This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
File: 1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer (raw, json)
Hash identifier: 1mMXaDIREqS+8j3sG9zDuVKZY0ki0Fmb5gXBKV9fEeg=
Subject key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 17009895765A22209571321814FF67334C5299F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
caRepository: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 15 Aug 2025 18:52:55 +0000
Certificate not after: Fri 14 Aug 2026 18:57:55 +0000
Subordinate resources: AS: 28649
AS: 28668
IP: 45.6.148.0/22
IP: 45.175.112.0/22
IP: 45.180.212.0/22
IP: 131.0.200.0/22
IP: 131.161.164.0/22
IP: 138.118.96.0/22
IP: 138.204.88.0/22
IP: 138.255.68.0/22
IP: 143.137.88.0/22
IP: 143.255.224.0/22
IP: 143.255.232.0/22
IP: 168.121.64.0/22
IP: 168.196.28.0/22
IP: 168.227.32.0/22
IP: 170.0.20.0/22
IP: 170.79.208.0/22
IP: 170.80.148.0/22
IP: 170.83.120.0/22
IP: 170.83.140.0/22
IP: 170.231.104.0/22
IP: 170.238.48.0/22
IP: 170.244.252.0/22
IP: 177.52.0.0/20
IP: 177.125.200.0/22
IP: 177.131.64.0/19
IP: 179.108.0.0/20
IP: 179.108.176.0/21
IP: 179.125.128.0/17
IP: 186.195.208.0/20
IP: 186.209.64.0/20
IP: 186.211.16.0/20
IP: 186.249.128.0/19
IP: 186.251.224.0/22
IP: 187.85.32.0/20
IP: 187.94.160.0/19
IP: 187.95.160.0/20
IP: 187.109.128.0/19
IP: 189.1.144.0/20
IP: 189.36.224.0/20
IP: 189.50.96.0/20
IP: 189.91.224.0/19
IP: 189.124.32.0/20
IP: 189.124.64.0/20
IP: 191.243.248.0/21
IP: 191.253.32.0/21
IP: 200.236.192.0/20
IP: 200.236.224.0/19
IP: 201.33.64.0/20
IP: 201.33.192.0/20
IP: 201.77.112.0/20
IP: 201.77.176.0/20
IP: 2001:12b4::/32
IP: 2804:a4::/32
IP: 2804:474::/32
IP: 2804:4ec::/32
IP: 2804:5f4::/32
IP: 2804:868::/32
IP: 2804:a00::/32
IP: 2804:c28::/32
IP: 2804:c30::/32
IP: 2804:2894::/32
Validation: Failed, certificate revoked on Fri 15 Aug 2025 19:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:00:98:95:76:5a:22:20:95:71:32:18:14:ff:67:33:4c:52:99:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 15 18:52:55 2025 GMT
Not After : Aug 14 18:57:55 2026 GMT
Subject: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:fb:74:f6:65:e2:46:98:d5:eb:d2:a2:4c:
78:7b:66:8a:07:50:3a:a9:8e:e9:16:a0:db:2a:4e:
c9:f0:0a:bf:a1:0a:61:ad:34:8e:a1:69:00:04:a6:
f9:b4:d2:2d:f4:df:f3:95:1e:77:86:d2:e5:a5:fb:
9a:11:15:26:b4:5c:35:f1:84:af:45:a6:3e:b3:c1:
1f:bf:8f:8f:94:d1:85:ef:2f:a1:7d:b9:17:c6:b4:
4c:72:cc:06:a1:de:52:49:f8:37:0e:6f:95:81:00:
