This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/789DA2F63EAA6EB59AF7B1FE473BD2176AD4DC19.cer File: 789DA2F63EAA6EB59AF7B1FE473BD2176AD4DC19.cer (raw, json) Hash identifier: esSgxK5ta/EraAzXQE/rsTAqyFfP00cQi4pMPUzUGxY= Subject key identifier: 78:9D:A2:F6:3E:AA:6E:B5:9A:F7:B1:FE:47:3B:D2:17:6A:D4:DC:19 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 33AE07A2A545DA5934EDF41A4B0E70D1BC3ED8AA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/789DA2F63EAA6EB59AF7B1FE473BD2176AD4DC19.mft caRepository: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 18 Dec 2025 19:43:58 +0000 Certificate not after: Thu 17 Dec 2026 19:48:58 +0000 Subordinate resources: AS: 263073 IP: 138.0.196.0/22 IP: 138.219.240.0/22 IP: 164.163.12.0/22 IP: 168.121.192.0/22 IP: 170.78.80.0/22 IP: 170.244.96.0/22 IP: 177.200.240.0/20 IP: 177.223.16.0/20 IP: 179.0.24.0/24 IP: 186.194.112.0/20 IP: 186.224.24.0/21 IP: 186.233.104.0/21 IP: 191.6.48.0/21 IP: 201.71.60.0/22 IP: 2804:954::/32 Validation: Failed, certificate revoked on Fri 19 Dec 2025 19:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ae:07:a2:a5:45:da:59:34:ed:f4:1a:4b:0e:70:d1:bc:3e:d8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 18 19:43:58 2025 GMT Not After : Dec 17 19:48:58 2026 GMT Subject: CN=789DA2F63EAA6EB59AF7B1FE473BD2176AD4DC19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:50:7e:3d:c6:71:95:c9:fb:34:56:9c:ed: 35:88:fe:a4:63:03:b1:2b:f1:dd:96:91:21:72:94: 14:91:2b:bd:67:38:d1:20:25:7a:d6:94:ee:5e:78: 48:93:c0:81:c6:ec:ce:b9:a5:c3:89:ef:d3:2d:27: e0:62:77:fb:9e:a9:dc:02:3c:39:23:ec:51:3e:58: d0:d6:d0:f1:15:81:7c:f5:2a:63:e5:eb:c7:a2:68: ec:66:d3:c7:cc:65:c8:43:62:b3:2c:82:16:43:57: 1a:25:55:99:48:39:64:1e:f1:06:a7:5e:db:4c:6d: 6e:ec:c4:63:cf:12:47:d0:2d:e8:4f:c2:a7:83:81: dc:eb:8b:b4:8b:5c:f0:b3:a1:5c:0d:50:01:d7:39: a3:34:05:bd:2a:59:da:ae:e3:5a:d4:8c:ab:37:c3: 37:a1:62:ef:13:43:67:c7:86:10:fb:92:78:60:d9: aa:cb:78:6e:a8:45:0f:30:d0:c4:d6:18:9c:94:66: 97:8e:62:72:c2:9e:33:57:27:10:87:22:0c:bc:cb: 21:ab:fa:23:59:86:fc:55:02:4c:5e:4b:03:ba:31: 97:e1:2e:25:b5:77:08:3f:29:2e:a4:77:90:5f:32: d7:2e:cf:4d:c6:85:24:e3:7a:2b:49:20:6e:62:3a: ef:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:9D:A2:F6:3E:AA:6E:B5:9A:F7:B1:FE:47:3B:D2:17:6A:D4:DC:19 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/789DA2F63EAA6EB59AF7B1FE473BD2176AD4DC19.