This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer
File:                     0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer (raw, json)
Hash identifier:          vT2J087HYN67qfEiz6pnrmkbyl/jQjuhooFlMpW9o6s=
Subject key identifier:   0C:9E:7A:58:1F:B3:4E:75:3F:90:B9:3C:9E:30:03:ED:6F:E1:D0:F0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6A93B6F64F13C63A344BEC1C231C0481206AFC06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 May 2025 12:51:55 +0000
Certificate not after:    Tue 05 May 2026 12:56:55 +0000
Subordinate resources:    AS: 266022
                          IP: 170.245.124.0/22
                          IP: 2804:3944::/32
Validation:               Failed, certificate revoked on Wed 24 Sep 2025 10:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:93:b6:f6:4f:13:c6:3a:34:4b:ec:1c:23:1c:04:81:20:6a:fc:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  6 12:51:55 2025 GMT
            Not After : May  5 12:56:55 2026 GMT
        Subject: CN=0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:15:e9:b5:ff:80:1f:5d:19:5f:20:ee:55:
                    b6:f8:f1:d5:82:a2:7d:d2:fc:03:32:94:1e:1b:48:
                    56:0c:64:1b:20:6d:aa:6a:90:d1:b0:01:8a:f6:f4:
                    cd:36:85:63:88:d9:a3:28:5b:f2:03:98:f6:b4:91:
                    77:bb:d8:df:f9:f3:c2:4b:eb:28:32:51:aa:aa:21:
                    8d:ef:85:21:9d:46:ac:24:8d:29:c4:de:28:08:39:
                    cf:7f:79:62:1f:70:be:92:f7:8d:ed:f2:cc:38:7e:
                    90:b1:57:0b:f3:5a:91:b8:ce:f1:84:d2:30:3a:29:
                    52:0d:3d:89:7a:f9:42:58:a2:24:ff:de:5f:30:73:
                    2d:bc:25:38:db:8d:3f:fb:25:bb:93:0f:aa:03:37:
                    6a:a0:a5:51:49:80:76:71:00:d4:2c:21:01:b6:50:
                    91:2a:18:20:e8:c5:a3:dd:8e:37:f2:2d:e7:b6:fb:
                    8c:50:a9:11:87:7f:8e:75:89:71:b6:bd:85:af:04:
                    2d:1e:21:b7:96:9d:15:a4:e2:f9:86:ad:f5:7e:b8:
                    bf:1b:ed:df:5d:73:cd:61:49:a8:22:d8:31:ca:15:
                    61:f8:11:f0:7a:1f:ec:8f:16:07:f9:f8:3b:10:2c:
                    10:30:21:4b:17:de:c1:32:ad:62:05:ed:90:ac:74:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:9E:7A:58:1F:B3:4E:75:3F:90:B9:3C:9E:30:03:ED:6F:E1:D0:F0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.124.0/22
                IPv6:
                  2804:3944::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266022

    Signature Algorithm: sha256WithRSAEncryption
         1e:ba:37:75:9b:e1:1b:0c:f9:4e:27:d9:a1:60:87:e7:a4:96:
         9c:00:fd:02:e7:da:74:3f:db:ac:ea:3c:10:da:c1:2a:03:60:
         d8:cc:95:82:71:7e:d6:30:d2:75:e1:be:69:5b:75:99:8e:66:
         56:d7:7a:7f:0d:0b:42:52:37:41:a1:a1:4c:20:99:28:9c:0f:
         db:51:2e:1f:15:8c:8d:e5:dd:82:cc:a5:59:1a:ff:0d:4b:7c:
         28:0d:ce:45:9d:57:51:b7:89:08:77:e3:33:80:a4:dc:fc:eb:
         42:8a:76:1b:7f:94:f6:31:8f:f4:e8:89:22:9d:f5:33:64:ec:
         41:0e:45:d4:10:40:78:8a:0f:8d:d8:33:ab:10:6e:2d:49:4f:
         54:85:55:1a:8d:df:51:57:c0:14:b2:ee:3a:9b:87:10:30:24:
         01:9c:ba:1c:a8:ab:ec:2f:34:4f:ba:e4:a7:b5:14:2f:cc:69:
         3f:de:49:fb:74:0f:b7:c4:ec:29:30:52:a5:65:f8:25:e8:81:
         6e:39:d7:7e:84:37:bc:36:ba:c6:4b:1f:6b:b7:18:2e:0d:27:
         e5:0c:11:61:e8:fd:1a:da:7f:c7:34:d4:76:fc:15:ea:ae:1f:
         35:c4:4d:92:ed:93:47:9d:c9:1d:39:4c:f1:f6:07:38:26:72:
         7e:18:2c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----