This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/102604C78C92915676397D8891E762B57AB2192A.cer
File:                     102604C78C92915676397D8891E762B57AB2192A.cer (raw, json)
Hash identifier:          MAnh7V3Bwjr4TrTPdM55AgSUFiZNQ/yzVhDV3URm9Ng=
Subject key identifier:   10:26:04:C7:8C:92:91:56:76:39:7D:88:91:E7:62:B5:7A:B2:19:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       662C3651C782B11CDFB75FB7D23D2FE4E65F8018
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/102604C78C92915676397D8891E762B57AB2192A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 19:51:56 +0000
Certificate not after:    Wed 04 Feb 2026 19:56:56 +0000
Subordinate resources:    AS: 274678
                          IP: 2804:91f4::/32
Validation:               Failed, certificate revoked on Fri 13 Jun 2025 00:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2c:36:51:c7:82:b1:1c:df:b7:5f:b7:d2:3d:2f:e4:e6:5f:80:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  5 19:51:56 2025 GMT
            Not After : Feb  4 19:56:56 2026 GMT
        Subject: CN=102604C78C92915676397D8891E762B57AB2192A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:b3:00:4f:54:fd:e2:b9:a5:ba:8b:81:6a:
                    82:d7:d3:1d:b7:4e:6c:74:71:a5:07:68:0c:57:4d:
                    45:aa:e5:07:32:8b:6a:9d:7f:86:80:a8:38:88:23:
                    81:79:77:2d:13:19:db:ac:d1:db:58:0d:c2:2a:d6:
                    de:d9:44:ce:1d:01:3c:0e:d8:ed:68:df:e0:7e:67:
                    d7:0f:64:92:07:9d:04:48:bc:0b:31:76:87:0e:8c:
                    89:10:3d:36:a2:18:3c:f3:70:26:e4:08:7a:a2:5f:
                    d5:7e:14:be:92:90:74:a8:ea:a5:e5:75:0a:6b:0f:
                    2a:2e:25:7e:9e:d8:99:71:6d:4c:36:9d:85:59:45:
                    83:94:1b:ba:a5:87:0d:31:36:d3:4a:9f:00:8c:a5:
                    3b:67:f7:aa:f0:9b:dc:99:82:d4:cc:63:e5:16:46:
                    98:b6:f0:9c:b3:52:ab:49:da:7d:79:88:d1:0e:a1:
                    84:90:38:a5:ee:d9:fc:34:2a:24:4b:61:f7:3f:26:
                    8f:79:8c:42:3f:7d:d0:2f:3e:fc:7e:a2:ae:a4:5c:
                    1b:88:c6:ea:10:8f:9c:ce:26:9b:09:fc:b6:de:ff:
                    2f:d7:82:71:fe:ff:e7:e3:b9:c9:ac:c7:dd:71:ba:
                    33:2d:b5:1a:e8:3b:d1:d1:bc:ea:4c:4a:50:57:55:
                    f2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:26:04:C7:8C:92:91:56:76:39:7D:88:91:E7:62:B5:7A:B2:19:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/102604C78C92915676397D8891E762B57AB2192A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274678

    Signature Algorithm: sha256WithRSAEncryption
         93:c2:e8:74:8a:9a:b7:da:13:68:2a:0b:49:58:35:bc:a5:e3:
         31:ae:b5:0e:ef:17:78:ab:c1:f2:ed:a6:e3:70:e1:68:8b:8f:
         71:44:a7:f0:16:09:ed:da:79:7f:5f:72:ee:dd:5c:85:8f:8b:
         8e:50:af:9d:cb:f2:c5:43:4e:c9:28:6a:01:09:37:5c:bd:1e:
         57:7c:d4:8b:91:af:79:21:8f:e9:ac:0d:02:86:40:e7:da:6a:
         bc:45:da:ba:1e:0a:a4:bb:16:82:19:7f:84:12:04:e5:93:f0:
         8c:b8:6c:b7:60:23:91:0c:cb:bb:e4:35:de:52:41:83:a4:34:
         7e:d8:1c:7b:0f:bd:27:a8:34:6a:99:4a:be:63:d3:52:d0:0e:
         a3:83:60:3b:55:44:5d:a6:9c:5f:4a:11:b0:65:0b:42:fe:14:
         d8:c5:b0:63:2b:ac:ef:44:74:34:85:ce:bb:5b:02:af:be:39:
         31:c2:96:1f:d1:b6:e7:bd:50:24:21:b6:eb:3e:eb:c0:95:e7:
         32:a7:27:ce:a5:c3:ed:43:26:d8:c2:70:a7:4c:34:f0:d8:db:
         7f:af:5e:25:41:ac:80:b3:a5:47:cf:1f:d9:5f:e9:4b:3a:17:
         14:ee:03:a6:6f:bd:83:a6:5f:52:17:9d:0b:61:a3:0b:4d:fa:
         71:77:d8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----