This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1EC4A5745561FAC5CF8B803011305131CF20490C.cer
File:                     1EC4A5745561FAC5CF8B803011305131CF20490C.cer (raw, json)
Hash identifier:          6hyXsxUe3t/BSl7GsK76Q7DBsi1N7agZWcjgFoj0Zjw=
Subject key identifier:   1E:C4:A5:74:55:61:FA:C5:CF:8B:80:30:11:30:51:31:CF:20:49:0C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       684B2F5C284E031248EA7CD0914F0ADC596676D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/1EC4A5745561FAC5CF8B803011305131CF20490C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Jun 2025 19:53:21 +0000
Certificate not after:    Fri 26 Jun 2026 19:58:21 +0000
Subordinate resources:    AS: 267469
                          IP: 192.141.156.0/22
                          IP: 2804:41f8::/32
Validation:               Failed, certificate revoked on Wed 10 Sep 2025 00:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4b:2f:5c:28:4e:03:12:48:ea:7c:d0:91:4f:0a:dc:59:66:76:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 27 19:53:21 2025 GMT
            Not After : Jun 26 19:58:21 2026 GMT
        Subject: CN=1EC4A5745561FAC5CF8B803011305131CF20490C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:8c:39:91:b9:02:b1:82:19:c6:c3:61:7c:
                    4f:df:99:57:ba:86:e7:ac:15:1e:db:0d:38:7d:7f:
                    91:24:ba:ba:e3:66:9e:d2:a2:90:d4:23:17:63:a3:
                    b3:97:aa:65:67:91:a3:52:89:0d:33:e4:37:5a:1a:
                    6c:60:a5:e8:f4:a6:41:c7:9c:0d:18:45:34:ec:dc:
                    69:a3:13:a1:2a:f3:a5:e1:9d:b1:ec:ab:23:d4:f5:
                    d4:76:f9:76:3d:c4:de:0b:1a:f4:a7:d1:e3:7d:a4:
                    44:b9:d5:0d:48:63:57:8c:b2:8c:3c:71:92:60:78:
                    2f:3b:96:8e:25:48:b1:aa:ba:1a:74:b4:43:41:49:
                    c5:e8:97:92:2b:20:f0:18:fd:4a:8b:3b:1a:a4:af:
                    f7:8f:c9:82:f2:aa:b6:0b:f1:90:85:ad:f5:89:2e:
                    20:fd:7d:f9:c4:7d:8e:7b:ef:ed:4d:ba:05:c3:ac:
                    2c:38:f8:6a:36:10:83:70:72:b3:6e:bd:a2:f1:0a:
                    e8:c3:3f:7d:79:51:0f:3f:c5:9c:b2:67:2c:92:ed:
                    1b:47:3f:0b:83:c6:0a:d5:a5:6a:29:e3:f5:99:59:
                    e1:b5:06:15:ea:c8:9a:7c:fc:f3:a5:bb:ed:73:9e:
                    b2:2a:8e:f8:3d:60:c5:85:54:e0:5f:f6:a2:7e:fb:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:C4:A5:74:55:61:FA:C5:CF:8B:80:30:11:30:51:31:CF:20:49:0C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/1EC4A5745561FAC5CF8B803011305131CF20490C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.156.0/22
                IPv6:
                  2804:41f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267469

    Signature Algorithm: sha256WithRSAEncryption
         58:3b:dc:ab:6e:4b:c8:cd:19:35:bc:b6:29:15:5c:47:50:9e:
         47:60:e4:5c:41:c2:c1:d4:dd:66:14:29:8b:22:9a:90:8f:ec:
         55:fd:ad:9d:0a:d7:0d:89:d7:61:f9:d7:bd:1e:c4:8e:91:d4:
         47:03:53:29:ca:7b:c8:cd:6e:9e:2e:4a:0f:45:d8:3f:af:ed:
         aa:46:bd:83:a0:9b:20:2a:0d:32:18:1d:a6:02:46:b2:e9:3c:
         13:c7:b5:0f:4b:4e:76:9e:35:c3:d6:aa:14:b4:be:ad:2d:fa:
         98:67:35:6d:88:16:37:e5:d4:f4:8f:b4:c6:45:e5:7b:d5:63:
         e8:74:b7:b5:45:11:9f:f2:c1:68:18:9f:02:76:a5:8c:b7:ca:
         fa:72:b0:2e:12:cb:f4:e9:7b:34:91:b5:7c:cf:7a:86:b9:38:
         ce:07:4d:bf:e1:ed:8b:1b:13:49:cd:03:6b:f8:c8:14:29:fd:
         9f:3b:ee:c8:c9:44:98:bf:0f:76:02:cb:9a:09:54:a9:53:b5:
         a5:79:3d:07:f4:fa:bd:28:f6:98:91:f4:dd:49:e3:86:d1:dd:
         e5:98:26:b0:29:79:80:cb:6e:c0:64:72:22:0d:40:fc:1d:2e:
         b4:57:6a:66:12:19:46:46:ea:e6:c4:19:e5:1d:72:63:d2:5d:
         ce:72:1b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----