ac:d1:17:cf:72:2a:b4:d8:55:1b:b0:b6:d8:b2:a9:
63:75:dd:53:f4:ba:ee:84:d1:a5:42:96:9e:b3:84:
7d:a9:25:25:5e:21:c9:c2:27:71:32:f1:5b:ac:66:
fb:77:de:06:d9:79:58:78:cd:da:eb:be:cd:d7:7b:
86:5d:3f:83:a1:eb:a1:a7:76:c7:0f:8f:11:9f:b2:
79:62:50:44:59:e8:96:62:e0:6b:8f:ee:bb:bf:ed:
65:b6:d7:53:c1:a6:6f:30:ec:69:9e:2f:d0:e2:2d:
07:29:7d:f7:fc:5b:98:1c:37:15:ec:03:f5:e9:47:
2f:9d:b8:15:23:20:c5:0f:39:f6:5b:1e:ce:27:28:
04:72:ac:00:08:5f:a2:8a:60:f9:b9:58:99:43:f9:
34:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.148.0/22
45.175.112.0/22
45.180.212.0/22
131.0.200.0/22
131.161.164.0/22
138.118.96.0/22
138.204.88.0/22
138.255.68.0/22
143.137.88.0/22
143.255.224.0/22
143.255.232.0/22
168.121.64.0/22
168.196.28.0/22
168.227.32.0/22
170.0.20.0/22
170.79.208.0/22
170.80.148.0/22
170.83.120.0/22
170.83.140.0/22
170.231.104.0/22
170.238.48.0/22
170.244.252.0/22
177.52.0.0/20
177.125.200.0/22
177.131.64.0/19
179.108.0.0/20
179.108.176.0/21
179.125.128.0/17
186.195.208.0/20
186.209.64.0/20
186.211.16.0/20
186.249.128.0/19
186.251.224.0/22
187.85.32.0/20
187.94.160.0/19
187.95.160.0/20
187.109.128.0/19
189.1.144.0/20
189.36.224.0/20
189.50.96.0/20
189.91.224.0/19
189.124.32.0/20
189.124.64.0/20
191.243.248.0/21
191.253.32.0/21
200.236.192.0/20
200.236.224.0/19
201.33.64.0/20
201.33.192.0/20
201.77.112.0/20
201.77.176.0/20
IPv6:
2001:12b4::/32
2804:a4::/32
2804:474::/32
2804:4ec::/32
2804:5f4::/32
2804:868::/32
2804:a00::/32
2804:c28::/32
2804:c30::/32
2804:2894::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28649
28668
Signature Algorithm: sha256WithRSAEncryption
82:c9:51:2a:bb:55:0a:65:81:35:1a:ff:b1:98:6d:26:14:48:
e6:84:4f:94:18:9a:d9:94:e5:e5:35:c1:ea:a0:41:20:3c:b6:
06:e8:bd:15:8b:8d:68:63:5e:db:0e:f8:79:9f:4d:12:f5:4e:
2a:9d:47:af:b7:95:d1:8f:cb:01:f2:c8:c1:f2:c1:3a:f3:32:
64:a9:48:f1:63:9d:6f:b6:a1:c5:18:40:45:86:a4:02:f1:4b:
80:c3:90:dc:d3:e2:93:b9:ee:8a:38:a3:70:09:da:46:95:43:
92:98:d6:01:16:6a:70:75:52:cb:da:7c:28:86:d4:92:86:c0:
d6:1c:79:19:a6:8f:eb:53:bc:1f:0f:3f:1c:e0:00:ec:58:30:
73:e0:12:58:97:be:e4:32:66:77:59:54:d6:01:8a:b7:98:1a:
6d:c3:f2:d4:e8:86:e8:7b:9c:3e:cb:a6:9d:6a:b8:53:37:b8:
81:de:e4:e0:05:49:56:5c:95:fa:6c:8f:37:7a:e2:f7:a5:df:
c3:b5:f7:be:b0:f3:4c:80:bf:9e:4a:c9:71:8d:0e:a7:60:f8:
64:fb:5c:26:11:22:aa:92:aa:ff:13:ce:5e:e0:5f:4a:45:dc:
57:50:5f:00:d9:45:62:c7:75:08:f7:82:19:0c:f3:31:cd:27:
c9:a6:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:16:13 2025 by rpki-client