This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer
File:                     11A3253369B722D4E05779F8F48046A43B02EAD1.cer (raw, json)
Hash identifier:          7Z5prcglhZE+qjPh0g5mlz8/dk4DP8+Oz0ws8Uzf9kY=
Subject key identifier:   11:A3:25:33:69:B7:22:D4:E0:57:79:F8:F4:80:46:A4:3B:02:EA:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B6A12E03024EBA48314C223CC1F594537845944
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 May 2025 14:32:01 +0000
Certificate not after:    Wed 06 May 2026 14:37:01 +0000
Subordinate resources:    AS: 263389
                          IP: 177.87.252.0/22
                          IP: 2804:1574::/32
Validation:               Failed, certificate revoked on Tue 09 Sep 2025 05:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6a:12:e0:30:24:eb:a4:83:14:c2:23:cc:1f:59:45:37:84:59:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  7 14:32:01 2025 GMT
            Not After : May  6 14:37:01 2026 GMT
        Subject: CN=11A3253369B722D4E05779F8F48046A43B02EAD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:5e:34:6f:53:ad:d6:25:aa:ee:37:dd:44:
                    62:0f:fa:14:96:51:10:a3:8b:66:aa:b6:7b:6b:8b:
                    0d:17:5e:d1:94:b7:99:78:9d:67:79:e0:27:eb:24:
                    44:34:95:26:78:9e:a6:6a:76:cc:07:c3:e9:8a:94:
                    97:ff:42:8f:ab:59:4a:0b:bd:d4:2f:25:c9:34:57:
                    21:7d:73:7d:1f:72:53:86:ca:50:84:cd:62:5c:75:
                    8f:86:ba:38:b3:46:8a:5f:3c:8f:08:d1:70:e6:47:
                    5e:6f:2f:8a:e2:a6:40:51:df:b6:16:4f:1a:23:ef:
                    6b:17:0c:5a:d2:d5:e1:e6:75:cb:ed:0d:4e:ff:2c:
                    6f:e0:85:1e:3f:80:55:a9:5d:cc:0c:71:87:d4:9f:
                    ac:e0:f0:1e:7a:e5:b6:98:b5:e7:d6:fb:e9:ba:a2:
                    f6:ac:45:41:89:d8:ee:d9:66:51:65:42:aa:99:0a:
                    19:fc:d2:ed:21:56:d0:66:6d:28:9b:bc:b4:99:04:
                    f9:f0:8c:97:37:54:b8:e7:3a:23:7d:68:1d:63:78:
                    41:9c:2b:db:7e:55:3c:43:f5:b7:53:c9:e8:c7:d8:
                    be:86:c6:e2:fc:81:20:4d:b5:55:9a:aa:af:e4:1a:
                    1b:2c:2b:cf:2d:57:16:7e:ab:53:9a:af:9b:d3:4b:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:A3:25:33:69:B7:22:D4:E0:57:79:F8:F4:80:46:A4:3B:02:EA:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.252.0/22
                IPv6:
                  2804:1574::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263389

    Signature Algorithm: sha256WithRSAEncryption
         b0:46:17:36:85:d3:6b:83:43:6b:98:32:b2:89:02:9e:7d:09:
         56:88:41:3a:e0:d2:a9:dd:a0:dc:e1:82:db:20:0e:04:1f:c1:
         2f:2e:a6:06:1f:4c:07:4c:d7:22:81:5b:46:70:68:75:39:2b:
         78:d8:3b:0f:cc:d0:c7:4f:02:ac:30:56:db:ab:ed:66:83:f6:
         01:72:5a:73:6d:5b:01:ce:b3:fa:10:a8:2b:f0:fa:88:73:d1:
         17:3d:0d:1a:75:37:db:68:c7:b6:32:1b:4d:2b:c9:2b:de:b8:
         15:2e:61:5b:32:c0:07:b6:07:b6:c1:9b:1e:97:fd:5c:1e:54:
         44:98:d3:75:ec:37:21:44:3e:c5:b3:cf:f5:b3:5b:4c:a5:59:
         05:52:8f:e5:d6:f8:56:4a:7f:06:72:ee:68:62:4f:41:56:68:
         1e:0b:d3:42:b9:50:d5:fb:a9:e5:95:87:4f:f8:cf:21:02:03:
         db:f3:8a:54:da:68:7e:4a:fa:fc:07:9b:24:b8:b3:cd:a1:f5:
         ea:e3:e6:d2:98:73:e8:11:10:91:81:ee:75:f3:e0:13:6a:32:
         d6:54:36:59:30:6c:53:ae:6f:cf:3d:5c:c5:9e:4e:6e:9d:8c:
         51:44:df:47:12:83:03:bc:b9:dc:b5:db:98:aa:15:2c:b0:ae:
         21:d0:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----