This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AE237DC7B299A0FDCDF8225D9403B0A582305290.cer
File:                     AE237DC7B299A0FDCDF8225D9403B0A582305290.cer (raw, json)
Hash identifier:          Nl+G/AP4Oyljsd4T9Lb5hY0jXA5oz63B9JU7jSDxaMQ=
Subject key identifier:   AE:23:7D:C7:B2:99:A0:FD:CD:F8:22:5D:94:03:B0:A5:82:30:52:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       56F38D72451C5A920CA140F001DAA178C3BC3030
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/AE237DC7B299A0FDCDF8225D9403B0A582305290.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Aug 2025 18:59:03 +0000
Certificate not after:    Mon 10 Aug 2026 19:04:03 +0000
Subordinate resources:    AS: 263584
                          IP: 177.129.136.0/21
                          IP: 2804:f68::/32
Validation:               Failed, certificate revoked on Sun 28 Sep 2025 05:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f3:8d:72:45:1c:5a:92:0c:a1:40:f0:01:da:a1:78:c3:bc:30:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 11 18:59:03 2025 GMT
            Not After : Aug 10 19:04:03 2026 GMT
        Subject: CN=AE237DC7B299A0FDCDF8225D9403B0A582305290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d8:5f:02:3d:0b:42:6b:ca:0c:5a:76:5d:26:
                    0f:65:ca:3d:1f:18:36:9d:5c:a4:cf:50:61:a8:eb:
                    ea:48:7b:e4:70:51:5f:18:da:65:91:6d:a0:41:28:
                    31:77:d6:8a:d4:e3:57:f9:87:34:d6:87:36:0a:76:
                    6c:de:88:55:2b:6f:36:66:49:53:bd:6e:d4:bd:f4:
                    50:ca:26:98:79:ec:d8:2b:50:44:3a:aa:52:44:eb:
                    ef:af:0f:6e:0b:10:d6:ff:d2:c3:9f:15:27:71:80:
                    9a:0a:90:4b:a5:8f:09:9d:56:e5:b7:3b:96:4b:4e:
                    4a:74:90:81:d2:72:e5:c3:78:43:03:5c:5b:c9:0c:
                    34:31:85:cd:84:de:17:10:0b:93:b5:1c:49:bf:56:
                    82:f0:44:10:a7:6d:82:45:88:38:5a:3b:66:e5:75:
                    e0:0e:36:e1:8e:09:8b:3e:54:58:5d:e9:61:ed:75:
                    81:c1:7e:1c:b5:12:78:19:25:56:15:75:1f:f7:85:
                    6b:02:39:2c:aa:71:28:e0:53:31:6d:59:a7:ae:35:
                    1e:bb:b8:9e:40:49:a3:54:9d:cb:d2:28:67:71:5b:
                    b1:73:4b:e8:9a:0a:c1:d8:29:f5:88:2d:ee:52:83:
                    1d:00:e5:b1:a7:79:38:29:1c:58:71:18:7b:fd:6b:
                    66:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:23:7D:C7:B2:99:A0:FD:CD:F8:22:5D:94:03:B0:A5:82:30:52:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/AE237DC7B299A0FDCDF8225D9403B0A582305290.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.136.0/21
                IPv6:
                  2804:f68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263584

    Signature Algorithm: sha256WithRSAEncryption
         ae:4c:48:f2:07:82:f2:75:14:66:11:fb:c5:29:54:11:4d:dc:
         9a:20:46:a3:74:90:31:f0:fe:a8:c6:48:07:93:d2:f9:82:4f:
         5c:88:70:32:08:43:a4:a4:ae:d5:90:ee:9b:ca:d1:05:66:a1:
         bd:4e:50:a0:59:a5:7e:e2:90:5e:80:87:c7:e1:1d:9b:1b:5a:
         91:9b:e2:87:bc:24:9b:30:c6:a0:c7:04:0f:8c:ca:ab:09:d2:
         bb:d9:45:09:2b:4f:fa:d1:a1:82:70:ce:21:45:ff:f6:32:f9:
         18:1f:4c:c9:e4:3a:dd:b9:76:1b:4e:a1:62:5a:78:31:02:b2:
         ce:0a:f1:9b:0b:eb:23:22:12:8e:51:31:82:3b:4d:80:62:d6:
         59:b0:b7:fb:8e:20:7a:de:c0:2a:86:6e:a8:35:89:60:f3:f2:
         95:c1:00:74:81:ea:5d:7b:a8:09:95:b1:e6:22:1e:86:21:4f:
         6f:3e:1a:c9:ae:e2:49:ba:01:97:4b:85:22:df:c3:e4:78:9f:
         d2:8c:02:db:a1:c0:d2:f6:65:a1:fa:74:05:ea:11:87:fe:dc:
         99:0f:31:f8:63:ae:c9:dc:e2:32:be:88:3a:8d:c4:1b:82:16:
         55:50:2a:74:20:50:7d:d7:e2:51:7b:01:e8:2a:cc:f2:26:fb:
         ec:7b:c5:bf
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUVvONckUcWpIMoUDwAdqheMO8MDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA4MTExODU5MDNaFw0yNjA4MTAxOTA0MDNaMDMxMTAvBgNV
BAMTKEFFMjM3REM3QjI5OUEwRkRDREY4MjI1RDk0MDNCMEE1ODIzMDUyOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT2F8CPQtCa8oMWnZdJg9lyj0f
GDadXKTPUGGo6+pIe+RwUV8Y2mWRbaBBKDF31orU41f5hzTWhzYKdmzeiFUrbzZm
SVO9btS99FDKJph57NgrUEQ6qlJE6++vD24LENb/0sOfFSdxgJoKkEuljwmdVuW3
O5ZLTkp0kIHScuXDeEMDXFvJDDQxhc2E3hcQC5O1HEm/VoLwRBCnbYJFiDhaO2bl
deAONuGOCYs+VFhd6WHtdYHBfhy1EngZJVYVdR/3hWsCOSyqcSjgUzFtWaeuNR67
uJ5ASaNUncvSKGdxW7FzS+iaCsHYKfWILe5Sgx0A5bGneTgpHFhxGHv9a2a3AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuI33Hspmg/c34
Il2UA7ClgjBSkDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0tp
MnpZUHZWQ3ZVcGFLOFRSSFZhODhZa2RLUWk3d0J6S2d3am15TDRSQ3EvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dL
aTJ6WVB2VkN2VXBhSzhUUkhWYTg4WWtkS1FpN3dCektnd2pteUw0UkNxLzAvQUUy
MzdEQzdCMjk5QTBGRENERjgyMjVEOTQwM0IwQTU4MjMwNTI5MC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDsYGIMA0EAgACMAcDBQAoBA9oMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQFoDANBgkqhkiG9w0BAQsFAAOCAQEArkxI8geC8nUUZhH7
xSlUEU3cmiBGo3SQMfD+qMZIB5PS+YJPXIhwMghDpKSu1ZDum8rRBWahvU5QoFml
fuKQXoCHx+EdmxtakZvih7wkmzDGoMcED4zKqwnSu9lFCStP+tGhgnDOIUX/9jL5
GB9MyeQ63bl2G06hYlp4MQKyzgrxmwvrIyISjlExgjtNgGLWWbC3+44get7AKoZu
qDWJYPPylcEAdIHqXXuoCZWx5iIehiFPbz4aya7iSboBl0uFIt/D5Hif0owC26HA
0vZlofp0BeoRh/7cmQ8x+GOuydziMr6IOo3EG4IWVVAqdCBQfdfiUXsB6CrM8ib7
7HvFvw==
-----END CERTIFICATE-----