This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.cer
File:                     4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.cer (raw, json)
Hash identifier:          M8+p2dBO0UC/yvMkdy5i6YW0j8e1P6d6JxiB5mXuyNY=
Subject key identifier:   4D:FE:35:C1:09:5D:FC:E9:42:47:D8:59:6F:F0:F1:EE:53:F7:35:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B3D4141AF9B0BE9050FB420D642DB0C85906804
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Aug 2025 14:00:59 +0000
Certificate not after:    Tue 25 Aug 2026 14:05:59 +0000
Subordinate resources:    AS: 270804
                          IP: 200.219.60.0/22
                          IP: 2804:71ac::/32
Validation:               Failed, certificate revoked on Sun 02 Nov 2025 01:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3d:41:41:af:9b:0b:e9:05:0f:b4:20:d6:42:db:0c:85:90:68:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 26 14:00:59 2025 GMT
            Not After : Aug 25 14:05:59 2026 GMT
        Subject: CN=4DFE35C1095DFCE94247D8596FF0F1EE53F735FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f8:fd:e4:ea:b2:4b:d3:14:8d:be:a2:e9:e3:
                    8f:8b:ec:a7:ba:92:1b:6c:a7:c2:4e:94:19:fb:12:
                    8b:7c:bc:20:0d:7a:fd:61:82:58:67:d7:12:d4:0a:
                    a5:c7:d1:09:25:0a:46:74:a1:82:2c:5a:11:46:a5:
                    26:be:54:89:85:55:aa:37:61:4b:f7:4f:bc:46:74:
                    bf:37:ef:37:b2:5c:0f:20:8c:8e:3b:d9:6b:81:b2:
                    33:80:93:18:b6:ed:2d:7a:4a:a3:ae:9a:dd:20:6a:
                    a1:31:ec:e2:52:25:82:9c:ae:08:d2:bc:0f:04:13:
                    9a:24:69:33:cb:85:e3:bb:d5:97:89:93:c4:f4:b2:
                    2e:f6:6a:b3:2a:f6:e0:2b:4a:11:5b:70:76:23:2f:
                    4d:0c:33:8e:4a:d7:be:e0:53:e6:10:a3:91:31:68:
                    23:de:a4:b0:56:6b:07:42:c3:c3:8d:1d:33:5c:c1:
                    3a:f7:30:62:56:12:a4:3a:7f:6d:99:e4:98:f3:f5:
                    3e:10:c0:63:da:43:18:80:d4:21:fa:1f:45:d9:1b:
                    55:5a:fb:0d:e6:23:ba:71:b6:69:7b:52:a4:7a:1e:
                    89:d2:89:5e:7e:f5:cd:6c:3b:24:d0:02:54:89:16:
                    8c:67:f2:99:20:d1:c0:64:64:32:a9:a6:b1:8e:ff:
                    3c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:FE:35:C1:09:5D:FC:E9:42:47:D8:59:6F:F0:F1:EE:53:F7:35:FF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.60.0/22
                IPv6:
                  2804:71ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270804

    Signature Algorithm: sha256WithRSAEncryption
         ce:76:3c:76:3d:da:5a:04:1e:9a:73:35:f5:24:81:49:4c:0f:
         f3:e4:fa:eb:08:96:d2:d8:8f:c1:ed:7a:48:f7:90:ee:ee:ce:
         6c:ae:74:79:f1:2d:a9:b6:f4:c7:87:02:63:27:ba:02:98:b9:
         36:37:04:62:c2:f7:15:41:ae:c2:dd:78:93:e9:ac:d8:88:a6:
         b3:f9:25:90:12:58:4c:92:a8:78:69:f1:a9:4f:a2:3e:69:a1:
         ad:0a:37:cd:93:e8:b1:4b:c6:39:c7:10:e1:7b:47:75:81:c8:
         aa:1b:72:00:1f:a4:88:7d:63:b7:3f:6e:da:ec:ef:b8:53:c1:
         8f:b3:c3:fa:a1:1b:7f:b4:d6:03:46:16:1b:00:ee:c9:1f:e2:
         e2:8a:89:32:cb:26:04:94:47:79:75:fc:fd:e4:4b:05:2b:52:
         5a:7f:d8:db:f6:e2:bd:10:cd:8e:cf:a5:07:19:79:b6:88:e1:
         3e:2f:cd:44:e7:55:0e:01:24:ea:64:8c:3e:30:18:97:dd:2a:
         1a:7b:7c:2e:72:10:bf:18:d8:96:45:1c:bb:3f:c7:de:a3:e2:
         11:68:bb:f7:dd:30:8e:ee:ec:4a:51:ec:7c:97:7c:6b:a8:28:
         66:12:db:f4:94:5f:e9:61:56:ab:46:2b:17:84:2b:6d:48:85:
         83:ee:26:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----