This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/811DD86140C7A0ACC8829D1B806C2E9ED36033B8.cer
File:                     811DD86140C7A0ACC8829D1B806C2E9ED36033B8.cer (raw, json)
Hash identifier:          mzARv7PgMKd7lEfYh3abnniOtA8jWHQHnjoV0XLyhns=
Subject key identifier:   81:1D:D8:61:40:C7:A0:AC:C8:82:9D:1B:80:6C:2E:9E:D3:60:33:B8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F6B46F9F51EFB958B85CE0F0F7669EE14A986E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/811DD86140C7A0ACC8829D1B806C2E9ED36033B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 23:14:49 +0000
Certificate not after:    Wed 25 Mar 2026 23:19:49 +0000
Subordinate resources:    AS: 263326
                          IP: 191.7.176.0/21
                          IP: 2804:1458::/32
Validation:               Failed, certificate revoked on Wed 08 Oct 2025 10:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6b:46:f9:f5:1e:fb:95:8b:85:ce:0f:0f:76:69:ee:14:a9:86:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 23:14:49 2025 GMT
            Not After : Mar 25 23:19:49 2026 GMT
        Subject: CN=811DD86140C7A0ACC8829D1B806C2E9ED36033B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:9d:cc:71:61:ba:42:9c:c4:cc:3d:7e:f8:
                    15:de:ea:34:23:5c:24:94:91:61:58:a2:cc:bb:f9:
                    6d:a2:eb:69:98:32:12:5a:d3:4c:21:2d:bc:89:15:
                    63:1b:9a:00:e8:5e:72:c8:d0:22:9b:2f:43:2a:b9:
                    33:aa:08:a0:d5:0d:7b:d3:d8:a8:f7:10:a0:fc:41:
                    90:18:82:36:8d:c6:a5:4a:1a:85:d3:f6:20:ec:50:
                    0a:9c:78:42:78:67:96:7c:9d:95:08:8d:ec:23:39:
                    14:7e:54:6c:d2:33:f2:aa:99:08:21:93:31:6b:68:
                    1b:42:50:bd:7c:f8:9e:c3:39:74:f2:82:58:ed:a8:
                    11:f0:47:77:38:59:01:ab:aa:6d:ad:e2:0e:79:ac:
                    1b:b3:b3:23:69:95:b7:a5:62:b3:c0:2c:41:bd:f1:
                    cb:1e:96:47:b9:ef:f2:d4:83:98:c2:7b:d5:b4:51:
                    12:45:7d:40:c9:ab:77:45:88:3c:ad:80:bf:e8:27:
                    1a:99:1d:73:bc:74:27:78:85:c7:ac:b8:84:16:f4:
                    c6:3e:3a:0e:a5:79:50:66:c1:6a:be:47:58:66:bb:
                    35:1b:bd:6b:a0:97:ab:49:36:f2:2a:d4:9f:6a:fc:
                    16:ed:05:fe:02:b1:c1:3f:37:33:d3:cb:99:d5:b5:
                    1a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:1D:D8:61:40:C7:A0:AC:C8:82:9D:1B:80:6C:2E:9E:D3:60:33:B8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/811DD86140C7A0ACC8829D1B806C2E9ED36033B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.176.0/21
                IPv6:
                  2804:1458::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263326

    Signature Algorithm: sha256WithRSAEncryption
         1f:ce:25:5e:cf:ae:0f:9a:8f:08:aa:18:33:be:38:26:4e:37:
         f2:f4:a7:8e:22:5a:77:af:a4:30:c8:c9:6b:15:e4:ed:54:55:
         94:ba:4e:88:94:fb:41:cc:b3:12:6f:b6:69:be:02:4b:1d:b1:
         2e:f8:71:25:00:0f:7b:e5:d9:ba:be:6c:ad:f7:13:b6:7e:c8:
         5b:ec:7d:0d:9b:d4:6f:ae:20:02:67:5d:1d:05:d9:80:f7:54:
         ab:99:4d:da:eb:71:77:8f:ad:64:16:ae:9d:38:76:ab:81:d1:
         28:24:82:1a:d5:3b:49:02:a4:52:95:a8:16:e1:fd:7c:0e:16:
         7a:bd:02:42:2d:14:51:7b:b7:72:5c:53:2e:50:70:d3:3c:a3:
         b3:ed:be:92:f6:af:0d:82:21:b0:cd:83:eb:3d:c7:a6:fd:93:
         1b:ca:f7:29:73:a3:30:0d:78:fa:24:40:2b:2f:07:1e:49:a5:
         37:dd:52:8a:45:48:1f:97:08:db:26:1e:8a:dd:cc:9e:64:9a:
         4a:8b:89:ba:48:e2:82:01:9a:59:66:da:19:a3:78:46:1b:ed:
         b9:81:44:b0:d1:14:48:2d:fb:75:bd:4f:af:10:49:aa:8d:b2:
         d4:eb:09:44:bf:59:51:70:7f:53:49:b7:8c:4a:3a:eb:6f:ff:
         4d:22:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----