This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/19C5CDAEABC673B1E2A586153F1D543A06DB24EE.cer
File:                     19C5CDAEABC673B1E2A586153F1D543A06DB24EE.cer (raw, json)
Hash identifier:          NQ4zJG7zARxyzF9X28zeuFMcpDaaS0homgNZjJOE0qE=
Subject key identifier:   19:C5:CD:AE:AB:C6:73:B1:E2:A5:86:15:3F:1D:54:3A:06:DB:24:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E7C9EC645428DF824CCB86F7F912E8D6D072107
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/19C5CDAEABC673B1E2A586153F1D543A06DB24EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Sep 2025 17:33:20 +0000
Certificate not after:    Mon 28 Sep 2026 17:38:20 +0000
Subordinate resources:    AS: 264516
                          IP: 132.255.160.0/22
                          IP: 143.0.8.0/22
                          IP: 2804:20d8::/32
Validation:               Failed, certificate revoked on Wed 15 Oct 2025 00:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7c:9e:c6:45:42:8d:f8:24:cc:b8:6f:7f:91:2e:8d:6d:07:21:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 29 17:33:20 2025 GMT
            Not After : Sep 28 17:38:20 2026 GMT
        Subject: CN=19C5CDAEABC673B1E2A586153F1D543A06DB24EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:32:7d:75:59:8b:14:aa:b9:06:9e:f1:99:
                    26:f7:c9:14:ef:02:38:7f:23:cb:ed:0c:75:28:64:
                    ad:8a:4b:b8:18:b3:4d:47:7f:a0:87:1d:13:cb:a1:
                    89:9e:b6:dc:f3:59:e9:4f:d9:d5:35:f3:55:d1:2e:
                    c8:9f:af:3b:85:af:79:6b:c7:72:b7:d5:86:77:3a:
                    fe:27:12:2a:dc:7c:e5:03:f1:61:20:ae:a0:e1:4f:
                    43:df:50:0a:18:78:b0:9e:ba:74:54:65:27:d0:d8:
                    6f:03:e4:e3:b1:78:d3:5c:a9:bd:bc:8c:6c:db:2b:
                    8b:ab:34:dd:cd:10:13:29:73:dd:15:d6:50:97:d6:
                    3a:ca:e9:0d:0a:4f:7c:aa:9e:f0:4a:2c:4a:f6:65:
                    3b:f3:98:1a:85:8e:f5:c3:af:c5:56:09:9d:b0:44:
                    0e:bd:1b:ca:5c:bb:00:51:6c:06:e9:21:a6:cd:33:
                    d7:ab:b4:c1:db:69:46:46:66:6c:a7:3a:15:1b:d9:
                    3a:b3:93:f6:62:72:ae:9c:57:f9:44:de:b2:57:72:
                    b4:3a:ca:cc:bf:fb:2e:67:b3:c1:74:24:a8:d8:e3:
                    98:bd:10:d9:61:da:fc:e6:7e:d8:d4:d7:35:86:40:
                    74:fb:4c:23:ff:f5:07:27:48:de:4e:c4:7e:e6:0d:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:C5:CD:AE:AB:C6:73:B1:E2:A5:86:15:3F:1D:54:3A:06:DB:24:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/19C5CDAEABC673B1E2A586153F1D543A06DB24EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.160.0/22
                  143.0.8.0/22
                IPv6:
                  2804:20d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264516

    Signature Algorithm: sha256WithRSAEncryption
         60:81:56:72:a5:57:6a:47:27:a5:a6:1e:eb:0f:60:ac:65:62:
         31:39:24:b6:33:26:a8:10:92:d0:20:da:db:c4:41:a5:c7:4f:
         ae:d3:bf:d2:98:35:d1:1e:48:f0:06:5d:e6:1b:e3:99:28:74:
         2b:6f:fb:d7:b2:c1:42:51:89:4b:63:1c:25:39:a1:a2:b1:ed:
         11:c1:16:3f:4c:fe:7c:1b:b6:98:62:d4:72:54:ef:3e:15:1e:
         cc:94:8e:26:b9:c3:a4:31:c9:e6:ee:61:fe:0c:b6:32:2c:40:
         27:ff:6a:b7:0a:63:eb:e5:3e:63:15:77:9a:d1:88:3c:a8:40:
         49:f0:f4:27:0b:30:98:ce:ab:44:ae:90:6f:ee:fd:00:a1:be:
         8b:11:e7:1d:12:34:f8:49:c2:00:70:c2:ca:a8:3e:de:d9:6c:
         b6:78:47:73:db:39:42:9a:02:17:9f:ec:fb:e2:af:3a:53:97:
         96:46:3e:86:55:92:15:5b:de:91:2d:fd:a6:c4:54:31:ab:0c:
         1a:7f:1a:6c:30:1b:79:f2:6b:13:26:c6:1e:0e:b4:97:b0:d6:
         73:f5:bc:19:e0:5f:92:52:b7:c0:da:bd:3c:cb:60:8e:93:66:
         aa:bd:0f:84:db:67:47:89:f3:9f:21:5c:15:bb:e6:de:b6:49:
         43:77:0e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----