This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer
File:                     612546079777C83995107BFA129E54CE43A50026.cer (raw, json)
Hash identifier:          I1AoxfLVXJtWFp0B83NmxyRH82sqWNGmLR/2kEAVTK4=
Subject key identifier:   61:25:46:07:97:77:C8:39:95:10:7B:FA:12:9E:54:CE:43:A5:00:26
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       736EFEE00BFF7B6ADAFFAE567A1F87E1136516C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Jun 2025 13:16:47 +0000
Certificate not after:    Wed 03 Jun 2026 13:21:47 +0000
Subordinate resources:    AS: 263887
                          IP: 138.204.128.0/22
                          IP: 2804:2740::/32
Validation:               Failed, certificate revoked on Fri 17 Oct 2025 06:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6e:fe:e0:0b:ff:7b:6a:da:ff:ae:56:7a:1f:87:e1:13:65:16:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 13:16:47 2025 GMT
            Not After : Jun  3 13:21:47 2026 GMT
        Subject: CN=612546079777C83995107BFA129E54CE43A50026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:92:76:50:fc:28:e5:8b:f3:50:c1:d0:f7:
                    94:d8:2d:a7:26:66:5c:1c:76:ae:ea:43:ff:df:e4:
                    ff:a5:6a:01:7f:f3:0c:23:c6:fd:09:b3:5d:1a:d2:
                    f3:8a:fb:1c:87:92:b3:9e:8d:db:4d:9b:5c:ab:5c:
                    f4:b1:59:a3:43:24:d3:a9:fb:9d:44:b6:95:4b:0c:
                    dd:0f:14:08:e6:db:49:dd:a3:ce:ed:e8:14:f8:7f:
                    dc:f1:14:b8:fb:c6:dd:93:7b:ac:6a:2b:ff:b4:3e:
                    a3:a3:95:c8:f6:b1:79:63:5a:28:0b:6f:9d:5c:a5:
                    2f:8b:e9:7a:73:bf:be:15:cf:c6:e9:3a:36:82:e5:
                    e7:2e:eb:03:3c:09:f2:b4:f5:d7:88:b1:1f:43:3c:
                    89:eb:9b:74:7b:87:b6:66:e2:7b:47:b6:0b:90:67:
                    1c:5d:b6:5e:f4:40:f5:89:ef:64:3f:e6:b6:fd:3e:
                    85:55:c4:2b:a8:5a:44:aa:fa:9e:62:72:8e:e4:db:
                    cc:64:2b:27:59:95:4e:86:de:aa:41:c6:4a:9e:3a:
                    98:2d:7a:fe:06:fa:81:87:9c:3d:1a:65:84:0a:e2:
                    67:d2:ad:bd:49:cf:ab:04:bf:34:18:6a:4d:01:ed:
                    96:8d:8a:3f:73:de:02:6c:cb:cc:84:5b:38:15:27:
                    a8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:25:46:07:97:77:C8:39:95:10:7B:FA:12:9E:54:CE:43:A5:00:26
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.128.0/22
                IPv6:
                  2804:2740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263887

    Signature Algorithm: sha256WithRSAEncryption
         7b:b2:6a:d6:21:d9:e3:1c:ff:7e:df:95:76:8d:94:22:b5:c7:
         b2:39:b3:ad:1b:e9:70:6f:ca:39:c0:63:89:ae:ca:1c:e2:5f:
         32:f5:cd:96:b4:d9:42:1a:94:e0:4f:7a:6c:27:0e:4c:d1:10:
         98:1c:9b:83:6d:54:c6:9a:e3:30:50:24:37:4c:68:88:01:c7:
         67:31:be:2e:9d:cd:cd:35:3e:8f:d0:d7:48:58:90:41:bb:94:
         d9:4d:51:c5:88:55:ca:58:0f:48:8d:3e:02:47:22:1a:d3:65:
         99:6e:53:4f:24:a3:2c:a5:e6:e8:d3:d8:e8:7a:88:5b:c4:01:
         de:17:fe:bf:88:05:c6:3a:7e:66:c3:9f:5a:bd:76:2a:5e:4f:
         37:9b:39:5a:9c:ed:97:77:6f:0a:10:32:bd:71:29:b1:0e:61:
         13:cf:c6:d5:f6:af:06:eb:81:cf:57:9f:ae:60:d5:c2:2a:c2:
         50:f1:34:b6:d8:84:15:cb:a8:d2:df:a3:24:30:36:18:3f:ec:
         ec:95:0d:f2:b6:9d:cd:56:9c:a7:c6:92:b8:79:4b:94:b4:70:
         25:d4:1f:11:d6:c3:b7:36:66:72:e3:11:20:fe:50:08:3a:7b:
         34:70:44:75:86:2f:62:10:09:1c:94:ac:73:ce:cf:97:e5:86:
         62:f6:0a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----