16 IP: 177.127.0.0/16 IP: 177.140.0.0/14 IP: 177.180.0.0/14 IP: 177.192.0.0/14 IP: 177.235.0.0/16 IP: 179.105.0.0/16 IP: 179.136.0.0/13 IP: 179.152.0.0/13 IP: 179.208.0.0/12 IP: 179.232.0.0/14 IP: 181.213.0.0/16 IP: 181.216.0.0/13 IP: 186.204.0.0/14 IP: 186.218.0.0/16 IP: 186.220.0.0/14 IP: 187.2.0.0/15 IP: 187.20.0.0/14 IP: 187.36.0.0/14 IP: 187.64.0.0/14 IP: 187.104.0.0/14 IP: 187.122.0.0/15 IP: 187.180.0.0/14 IP: 187.255.0.0/16 IP: 189.4.0.0/14 IP: 189.14.128.0/18 IP: 189.29.0.0/16 IP: 189.32.0.0/14 IP: 189.39.144.0/20 IP: 189.51.176.0/20 IP: 189.54.0.0/15 IP: 189.60.0.0/14 IP: 189.100.0.0/14 IP: 189.120.0.0/14 IP: 189.126.16.0/20 IP: 191.176.0.0/12 IP: 200.155.192.0/18 IP: 200.160.96.0/20 IP: 200.170.0.0/18 IP: 200.189.80.0/20 IP: 200.218.32.0/19 IP: 201.6.0.0/16 IP: 201.17.0.0/16 IP: 201.21.0.0/16 IP: 201.37.0.0/16 IP: 201.46.240.0/20 IP: 201.52.0.0/15 IP: 201.55.224.0/20 IP: 201.62.96.0/19 IP: 201.74.0.0/15 IP: 201.76.16.0/20 IP: 201.76.64.0/19 IP: 201.77.64.0/20 IP: 201.80.0.0/14 IP: 201.94.160.0/19 IP: 2804:14c::/31 IP: 2804:698::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 05:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:cf:24:9f:e6:88:98:fd:2a:52:5b:57:aa:86:03:8d:ab:29:4c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 11 20:15:08 2025 GMT Not After : Dec 10 20:20:08 2026 GMT Subject: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2b:45:7c:92:0a:93:37:fe:86:ed:e6:32:60: d1:78:5c:eb:26:2f:28:77:37:f3:c8:ce:39:fb:a6: 90:ff:64:97:a6:e8:fb:e1:21:f4:17:fa:fa:85:7d: ed:34:c8:c1:41:30:1a:0e:93:00:dc:72:51:45:00: 1b:d9:68:78:49:f9:db:b9:e6:87:7e:ca:6b:91:6b: d5:20:0a:b2:6e:8d:63:c0:51:4f:1a:72:af:ee:70: 52:b2:5c:da:f7:ff:ff:88:bc:d6:a3:47:db:f3:4c: 58:a0:3b:cb:bc:6c:5c:ae:70:a6:87:08:28:7a:d2: 53:55:3a:c5:db:f9:85:89:3a:d6:74:15:97:88:3a: 2e:53:49:a6:10:ec:0c:3d:3d:07:29:fc:06:38:de: 02:74:b3:a1:70:e0:02:10:57:d4:52:e2:ad:6c:93: e7:d7:1a:83:3b:09:43:62:6e:c0:cd:4c:60:b1:f9: dc:73:22:e6:a2:0e:d8:4f:56:ba:63:6c:25:01:a3: 6b:7c:2b:ca:60:ff:d6:6d:28:5b:61:b2:54:58:3d: f8:fe:df:3d:6d:53:c3:fc:fe:89:0a:bb:ae:ff:43: f5:c2:8a:d4:de:7a:74:11:60:14:23:1c:1d:c4:20: 55:fc:43:71:3f:25:fb:32:11:a0:36:19:9b:8b:0f: 7f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.32.0.0/14 177.64.0.0/15 177.80.0.0/14 177.100.0.0/16 177.127.0.0/16 177.140.0.0/14 177.180.0.0/14 177.192.0.0/14 177.235.0.0/16 179.105.0.0/16 179.136.0.0/13 179.152.0.0/13 179.208.0.0/12 179.232.0.0/14 181.213.0.0/16 181.216.0.0/13 186.204.0.0/14 186.218.0.0/16 186.220.0.0/14 187.2.0.0/15 187.20.0.0/14 187.36.0.0/14 187.64.0.0/14 187.104.0.0/14 187.122.0.0/15 187.180.0.0/14 187.255.0.0/16 189.4.0.0/14 189.14.128.0/18 189.29.0.0/16 189.32.0.0/14 189.39.144.0/20 189.51.176.0/20 189.54.0.0/15 189.60.0.0/14 189.100.0.0/14 189.120.0.0/14 189.126.16.0/20 191.176.0.0/12 200.155.192.0/18 200.160.96.0/20 200.170.0.0/18 200.189.80.0/20 200.218.32.0/19 201.6.0.0/16 201.17.0.0/16 201.21.0.0/16 201.37.0.0/16 201.46.240.0/20 201.52.0.0/15 201.55.224.0/20 201.62.96.0/19 201.74.0.0/15 201.76.16.0/20 201.76.64.0/19 201.77.64.0/20 