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.196.0/22 138.219.240.0/22 164.163.12.0/22 168.121.192.0/22 170.78.80.0/22 170.244.96.0/22 177.200.240.0/20 177.223.16.0/20 179.0.24.0/24 186.194.112.0/20 186.224.24.0/21 186.233.104.0/21 191.6.48.0/21 201.71.60.0/22 IPv6: 2804:954::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263073 Signature Algorithm: sha256WithRSAEncryption 89:c5:28:1c:10:0f:fa:d2:e4:cc:ef:e9:29:dd:0b:7d:b4:71: be:71:cd:94:8b:bb:06:6b:e2:76:80:5f:d8:f5:78:ac:61:33: 99:1d:a8:3a:80:af:d3:05:90:6a:33:b4:2f:75:6d:e4:6c:7a: fb:9e:1e:02:5c:e3:ac:35:bb:a1:99:c5:40:b1:c2:e1:3f:c5: 52:a9:52:aa:f6:fc:47:2d:70:df:10:61:f1:9c:b7:78:8f:1b: 5f:67:4d:c0:ac:54:03:79:64:75:66:29:0f:f0:97:34:57:2a: 8f:3f:11:c0:63:5a:99:1c:4b:7a:95:64:3a:1e:9b:21:1c:e5: 48:85:52:8e:fa:82:52:fb:30:ab:73:08:4c:11:c4:00:28:2d: 64:8c:e5:7c:e9:03:21:c5:a6:6c:67:11:33:b4:69:e0:c1:75: f2:cf:a1:e5:b2:ad:1a:65:94:17:aa:c8:e5:73:4d:22:71:18: 97:39:7c:49:15:20:36:ca:5a:c4:ac:2d:ef:48:1d:5b:14:c6: 42:ac:f0:8e:fb:c4:d4:eb:4b:75:b9:cb:b9:8e:5b:b7:06:ca: 1b:c5:94:c6:b4:82:a6:d0:23:64:15:a9:b2:55:0c:1f:c3:bd: 13:0d:62:4f:4d:d7:6e:c3:fd:f2:5e:36:b5:3d:f3:39:4d:07: 8b:9c:02:37 -----BEGIN CERTIFICATE----- MIIGfjCCBWagAwIBAgIUM64HoqVF2lk07fQaSw5w0bw+2KowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMTgxOTQzNThaFw0yNjEyMTcxOTQ4NThaMDMxMTAvBgNV BAMTKDc4OURBMkY2M0VBQTZFQjU5QUY3QjFGRTQ3M0JEMjE3NkFENERDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzVB+PcZxlcn7NFac7TWI/qRj A7Er8d2WkSFylBSRK71nONEgJXrWlO5eeEiTwIHG7M65pcOJ79MtJ+Bid/ueqdwC PDkj7FE+WNDW0PEVgXz1KmPl68eiaOxm08fMZchDYrMsghZDVxolVZlIOWQe8Qan XttMbW7sxGPPEkfQLehPwqeDgdzri7SLXPCzoVwNUAHXOaM0Bb0qWdqu41rUjKs3 wzehYu8TQ2fHhhD7knhg2arLeG6oRQ8w0MTWGJyUZpeOYnLCnjNXJxCHIgy8yyGr +iNZhvxVAkxeSwO6MZfhLiW1dwg/KS6kd5BfMtcuz03GhSTjeitJIG5iOu+fAgMB AAGjggOIMIIDhDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR4naL2PqputZr3 sf5HO9IXatTcGTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmI4 NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFia20vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zi ODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAvNzg5 REEyRjYzRUFBNkVCNTlBRjdCMUZFNDczQkQyMTc2QUQ0REMxOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEH AQH/BG0wazBaBAIAATBUAwQCigDEAwQCitvwAwQCpKMMAwQCqHnAAwQCqk5QAwQC qvRgAwQEscjwAwQEsd8QAwQAswAYAwQEusJwAwQDuuAYAwQDuuloAwQDvwYwAwQC yUc8MA0EAgACMAcDBQAoBAlUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQDoTAN BgkqhkiG9w0BAQsFAAOCAQEAicUoHBAP+tLkzO/pKd0LfbRxvnHNlIu7BmvidoBf 2PV4rGEzmR2oOoCv0wWQajO0L3Vt5Gx6+54eAlzjrDW7oZnFQLHC4T/FUqlSqvb8 Ry1w3xBh8Zy3eI8bX2dNwKxUA3lkdWYpD/CXNFcqjz8RwGNamRxLepVkOh6bIRzl SIVSjvqCUvswq3MITBHEACgtZIzlfOkDIcWmbGcRM7Rp4MF18s+h5bKtGmWUF6rI 5XNNInEYlzl8SRUgNspaxKwt70gdWxTGQqzwjvvE1OtLdbnLuY5btwbKG8WUxrSC ptAjZBWpslUMH8O9Ew1iT03XbsP98l42tT3zOU0Hi5wCNw== -----END CERTIFICATE-----Generated at Sat Dec 20 02:00:04 2025 by rpki-client