This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/014DBFDCD468F68848FADACA4E0EF0702750FA7C.cer
File:                     014DBFDCD468F68848FADACA4E0EF0702750FA7C.cer (raw, json)
Hash identifier:          2JG9vLPhSw1gIrnXb36pbVTf0GutG+hwIzD9MJrj7eE=
Subject key identifier:   01:4D:BF:DC:D4:68:F6:88:48:FA:DA:CA:4E:0E:F0:70:27:50:FA:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3868D96AE2F191BD0BE1FDA35B8A1EE7DA30D318
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 May 2025 04:12:21 +0000
Certificate not after:    Fri 01 May 2026 04:17:21 +0000
Subordinate resources:    AS: 61599
                          IP: 200.71.76.0/22
                          IP: 2804:3ca0::/32
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 14:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:68:d9:6a:e2:f1:91:bd:0b:e1:fd:a3:5b:8a:1e:e7:da:30:d3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  2 04:12:21 2025 GMT
            Not After : May  1 04:17:21 2026 GMT
        Subject: CN=014DBFDCD468F68848FADACA4E0EF0702750FA7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:1f:06:3d:7f:f3:0a:0a:45:4d:1c:8d:d0:
                    14:69:ca:c0:b6:04:25:be:6e:6e:4f:de:4b:20:32:
                    03:3a:bc:e1:15:84:eb:3f:b5:bc:92:54:fa:c8:cb:
                    7f:05:56:8d:4b:9e:2f:2f:d8:72:4e:fc:61:c2:c9:
                    44:01:95:c5:91:2e:9f:42:cf:72:2f:9f:2e:9e:08:
                    1c:50:63:8d:2d:b1:6c:14:c3:61:6b:67:0b:1d:6c:
                    0b:e9:76:c1:e9:2f:32:65:e7:32:63:2f:60:56:5c:
                    5c:45:bf:10:5f:4c:5f:31:f2:6f:01:ee:24:4c:21:
                    92:c2:ec:d2:3b:90:63:7a:ae:c9:96:78:bb:cf:c6:
                    2d:66:c4:89:10:43:24:8b:8a:b3:ea:7d:85:14:e8:
                    61:9a:dd:02:01:50:df:96:ac:45:d8:cb:a5:4e:f7:
                    50:83:cf:dc:e1:92:ab:e4:a9:e1:c7:60:e0:7c:05:
                    25:86:79:4f:73:43:b3:23:f6:b4:49:05:16:3e:30:
                    a3:84:9e:41:d3:97:94:89:5c:c3:95:9a:91:ff:d8:
                    6d:69:cd:32:3f:2f:ed:3d:13:b2:18:cb:73:51:a7:
                    8c:57:1b:3c:25:f9:c4:2c:20:f0:ad:a9:66:3b:6c:
                    11:43:b6:78:18:e3:2e:98:9b:e0:01:46:16:74:60:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:4D:BF:DC:D4:68:F6:88:48:FA:DA:CA:4E:0E:F0:70:27:50:FA:7C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.76.0/22
                IPv6:
                  2804:3ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61599

    Signature Algorithm: sha256WithRSAEncryption
         2a:c6:83:13:9d:d2:20:81:0a:6f:f4:92:95:e0:e0:0a:14:41:
         8c:32:29:c7:c0:e7:c3:1b:52:cb:d3:c5:27:69:52:91:37:a2:
         e3:9f:c1:19:e2:bc:e9:79:84:42:9f:44:fa:bc:d3:b7:07:93:
         11:b8:e3:4e:be:b3:b6:75:7a:62:88:1a:19:04:96:4d:f3:e5:
         0e:58:16:2f:98:87:a3:38:68:f7:f1:2f:ff:90:46:1b:a2:99:
         42:5c:62:cf:66:33:c8:c9:dd:6f:1d:84:b6:a1:1f:86:fa:35:
         f9:b2:03:42:c3:da:db:ed:e9:3c:86:cf:f4:43:1d:f6:0c:8e:
         11:19:e7:d6:30:88:6a:f7:d4:d4:80:16:0b:74:34:d0:b4:20:
         2d:38:62:55:74:b7:2f:a6:b3:9e:a7:07:1f:b6:24:f8:32:f0:
         4e:ea:7c:51:4d:e0:dd:8a:31:54:d4:2e:76:b9:18:51:c0:7a:
         ca:d3:c2:76:b0:db:47:c8:9c:b4:d5:82:83:d2:18:6b:40:d0:
         64:c3:05:c2:00:46:f1:ca:43:fd:6e:44:80:22:b4:c7:f6:15:
         ef:c9:67:dc:49:d6:44:b5:75:d8:d7:53:c0:e6:49:5f:10:eb:
         5f:f9:3b:0a:fd:d9:2e:b6:73:2c:b9:b4:ae:52:65:10:27:33:
         c3:69:0c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----