This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
File:                     085D77D4302255076FC0EF856AC7C40EF2F57975.cer (raw, json)
Hash identifier:          9/VhPI5hj8E7hPGgHUJwq10sDYKg1Hj0IcAzbvnTiyw=
Subject key identifier:   08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30702EEC2D419DE743F3212641DD991B0954CF8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 May 2025 01:53:09 +0000
Certificate not after:    Fri 01 May 2026 01:58:09 +0000
Subordinate resources:    AS: 270456
                          IP: 190.124.252.0/22
                          IP: 2804:6c44::/32
Validation:               Failed, certificate revoked on Sat 30 Aug 2025 08:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:70:2e:ec:2d:41:9d:e7:43:f3:21:26:41:dd:99:1b:09:54:cf:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  2 01:53:09 2025 GMT
            Not After : May  1 01:58:09 2026 GMT
        Subject: CN=085D77D4302255076FC0EF856AC7C40EF2F57975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:77:2f:c8:87:f1:cb:24:5e:62:21:b2:d7:
                    39:6c:1f:4a:80:d4:40:5d:27:9b:3f:38:80:2a:e6:
                    59:2d:98:52:ca:ab:9c:1f:db:5e:a4:30:22:a5:b5:
                    b9:77:35:39:a5:a9:a6:bc:d3:76:82:8f:c8:c5:a1:
                    be:51:4b:f2:a8:0a:ff:cd:04:45:7f:7c:df:4c:89:
                    de:96:48:94:ac:7a:78:33:c9:5d:7b:87:3b:4d:e6:
                    40:f4:4d:19:05:ef:5d:ba:93:6a:ce:f0:fc:15:b3:
                    92:35:dd:d3:47:15:43:42:ac:18:dc:51:39:17:b4:
                    63:d9:c7:f3:5e:ce:1e:cd:67:72:4f:5d:f6:cd:1c:
                    05:29:b0:70:2a:73:6f:82:d7:f5:07:6b:38:d3:95:
                    6e:c7:83:1e:63:1e:57:9b:5f:99:3b:61:2e:75:8f:
                    e2:f1:f7:56:e5:cf:d7:cd:ce:4d:63:e4:1f:a0:43:
                    88:40:80:8a:0d:74:37:ad:f8:21:34:73:03:2f:93:
                    46:50:ed:c8:00:4b:b5:86:92:0c:27:82:42:e3:31:
                    a7:82:cb:2e:d5:47:b9:8f:95:89:46:a4:28:33:59:
                    63:23:a1:83:55:0a:e7:c8:f9:ca:89:1a:6f:9b:a1:
                    66:a0:e7:87:a4:ec:a0:ce:62:7d:fe:ac:4b:ff:f7:
                    37:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.252.0/22
                IPv6:
                  2804:6c44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270456

    Signature Algorithm: sha256WithRSAEncryption
         76:c6:26:ed:5d:5e:a0:fc:20:32:23:87:45:41:1a:03:ba:e4:
         95:e9:77:8d:c2:69:43:d3:21:b5:95:7e:35:c3:7d:05:9c:f3:
         7a:2d:7f:40:15:65:d1:cc:6c:d9:74:a7:7a:43:42:a7:53:65:
         c9:b7:68:e7:9f:29:51:31:af:52:e7:01:e1:f7:b8:51:1f:ad:
         09:e5:58:dd:85:55:e6:0a:62:5e:03:e9:8b:e6:32:8e:7a:d7:
         3b:b8:99:87:50:dd:5f:c2:71:c1:7e:48:f1:4d:f0:a0:2b:26:
         6b:66:e2:d5:f5:81:1b:7b:74:0d:4f:cf:7e:10:cd:d6:00:90:
         a8:4b:39:b3:9b:d3:f7:fe:6a:90:5d:c7:7f:aa:a0:eb:cd:b1:
         90:31:de:88:b7:4e:7a:af:c3:f5:67:02:9d:c6:ee:23:e5:34:
         41:f4:ce:fb:37:80:d8:f8:f7:30:0d:ca:82:0c:36:ce:42:68:
         3f:ae:ef:26:3b:e3:b0:85:0e:a7:f5:20:d0:40:31:e7:d8:0b:
         5b:df:5e:5e:a1:b5:80:fa:7c:24:b8:41:72:12:42:b8:25:7f:
         bf:94:76:81:e8:e3:b9:6f:5d:7b:57:0e:4d:f4:61:4a:08:aa:
         2f:42:fb:43:06:65:de:7d:a1:48:71:19:38:aa:82:f9:7e:9e:
         db:9f:46:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----