This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7C0A79A31B50DE2C1C7D99F248E560193C413735.cer
File:                     7C0A79A31B50DE2C1C7D99F248E560193C413735.cer (raw, json)
Hash identifier:          bt7Pz/pOKuB/Qi3kKn2l4epTPAd8kuC/8LrFhWCIaVo=
Subject key identifier:   7C:0A:79:A3:1B:50:DE:2C:1C:7D:99:F2:48:E5:60:19:3C:41:37:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       066B8C611E6F7BA0BAEBAB58A04F3A42B2FD0CB2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7C0A79A31B50DE2C1C7D99F248E560193C413735.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Jun 2025 19:45:52 +0000
Certificate not after:    Mon 01 Jun 2026 19:50:52 +0000
Subordinate resources:    AS: 266445
                          AS: 268230
                          IP: 45.235.220.0/22
                          IP: 170.82.180.0/22
                          IP: 2804:37f0::/32
                          IP: 2804:4df4::/32
Validation:               Failed, certificate revoked on Tue 28 Oct 2025 02:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6b:8c:61:1e:6f:7b:a0:ba:eb:ab:58:a0:4f:3a:42:b2:fd:0c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  2 19:45:52 2025 GMT
            Not After : Jun  1 19:50:52 2026 GMT
        Subject: CN=7C0A79A31B50DE2C1C7D99F248E560193C413735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d9:be:f6:c7:94:b6:01:3a:b4:84:73:f8:a5:
                    91:89:7f:95:d0:58:90:88:2e:70:16:0d:ed:62:51:
                    bd:df:68:8a:30:df:fa:44:8f:cc:07:7c:b8:43:eb:
                    a9:cd:f0:9c:57:37:c7:8b:40:50:02:9a:ea:c2:d2:
                    4b:60:cc:35:c7:b5:54:4b:e6:48:bd:14:15:c0:dc:
                    c6:c5:b1:4d:09:55:de:35:70:1b:b0:92:70:83:9d:
                    fb:29:48:10:fb:04:01:49:95:0d:40:7a:05:b8:7f:
                    9c:af:9a:dc:51:8b:da:c0:c9:86:10:66:d3:3c:18:
                    23:9d:e4:6f:7e:bc:0d:2a:55:5a:95:9b:6b:82:e1:
                    fc:f3:d0:9f:0c:68:6a:09:79:a4:4d:5d:e3:d4:9c:
                    e6:c7:d2:92:04:2a:d5:09:78:a7:8b:a1:41:6f:4d:
                    5d:03:c5:37:0b:68:f6:7d:1b:00:9b:76:f3:60:88:
                    74:b2:8a:de:19:fb:74:3e:59:58:7a:1b:df:24:b7:
                    97:86:9c:52:35:42:5b:c0:7c:0a:7e:c1:42:9f:9b:
                    f5:aa:65:fa:a0:74:cc:86:e1:84:7b:84:05:61:08:
                    9e:6d:33:3f:6d:4f:1a:d0:df:9b:b8:aa:d8:4c:a3:
                    df:a0:ba:38:8f:62:24:85:9f:09:86:56:f3:16:99:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:0A:79:A3:1B:50:DE:2C:1C:7D:99:F2:48:E5:60:19:3C:41:37:35
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7C0A79A31B50DE2C1C7D99F248E560193C413735.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.220.0/22
                  170.82.180.0/22
                IPv6:
                  2804:37f0::/32
                  2804:4df4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266445
                  268230

    Signature Algorithm: sha256WithRSAEncryption
         67:50:a0:14:c4:80:b2:4b:ab:8f:0e:a0:c5:e2:52:46:2d:19:
         77:82:80:28:35:04:1a:2f:76:24:6c:dc:4f:0f:83:6a:da:5a:
         01:2f:18:21:08:a8:d3:cf:bd:db:80:59:bb:d2:1e:16:f0:98:
         0a:87:ff:11:a9:40:6f:f2:d2:da:a1:1e:67:f7:fe:92:8c:32:
         4a:30:5e:25:16:51:82:0f:71:8d:a2:fb:30:dc:ec:34:9e:cc:
         e1:8a:a3:51:43:42:ea:24:e6:58:74:88:04:4d:33:cf:8e:40:
         2d:08:3a:e3:4e:f5:47:f1:0b:b9:8d:96:00:5d:68:55:f8:4b:
         90:f0:a5:9c:10:f9:e0:ef:9e:56:12:48:34:00:03:cb:9d:49:
         49:b0:3f:a9:b3:db:66:b7:71:b3:56:da:6d:3c:29:6d:92:c0:
         66:5e:95:64:f8:b0:4a:25:ac:a3:10:df:53:24:e0:ff:90:c4:
         95:98:ba:8b:06:0b:cf:04:99:cd:eb:e5:a8:a4:45:71:f2:0c:
         15:7c:fc:4f:0d:65:9d:11:f3:45:0b:1b:8b:ec:9b:89:0d:ce:
         05:be:6d:68:eb:f7:8e:e8:bc:5e:4d:d3:59:18:b8:46:a7:97:
         c3:e3:42:7e:ed:d7:ab:e2:e8:b3:b7:fd:e8:39:a3:43:5d:c9:
         cf:eb:de:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----