201.80.0.0/14 201.94.160.0/19 IPv6: 2804:14c::/31 2804:698::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28351 28573 Signature Algorithm: sha256WithRSAEncryption 9a:74:35:6f:44:1f:b0:83:5b:7d:7d:ab:f6:52:25:9f:43:05: b5:b0:83:c8:ed:72:3e:2e:dd:08:22:d9:1d:e8:3c:ba:27:48: 74:92:e9:f9:b6:d9:76:7e:9d:b9:9a:0c:d6:dc:29:6f:ed:d6: 44:e2:b7:e2:58:04:79:47:a6:92:b4:43:5c:80:c2:57:3c:a6: 40:77:75:34:85:c8:b5:53:83:d0:28:2f:99:36:78:e9:3b:9c: 74:7f:3c:85:3e:61:a2:54:47:c7:90:23:18:de:5b:19:e3:62: 52:07:14:cd:fc:1c:38:49:b6:bb:ce:ea:89:d9:5b:c8:a4:da: 1b:63:01:c5:e3:51:d4:01:ba:1f:bb:69:d5:80:bf:ed:7a:da: ea:04:c4:27:b0:ec:55:52:75:a3:68:7e:8c:5b:4d:1c:2b:66: 15:23:b7:df:ac:c5:0e:5f:4d:ab:a0:58:81:d7:02:12:b5:97: 21:40:f8:ab:e0:9f:43:52:da:98:1d:a6:c6:4b:9b:72:71:83: da:24:43:09:24:e2:40:16:ee:b0:09:08:a0:31:50:32:71:cf: 93:6a:c9:a4:75:1a:75:65:af:c8:a9:a6:b7:6f:c0:5a:16:74: c7:5b:19:ec:31:4a:6a:b3:30:6b:73:2b:79:70:31:c4:6b:01: cf:22:c9:1e -----BEGIN CERTIFICATE----- MIIHbzCCBlegAwIBAgIUAc8kn+aImP0qUltXqoYDjaspTLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMTEyMDE1MDhaFw0yNjEyMTAyMDIwMDhaMDMxMTAvBgNV BAMTKDVGQTAyQjZGOEY0REJCRDk4QUM5QTlEMEM3N0IwNTIxRDVBNkJEMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKK0V8kgqTN/6G7eYyYNF4XOsm Lyh3N/PIzjn7ppD/ZJem6PvhIfQX+vqFfe00yMFBMBoOkwDcclFFABvZaHhJ+du5 5od+ymuRa9UgCrJujWPAUU8acq/ucFKyXNr3//+IvNajR9vzTFigO8u8bFyucKaH CCh60lNVOsXb+YWJOtZ0FZeIOi5TSaYQ7Aw9PQcp/AY43gJ0s6Fw4AIQV9RS4q1s k+fXGoM7CUNibsDNTGCx+dxzIuaiDthPVrpjbCUBo2t8K8pg/9ZtKFthslRYPfj+ 3z1tU8P8/okKu67/Q/XCitTeenQRYBQjHB3EIFX8Q3E/JfsyEaA2GZuLD39hAgMB AAGjggR5MIIEdTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfoCtvj0272YrJ qdDHewUh1aa9CjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlFB cXlZeUdMV3h4UmJINUtjcGh6NTE3OWR3Y0JxOGhZTmMxUXNpYWtNTDIvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlFB cXlZeUdMV3h4UmJINUtjcGh6NTE3OWR3Y0JxOGhZTmMxUXNpYWtNTDIvMS81RkEw MkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZCRDBBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggFpBggrBgEFBQcB BwEB/wSCAVgwggFUMIIBOgQCAAEwggEyAwMCsSADAwGxQAMDArFQAwMAsWQDAwCx fwMDArGMAwMCsbQDAwKxwAMDALHrAwMAs2kDAwOziAMDA7OYAwMEs9ADAwKz6AMD ALXVAwMDtdgDAwK6zAMDALraAwMCutwDAwG7AgMDArsUAwMCuyQDAwK7QAMDArto AwMBu3oDAwK7tAMDALv/AwMCvQQDBAa9DoADAwC9HQMDAr0gAwQEvSeQAwQEvTOw AwMBvTYDAwK9PAMDAr1kAwMCvXgDBAS9fhADAwS/sAMEBsibwAMEBMigYAMEBsiq AAMEBMi9UAMEBcjaIAMDAMkGAwMAyREDAwDJFQMDAMklAwQEyS7wAwMByTQDBATJ N+ADBAXJPmADAwHJSgMEBMlMEAMEBclMQAMEBMlNQAMDAslQAwQFyV6gMBQEAgAC MA4DBQEoBAFMAwUAKAQGmDAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgJuvwICb50w DQYJKoZIhvcNAQELBQADggEBAJp0NW9EH7CDW319q/ZSJZ9DBbWwg8jtcj4u3Qgi 2R3oPLonSHSS6fm22XZ+nbmaDNbcKW/t1kTit+JYBHlHppK0Q1yAwlc8pkB3dTSF yLVTg9AoL5k2eOk7nHR/PIU+YaJUR8eQIxjeWxnjYlIHFM38HDhJtrvO6onZW8ik 2htjAcXjUdQBuh+7adWAv+162uoExCew7FVSdaNofoxbTRwrZhUjt9+sxQ5fTaug WIHXAhK1lyFA+Kvgn0NS2pgdpsZLm3Jxg9okQwkk4kAW7rAJCKAxUDJxz5NqyaR1 GnVlr8ipprdvwFoWdMdbGewxSmqzMGtzK3lwMcRrAc8iyR4= -----END CERTIFICATE-----Generated at Fri Dec 19 03:47:28 2025 by rpki-client