This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
File:                     1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer (raw, json)
Hash identifier:          1mMXaDIREqS+8j3sG9zDuVKZY0ki0Fmb5gXBKV9fEeg=
Subject key identifier:   1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       17009895765A22209571321814FF67334C5299F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
caRepository:             rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Aug 2025 18:52:55 +0000
Certificate not after:    Fri 14 Aug 2026 18:57:55 +0000
Subordinate resources:    AS: 28649
                          AS: 28668
                          IP: 45.6.148.0/22
                          IP: 45.175.112.0/22
                          IP: 45.180.212.0/22
                          IP: 131.0.200.0/22
                          IP: 131.161.164.0/22
                          IP: 138.118.96.0/22
                          IP: 138.204.88.0/22
                          IP: 138.255.68.0/22
                          IP: 143.137.88.0/22
                          IP: 143.255.224.0/22
                          IP: 143.255.232.0/22
                          IP: 168.121.64.0/22
                          IP: 168.196.28.0/22
                          IP: 168.227.32.0/22
                          IP: 170.0.20.0/22
                          IP: 170.79.208.0/22
                          IP: 170.80.148.0/22
                          IP: 170.83.120.0/22
                          IP: 170.83.140.0/22
                          IP: 170.231.104.0/22
                          IP: 170.238.48.0/22
                          IP: 170.244.252.0/22
                          IP: 177.52.0.0/20
                          IP: 177.125.200.0/22
                          IP: 177.131.64.0/19
                          IP: 179.108.0.0/20
                          IP: 179.108.176.0/21
                          IP: 179.125.128.0/17
                          IP: 186.195.208.0/20
                          IP: 186.209.64.0/20
                          IP: 186.211.16.0/20
                          IP: 186.249.128.0/19
                          IP: 186.251.224.0/22
                          IP: 187.85.32.0/20
                          IP: 187.94.160.0/19
                          IP: 187.95.160.0/20
                          IP: 187.109.128.0/19
                          IP: 189.1.144.0/20
                          IP: 189.36.224.0/20
                          IP: 189.50.96.0/20
                          IP: 189.91.224.0/19
                          IP: 189.124.32.0/20
                          IP: 189.124.64.0/20
                          IP: 191.243.248.0/21
                          IP: 191.253.32.0/21
                          IP: 200.236.192.0/20
                          IP: 200.236.224.0/19
                          IP: 201.33.64.0/20
                          IP: 201.33.192.0/20
                          IP: 201.77.112.0/20
                          IP: 201.77.176.0/20
                          IP: 2001:12b4::/32
                          IP: 2804:a4::/32
                          IP: 2804:474::/32
                          IP: 2804:4ec::/32
                          IP: 2804:5f4::/32
                          IP: 2804:868::/32
                          IP: 2804:a00::/32
                          IP: 2804:c28::/32
                          IP: 2804:c30::/32
                          IP: 2804:2894::/32
Validation:               Failed, certificate revoked on Fri 15 Aug 2025 19:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:00:98:95:76:5a:22:20:95:71:32:18:14:ff:67:33:4c:52:99:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 15 18:52:55 2025 GMT
            Not After : Aug 14 18:57:55 2026 GMT
        Subject: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:fb:74:f6:65:e2:46:98:d5:eb:d2:a2:4c:
                    78:7b:66:8a:07:50:3a:a9:8e:e9:16:a0:db:2a:4e:
                    c9:f0:0a:bf:a1:0a:61:ad:34:8e:a1:69:00:04:a6:
                    f9:b4:d2:2d:f4:df:f3:95:1e:77:86:d2:e5:a5:fb:
                    9a:11:15:26:b4:5c:35:f1:84:af:45:a6:3e:b3:c1:
                    1f:bf:8f:8f:94:d1:85:ef:2f:a1:7d:b9:17:c6:b4:
                    4c:72:cc:06:a1:de:52:49:f8:37:0e:6f:95:81:00:
                    ac:d1:17:cf:72:2a:b4:d8:55:1b:b0:b6:d8:b2:a9:
                    63:75:dd:53:f4:ba:ee:84:d1:a5:42:96:9e:b3:84:
                    7d:a9:25:25:5e:21:c9:c2:27:71:32:f1:5b:ac:66:
                    fb:77:de:06:d9:79:58:78:cd:da:eb:be:cd:d7:7b:
                    86:5d:3f:83:a1:eb:a1:a7:76:c7:0f:8f:11:9f:b2:
                    79:62:50:44:59:e8:96:62:e0:6b:8f:ee:bb:bf:ed:
                    65:b6:d7:53:c1:a6:6f:30:ec:69:9e:2f:d0:e2:2d:
                    07:29:7d:f7:fc:5b:98:1c:37:15:ec:03:f5:e9:47:
                    2f:9d:b8:15:23:20:c5:0f:39:f6:5b:1e:ce:27:28:
                    04:72:ac:00:08:5f:a2:8a:60:f9:b9:58:99:43:f9:
                    34:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.148.0/22
                  45.175.112.0/22
                  45.180.212.0/22
                  131.0.200.0/22
                  131.161.164.0/22
                  138.118.96.0/22
                  138.204.88.0/22
                  138.255.68.0/22
                  143.137.88.0/22
                  143.255.224.0/22
                  143.255.232.0/22
                  168.121.64.0/22
                  168.196.28.0/22
                  168.227.32.0/22
                  170.0.20.0/22
                  170.79.208.0/22
                  170.80.148.0/22
                  170.83.120.0/22
                  170.83.140.0/22
                  170.231.104.0/22
                  170.238.48.0/22
                  170.244.252.0/22
                  177.52.0.0/20
                  177.125.200.0/22
                  177.131.64.0/19
                  179.108.0.0/20
                  179.108.176.0/21
                  179.125.128.0/17
                  186.195.208.0/20
                  186.209.64.0/20
                  186.211.16.0/20
                  186.249.128.0/19
                  186.251.224.0/22
                  187.85.32.0/20
                  187.94.160.0/19
                  187.95.160.0/20
                  187.109.128.0/19
                  189.1.144.0/20
                  189.36.224.0/20
                  189.50.96.0/20
                  189.91.224.0/19
                  189.124.32.0/20
                  189.124.64.0/20
                  191.243.248.0/21
                  191.253.32.0/21
                  200.236.192.0/20
                  200.236.224.0/19
                  201.33.64.0/20
                  201.33.192.0/20
                  201.77.112.0/20
                  201.77.176.0/20
                IPv6:
                  2001:12b4::/32
                  2804:a4::/32
                  2804:474::/32
                  2804:4ec::/32
                  2804:5f4::/32
                  2804:868::/32
                  2804:a00::/32
                  2804:c28::/32
                  2804:c30::/32
                  2804:2894::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28649
                  28668

    Signature Algorithm: sha256WithRSAEncryption
         82:c9:51:2a:bb:55:0a:65:81:35:1a:ff:b1:98:6d:26:14:48:
         e6:84:4f:94:18:9a:d9:94:e5:e5:35:c1:ea:a0:41:20:3c:b6:
         06:e8:bd:15:8b:8d:68:63:5e:db:0e:f8:79:9f:4d:12:f5:4e:
         2a:9d:47:af:b7:95:d1:8f:cb:01:f2:c8:c1:f2:c1:3a:f3:32:
         64:a9:48:f1:63:9d:6f:b6:a1:c5:18:40:45:86:a4:02:f1:4b:
         80:c3:90:dc:d3:e2:93:b9:ee:8a:38:a3:70:09:da:46:95:43:
         92:98:d6:01:16:6a:70:75:52:cb:da:7c:28:86:d4:92:86:c0:
         d6:1c:79:19:a6:8f:eb:53:bc:1f:0f:3f:1c:e0:00:ec:58:30:
         73:e0:12:58:97:be:e4:32:66:77:59:54:d6:01:8a:b7:98:1a:
         6d:c3:f2:d4:e8:86:e8:7b:9c:3e:cb:a6:9d:6a:b8:53:37:b8:
         81:de:e4:e0:05:49:56:5c:95:fa:6c:8f:37:7a:e2:f7:a5:df:
         c3:b5:f7:be:b0:f3:4c:80:bf:9e:4a:c9:71:8d:0e:a7:60:f8:
         64:fb:5c:26:11:22:aa:92:aa:ff:13:ce:5e:e0:5f:4a:45:dc:
         57:50:5f:00:d9:45:62:c7:75:08:f7:82:19:0c:f3:31:cd:27:
         c9:a6:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:16:13 2025 by rpki-client