This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/05B494EA9B421A148C7800D87A384A0D729C0E93.cer
File:                     05B494EA9B421A148C7800D87A384A0D729C0E93.cer (raw, json)
Hash identifier:          FVpN5eynJsFn+Y1WCPMAwkdEz4Qei37tYNqC+grC0fI=
Subject key identifier:   05:B4:94:EA:9B:42:1A:14:8C:78:00:D8:7A:38:4A:0D:72:9C:0E:93
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0553B161001E52CDBC9C0677597E238929E0AF62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/05B494EA9B421A148C7800D87A384A0D729C0E93.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Nov 2025 12:54:31 +0000
Certificate not after:    Sat 07 Nov 2026 12:59:31 +0000
Subordinate resources:    AS: 264135
                          IP: 138.94.64.0/22
                          IP: 2804:22f8::/32
Validation:               Failed, certificate revoked on Mon 24 Nov 2025 04:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:53:b1:61:00:1e:52:cd:bc:9c:06:77:59:7e:23:89:29:e0:af:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  8 12:54:31 2025 GMT
            Not After : Nov  7 12:59:31 2026 GMT
        Subject: CN=05B494EA9B421A148C7800D87A384A0D729C0E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7e:19:28:88:ce:11:b2:ba:23:a2:17:fa:db:
                    e9:da:27:89:1b:85:ff:01:d8:12:5c:8f:06:75:f1:
                    a9:cd:9e:64:7a:f7:9a:07:8b:34:b8:84:74:79:c7:
                    a9:6a:3a:91:7a:ac:8c:c3:6e:ae:4a:1b:46:db:5f:
                    b2:b3:d8:b0:f6:f0:4a:1e:2e:ba:c3:68:35:6a:80:
                    9d:2e:b8:83:65:8f:0f:8a:de:e4:55:34:f0:20:f1:
                    94:0f:a3:48:39:c9:6e:eb:7c:86:22:74:93:af:f6:
                    7d:f6:70:56:2b:59:08:44:be:41:60:66:f1:8f:ff:
                    cc:8f:64:a5:db:ad:a7:4c:c9:18:94:e9:45:4f:31:
                    c5:9c:d9:3a:ea:9a:05:17:68:36:54:f8:44:9a:36:
                    60:40:5c:16:94:ce:64:5e:74:60:54:ff:27:ec:67:
                    95:8c:be:d6:ee:d7:72:35:0d:6f:59:49:eb:f4:2a:
                    c3:41:1e:5c:e2:41:ec:af:dd:ea:94:3d:d6:73:55:
                    19:7f:22:32:63:45:d9:07:70:7f:ee:87:25:c5:3c:
                    97:98:27:73:5c:24:c1:63:4c:31:fe:bc:02:f0:5f:
                    b0:a7:58:bd:9c:77:cd:0f:9d:72:b9:81:22:a3:4f:
                    01:1b:e3:17:6f:4d:0f:47:97:9b:3b:92:01:93:f7:
                    de:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:B4:94:EA:9B:42:1A:14:8C:78:00:D8:7A:38:4A:0D:72:9C:0E:93
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/05B494EA9B421A148C7800D87A384A0D729C0E93.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.64.0/22
                IPv6:
                  2804:22f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264135

    Signature Algorithm: sha256WithRSAEncryption
         4e:7b:2f:b1:f8:65:f2:55:c7:ea:99:0e:85:23:3e:f5:d0:74:
         d0:c5:7c:92:07:aa:c3:1c:a4:8a:20:83:29:fc:d5:51:01:c2:
         b7:2b:f2:1c:f3:d4:a8:e0:64:ec:35:53:68:64:dd:24:7b:a7:
         fe:a2:bf:62:93:13:64:71:4f:63:fc:d4:f0:2a:18:ae:b9:10:
         a7:96:bf:da:87:6b:04:72:7e:ae:76:4e:61:ee:0e:75:5e:b6:
         dd:5f:ce:3d:1f:ce:a2:3f:66:21:25:36:75:08:15:a7:d3:ec:
         e3:7c:d2:e8:b2:d2:7d:69:6c:b4:68:1d:30:6a:8e:38:b4:da:
         9d:77:7f:4a:4a:b3:db:27:31:0c:2e:19:a5:b8:99:c3:ea:25:
         68:43:a9:f0:55:2a:34:40:ae:42:69:83:66:89:d1:89:00:ee:
         e7:36:76:75:0c:ed:7e:78:1c:92:27:fd:bc:a3:5e:b9:f2:03:
         71:f7:4e:f7:f2:c2:cf:68:1b:6b:7d:7a:1c:f8:9c:60:67:83:
         e2:82:41:6a:3b:1f:8a:b3:0f:e3:40:31:19:3d:1c:e7:7f:3a:
         5e:3e:7a:eb:c8:ae:07:8b:01:9c:07:00:90:c7:eb:5f:81:2b:
         91:60:e2:be:cd:8e:40:33:f5:83:b4:17:33:ae:30:1f:3f:b9:
         58:96:9c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----