This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer
File:                     52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer (raw, json)
Hash identifier:          1Jp7dnRrh3nXdH7FH5nBJch/mCTnkMb3fXnnTuqdZiY=
Subject key identifier:   52:C8:28:C2:7E:EB:BF:F1:E4:B8:15:AD:15:18:41:CD:2C:9E:17:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3CAF713E99017E4C2F760A2FCF903641C91E4FC7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Sep 2025 20:22:40 +0000
Certificate not after:    Thu 10 Sep 2026 20:27:40 +0000
Subordinate resources:    AS: 266399
                          IP: 170.81.92.0/22
                          IP: 2804:3740::/32
Validation:               Failed, certificate revoked on Tue 28 Oct 2025 18:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:af:71:3e:99:01:7e:4c:2f:76:0a:2f:cf:90:36:41:c9:1e:4f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 11 20:22:40 2025 GMT
            Not After : Sep 10 20:27:40 2026 GMT
        Subject: CN=52C828C27EEBBFF1E4B815AD151841CD2C9E17CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9e:c4:5e:6e:4c:76:16:f9:e5:f1:30:eb:6d:
                    cc:8a:4d:62:78:3f:bb:48:13:5f:90:5d:5d:f9:97:
                    b9:7a:1e:ce:13:8b:13:5a:d1:94:84:30:bd:1a:03:
                    4f:11:2b:7e:df:30:d2:e5:3f:9c:46:b3:f4:10:ba:
                    97:b7:eb:b8:39:50:77:7b:7c:8a:e8:eb:13:e4:a3:
                    49:6e:d4:3d:63:3a:ed:67:9e:bc:f0:70:6f:82:79:
                    09:74:68:33:6a:1e:23:36:f6:34:ad:56:72:29:d9:
                    9d:fa:e0:7e:bd:5a:30:52:6a:c8:66:c5:b6:1c:b3:
                    a6:5c:94:b8:2b:a8:b9:93:1d:21:8f:cf:4a:c2:23:
                    1f:81:26:97:a4:24:8a:fc:da:1f:c4:53:70:2e:16:
                    d4:61:a1:58:b3:c9:53:4a:d1:37:e5:0d:b4:4d:ab:
                    b6:ef:59:51:f0:e7:88:9d:9b:0a:06:c0:4a:c0:20:
                    04:66:c6:f7:38:fe:16:7e:6d:9b:57:e2:b1:62:7d:
                    ae:ad:76:99:8e:2e:05:7f:29:24:16:d8:f9:a7:1b:
                    38:5a:fb:2d:d6:56:26:43:a7:29:49:ab:a1:90:05:
                    4f:27:06:65:08:9e:9f:d7:01:db:55:59:be:b1:9f:
                    4f:73:c9:89:ed:4b:4b:4d:0a:d2:7d:e4:77:7e:42:
                    8d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:C8:28:C2:7E:EB:BF:F1:E4:B8:15:AD:15:18:41:CD:2C:9E:17:CA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.92.0/22
                IPv6:
                  2804:3740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266399

    Signature Algorithm: sha256WithRSAEncryption
         26:5d:04:f7:02:4a:1e:f7:e2:35:a1:f4:ec:3d:25:0a:19:66:
         7e:ba:7f:11:a6:0a:da:af:38:90:e2:cb:f5:bb:6a:81:90:51:
         49:e6:fb:2c:e3:e8:2b:bd:b4:ff:59:55:d2:b4:50:69:47:13:
         43:af:ff:95:92:8c:d7:2c:27:55:9c:29:3e:79:e9:9f:cc:e7:
         ed:fd:34:91:3c:56:13:78:26:b6:6b:bd:e0:c6:b2:6f:c3:eb:
         26:bb:e9:14:ce:7c:a8:c9:a6:3a:7a:13:18:20:9b:95:97:dd:
         27:4a:cb:5f:47:72:6f:0c:54:46:c4:10:05:0e:61:08:68:af:
         2e:4b:3f:8f:1f:f1:1f:12:7b:72:96:15:66:a9:14:20:57:e8:
         1c:90:a5:50:76:95:04:ad:7f:e8:54:d7:6f:6b:01:16:ea:33:
         a7:af:4f:35:f3:14:c8:55:af:95:2f:56:e6:4b:ac:a4:14:32:
         43:8c:8e:df:07:6e:0b:11:65:59:01:61:ec:9d:37:22:6d:50:
         c1:38:0e:3b:e4:ea:f6:4a:e0:e4:eb:ed:33:f8:3d:00:b5:39:
         a8:36:6f:2c:68:9f:55:8c:b8:2b:c8:43:8c:78:34:54:ac:52:
         5e:e1:4d:66:b5:a9:88:92:85:d6:f2:c5:23:12:cb:f5:26:80:
         ba:9f:71:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----