This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer File: 123B03D46660DEE9B32E2712342EB4F48591C7B6.cer (raw, json) Hash identifier: BKunRehvPRXncJ3iiOUEumh3fjNYse+Z6mNgMa1cQFk= Subject key identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 22AA71EB3CC22C41F908C1AAAA6A418CBC3A4961 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft caRepository: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 19 Aug 2025 20:01:04 +0000 Certificate not after: Tue 18 Aug 2026 20:06:04 +0000 Subordinate resources: AS: 262503 IP: 45.181.228.0/22 IP: 167.249.168.0/22 IP: 177.66.192.0/22 IP: 177.91.52.0/22 IP: 2804:2be0::/32 Validation: Failed, certificate revoked on Thu 23 Oct 2025 04:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:aa:71:eb:3c:c2:2c:41:f9:08:c1:aa:aa:6a:41:8c:bc:3a:49:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 19 20:01:04 2025 GMT Not After : Aug 18 20:06:04 2026 GMT Subject: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2f:73:2f:6d:0a:82:cd:cc:54:48:93:a8:b4: 6b:e3:86:65:28:8d:2d:11:5d:cc:bb:d3:68:48:98: 54:a4:28:6e:1d:40:f4:4a:c7:8d:36:d2:09:30:cd: 3e:3e:c9:7c:11:31:98:be:67:3e:b9:e4:f6:bf:4f: 06:4d:43:4b:c2:8f:3d:1a:79:a0:0c:6b:7e:6f:2f: 72:92:08:cf:57:f8:8e:0c:4a:1a:bd:47:15:8f:06: 5a:5a:b1:cd:3d:54:3f:d4:5e:2d:d2:0c:c8:c4:0a: 27:f4:b5:9d:b6:e1:5e:7d:b6:17:81:57:66:45:a7: d2:b5:19:ca:10:85:90:25:ab:e5:4d:a1:86:bd:2f: 40:cf:81:13:aa:8e:81:e7:a4:5d:7d:d9:48:57:d7: 24:04:27:1f:5b:f7:7e:48:45:f5:63:49:5f:43:c0: f8:52:bc:15:e5:73:9b:86:78:5d:4c:d3:f7:c0:fb: 12:87:86:97:85:12:e3:94:de:3d:5a:c8:43:cf:1d: 70:87:95:87:9a:26:1c:8d:af:f6:f0:14:3c:83:f7: 4d:6a:d8:0a:39:d0:cb:ef:51:02:45:22:69:b5:71: 4d:57:a2:1d:ee:f7:f4:3f:ce:5e:80:c5:da:3d:3e: bc:80:9b:68:28:86:20:69:fb:a5:ea:d1:53:d4:57: 42:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.181.228.0/22 167.249.168.0/22 177.66.192.0/22 177.91.52.0/22 IPv6: 2804:2be0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262503 Signature Algorithm: sha256WithRSAEncryption 0d:4c:10:cc:84:69:de:18:b8:39:39:04:b7:70:3e:8b:53:e2: 15:6f:9b:b3:21:6b:cf:d3:f9:87:55:2f:91:f4:a1:03:b8:c1: ba:51:4a:86:03:83:a7:b8:25:ec:45:0c:5d:84:0e:c8:2a:93: 3f:fb:db:50:ef:d2:b5:00:79:c7:1b:17:43:56:f4:b5:33:28: a5:f3:01:e2:28:57:c9:d9:59:58:c5:44:2c:8c:30:09:16:e5: e0:fd:b3:68:2d:ec:24:34:66:74:29:0e:2a:c5:ed:a9:fa:2d: 6f:c9:8f:0d:0a:1f:ec:cf:d5:d4:87:07:ed:07:1b:56:db:ad: 1c:c7:c1:9b:19:20:d9:06:b7:c6:b8:4b:b8:d7:ec:c8:ca:c7: 05:89:e2:aa:d1:07:38:5c:41:45:dc:e1:91:57:79:8c:04:45: bb:15:66:b7:8c:f6:84:dd:17:35:49:e7:30:97:ef:b8:ae:2d: 7e:ad:c4:e0:26:14:b4:59:c3:c8:93:41:73:70:cd:b0:c3:89: 3b:9a:45:82:2c:5f:fc:8f:90:b8:60:25:73:78:c3:56:03:92: b4:b2:37:e4:17:d2:b4:d2:46:d8:3c:08:25:a1:0a:7c:bc:d7: 84:5e:0a:d2:dc:57:c4:08:04:b0:b8:27:e8:30:21:ad:b1:44: d9:39:4e:a6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUIqpx6zzCLEH5CMGqqmpBjLw6SWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MTkyMDAxMDRaFw0yNjA4MTgyMDA2MDRaMDMxMTAvBgNV BAMTKDEyM0IwM0Q0NjY2MERFRTlCMzJFMjcxMjM0MkVCNEY0ODU5MUM3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1L3MvbQqCzcxUSJOotGvjhmUo jS0RXcy702hImFSkKG4dQPRKx4020gkwzT4+yXwRMZi+Zz655Pa/TwZNQ0vCjz0a eaAMa35vL3KSCM9X+I4MShq9RxWPBlpasc09VD/UXi3SDMjECif0tZ224V59theB V2ZFp9K1GcoQhZAlq+VNoYa9L0DPgROqjoHnpF192UhX1yQEJx9b935IRfVjSV9D wPhSvBXlc5uGeF1M0/fA+xKHhpeFEuOU3j1ayEPPHXCHlYeaJhyNr/bwFDyD901q 2Ao50MvvUQJFImm1cU1Xoh3u9/Q/zl6Axdo9PryAm2gohiBp+6Xq0VPUV0KNAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSOwPUZmDe6bMu JxI0LrT0hZHHtjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEVv NVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1Ga0YvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhF bzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAvMTIz QjAzRDQ2NjYwREVFOUIzMkUyNzEyMzQyRUI0RjQ4NTkxQzdCNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCLbXkAwQCp/moAwQCsULAAwQCsVs0MA0EAgACMAcD BQAoBCvgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQBZzANBgkqhkiG9w0BAQsF AAOCAQEADUwQzIRp3hi4OTkEt3A+i1PiFW+bsyFrz9P5h1UvkfShA7jBulFKhgOD p7gl7EUMXYQOyCqTP/vbUO/StQB5xxsXQ1b0tTMopfMB4ihXydlZWMVELIwwCRbl 4P2zaC3sJDRmdCkOKsXtqfotb8mPDQof7M/V1IcH7QcbVtutHMfBmxkg2Qa3xrhL uNfsyMrHBYniqtEHOFxBRdzhkVd5jARFuxVmt4z2hN0XNUnnMJfvuK4tfq3E4CYU tFnDyJNBc3DNsMOJO5pFgixf/I+QuGAlc3jDVgOStLI35BfStNJG2DwIJaEKfLzX hF4K0txXxAgEsLgn6DAhrbFE2TlOpg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:19:16 2025 by rpki-client