This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1527C597A58C3A12588A6C8A96ED78E2C0EC76D0.cer
File:                     1527C597A58C3A12588A6C8A96ED78E2C0EC76D0.cer (raw, json)
Hash identifier:          zm6k+oWzGp3rONAKC7/LqKFuL6CoOuetqreoypmdepw=
Subject key identifier:   15:27:C5:97:A5:8C:3A:12:58:8A:6C:8A:96:ED:78:E2:C0:EC:76:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       71BACB3636BC4939662F625E9161B1A4538E73ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/1527C597A58C3A12588A6C8A96ED78E2C0EC76D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Apr 2025 08:03:35 +0000
Certificate not after:    Wed 01 Apr 2026 08:08:35 +0000
Subordinate resources:    AS: 267462
                          IP: 192.141.84.0/22
                          IP: 2804:41e0::/32
Validation:               Failed, certificate revoked on Thu 23 Oct 2025 21:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ba:cb:36:36:bc:49:39:66:2f:62:5e:91:61:b1:a4:53:8e:73:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  2 08:03:35 2025 GMT
            Not After : Apr  1 08:08:35 2026 GMT
        Subject: CN=1527C597A58C3A12588A6C8A96ED78E2C0EC76D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:5f:bf:f8:c3:35:75:52:a2:d5:95:da:02:
                    90:bc:1f:98:7b:50:04:42:74:2f:55:9a:a4:37:b4:
                    21:1c:ca:59:df:22:2d:76:80:df:ac:13:c4:2c:f4:
                    85:a4:49:1e:66:69:f6:10:5e:d3:fa:42:df:7c:d7:
                    63:b0:5f:44:4a:51:e8:74:26:80:19:a6:75:1c:17:
                    d9:ef:7b:52:77:7f:20:04:ab:8c:38:c9:65:49:37:
                    a9:4a:5b:70:51:cc:dc:6f:89:26:f7:db:b1:22:0d:
                    77:6f:f8:1e:56:b2:a5:be:9d:c0:6b:ab:dc:9f:96:
                    70:41:cb:00:bc:1a:a5:ef:5e:8a:b6:da:12:8f:26:
                    b9:37:71:e4:5f:da:e4:4a:f3:30:32:45:ac:bc:c6:
                    c3:24:a9:bc:68:a3:c1:cc:dd:a6:1e:46:b2:86:68:
                    a6:da:b9:a3:a7:c1:a1:a5:6e:5f:7e:9d:26:a8:d9:
                    4c:de:0f:c4:5d:a3:e9:b6:fe:f3:31:37:cd:fd:58:
                    83:50:4b:7f:41:2f:c4:3c:66:7e:de:74:b4:8c:d2:
                    22:6f:96:8d:6a:dd:29:f4:1b:36:b6:e5:73:d7:9a:
                    67:9c:8a:8b:b4:93:cc:31:c3:c9:61:94:6a:6c:8d:
                    b4:8e:29:0f:2c:20:f3:dc:c8:98:f0:2e:cf:ec:55:
                    67:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:27:C5:97:A5:8C:3A:12:58:8A:6C:8A:96:ED:78:E2:C0:EC:76:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/1527C597A58C3A12588A6C8A96ED78E2C0EC76D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.84.0/22
                IPv6:
                  2804:41e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267462

    Signature Algorithm: sha256WithRSAEncryption
         6f:98:35:1b:ac:42:52:e1:8d:24:19:af:08:c1:f1:e4:05:17:
         2e:db:d4:06:bd:8b:6f:5c:46:c8:75:e3:40:7d:48:d9:e7:98:
         a5:2c:5d:9a:31:29:9b:79:a0:01:7c:9b:7b:91:45:6c:57:f3:
         5c:43:2b:fb:72:17:b7:61:e9:99:93:c9:8b:ac:d9:9b:6a:28:
         fb:f6:5c:b2:0d:cd:08:0e:4c:0b:f9:c0:d7:ad:1c:70:75:ca:
         5a:84:19:5b:bc:f7:2b:3a:fd:c3:2b:0b:a8:60:0e:1d:0e:c3:
         0d:a5:7b:ce:82:89:97:72:0d:60:6d:1a:ab:19:8e:d7:f1:92:
         f8:75:98:9e:73:2a:c2:d6:9c:51:a1:09:07:94:09:1d:32:51:
         bb:91:0c:37:2d:74:55:64:eb:93:d3:ea:e1:9d:a9:13:ba:32:
         e5:c7:7b:7e:0a:fe:f8:2b:47:43:3b:fc:fd:73:8f:27:1d:fa:
         29:05:a9:da:2b:b2:94:28:46:66:8a:d2:6f:42:47:b0:f3:66:
         39:9b:be:52:83:d1:ec:e0:90:73:9f:f6:f4:19:4b:24:3c:94:
         33:50:d2:78:b6:e8:57:43:97:ba:b0:1a:b9:49:e6:e2:9e:42:
         0d:5a:97:cc:c5:82:39:4c:51:5b:27:04:05:a1:ea:23:cf:65:
         87:bd:91:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----