This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer
File:                     CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer (raw, json)
Hash identifier:          f54OLhkDFzu4aSYrfIR2sn0465V59nU4hmS4Xpf+bjA=
Subject key identifier:   CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       407FC4E3B048834DEFC0B44AB202A5DD184B12AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Feb 2025 19:03:42 +0000
Certificate not after:    Mon 16 Feb 2026 19:08:42 +0000
Subordinate resources:    AS: 269457
                          IP: 45.187.60.0/22
                          IP: 2804:64e8::/32
Validation:               Failed, certificate revoked on Sat 25 Oct 2025 16:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7f:c4:e3:b0:48:83:4d:ef:c0:b4:4a:b2:02:a5:dd:18:4b:12:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 17 19:03:42 2025 GMT
            Not After : Feb 16 19:08:42 2026 GMT
        Subject: CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:24:9d:cb:f5:41:35:43:80:13:c5:06:6d:2a:
                    a9:f5:15:be:30:94:23:d1:50:f7:b9:33:70:ec:60:
                    bf:ae:67:fd:08:59:3c:e3:e9:1e:56:fa:07:eb:2c:
                    c1:3a:7f:ac:88:4e:02:6b:89:21:8f:ba:8c:ab:62:
                    9a:3b:63:3c:a6:2e:a7:36:5e:bd:7b:8b:ac:42:db:
                    f5:66:33:38:37:c1:0e:1e:a0:10:3d:3a:5d:53:ab:
                    07:0d:4f:31:cc:c4:6f:fd:97:49:3a:46:7e:bb:13:
                    b0:05:84:e3:ce:c6:76:ba:f0:97:18:91:68:d2:3e:
                    7a:66:60:00:05:fb:d7:34:78:d1:8f:b6:d4:36:d7:
                    72:bb:78:8d:7d:69:74:e9:43:db:3b:2a:3e:aa:cd:
                    95:56:a2:0d:1d:9f:d3:6e:45:ba:6f:19:32:1e:79:
                    ef:5c:b1:06:b7:2e:a2:f0:8d:25:df:08:47:86:d1:
                    9b:d4:df:74:7f:6a:2d:3c:16:d4:7a:21:be:c1:cc:
                    3c:bc:40:e9:81:e8:e2:05:a3:64:94:90:44:61:aa:
                    62:e2:5d:ee:ad:aa:4e:fb:85:d7:a7:37:ad:aa:f2:
                    39:db:db:47:da:a7:8c:d7:75:a6:d6:25:c2:b9:af:
                    f2:5d:0b:e4:58:db:26:ab:9c:1f:0a:6f:f3:83:3b:
                    1c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.60.0/22
                IPv6:
                  2804:64e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269457

    Signature Algorithm: sha256WithRSAEncryption
         c9:2f:78:55:7a:65:14:cc:bd:f2:0a:55:c4:a1:8b:48:b3:bf:
         41:fa:9b:cb:4b:5e:2d:ba:d5:e1:fb:05:66:dd:7d:d0:08:02:
         70:cf:1b:16:bd:2f:d5:2a:db:39:40:a9:29:29:41:3e:57:cc:
         1e:03:ee:f8:39:e2:9e:9f:86:66:d8:6b:8c:44:a2:5d:3b:6a:
         82:25:ed:09:57:eb:df:35:33:d4:e4:7d:9e:12:bf:23:d4:80:
         a3:e5:85:7c:4f:32:3b:f2:db:6e:50:34:24:25:60:d5:ba:f3:
         aa:e4:e6:97:6c:ce:c6:6c:10:08:df:f6:39:d0:99:e7:72:c2:
         77:3f:56:a2:03:f5:ae:c6:d0:81:97:6a:62:32:74:15:20:46:
         7a:f7:7a:23:08:76:60:cc:e1:90:22:69:09:dc:04:20:73:46:
         91:58:74:3d:61:31:ec:20:8f:4a:68:ef:4d:15:ad:78:3a:69:
         01:9d:0f:14:d2:64:db:2c:f2:34:25:27:fc:d5:b2:66:0d:25:
         bc:b9:b0:e2:e8:3b:1e:1d:d3:c5:6a:01:7e:5d:70:34:cf:6d:
         1c:e3:34:4d:69:5d:f9:30:27:44:35:41:cd:d6:67:d9:bd:86:
         ee:30:f1:c4:5f:a1:f2:e0:3e:13:f8:c4:ea:39:3f:dc:ee:2d:
         ba:57:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----