This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/218CD3983D9DF04BAE16D6B05B69D93B706F9CF5.cer
File:                     218CD3983D9DF04BAE16D6B05B69D93B706F9CF5.cer (raw, json)
Hash identifier:          /LgXcO8axEMTn79OQYfqYEaNmHtnDZxtH66p9N7OJ20=
Subject key identifier:   21:8C:D3:98:3D:9D:F0:4B:AE:16:D6:B0:5B:69:D9:3B:70:6F:9C:F5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5A036CEC71057FB7DC7B38F27960243E647701AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/218CD3983D9DF04BAE16D6B05B69D93B706F9CF5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Jun 2025 11:07:47 +0000
Certificate not after:    Wed 17 Jun 2026 11:12:47 +0000
Subordinate resources:    AS: 266106
                          IP: 45.5.200.0/22
                          IP: 2804:3abc::/32
Validation:               Failed, certificate revoked on Thu 26 Jun 2025 21:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:03:6c:ec:71:05:7f:b7:dc:7b:38:f2:79:60:24:3e:64:77:01:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 18 11:07:47 2025 GMT
            Not After : Jun 17 11:12:47 2026 GMT
        Subject: CN=218CD3983D9DF04BAE16D6B05B69D93B706F9CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:73:23:8a:cd:d5:07:02:92:c8:27:2c:2c:c7:
                    7e:c6:43:45:c5:8a:50:15:81:2a:03:5a:dc:cf:33:
                    28:81:b4:ec:21:8b:6b:55:a7:f6:37:61:d7:74:ad:
                    54:eb:6c:95:d4:f4:ee:99:d7:c1:af:eb:33:1c:85:
                    db:e4:7c:10:a6:36:ef:6f:89:29:92:22:db:46:5a:
                    34:87:5f:77:8b:65:2a:cf:da:80:66:58:e1:44:32:
                    2e:ee:b2:c6:e0:a0:3f:2e:9d:5e:45:b1:f2:7d:a1:
                    fb:9d:46:b7:87:e2:40:29:ac:3a:8a:b5:44:45:74:
                    2c:94:84:65:70:78:1a:33:ed:b5:4c:3d:d4:96:ce:
                    0c:19:93:1b:ff:bb:d1:bd:c0:bf:6c:b3:49:73:62:
                    bc:fa:0a:6b:34:93:d2:e2:08:a6:bb:32:1e:a0:19:
                    a3:09:2c:9a:85:4b:8d:42:65:03:18:dc:3a:0e:68:
                    b4:91:57:85:dd:7e:8e:9f:1e:9b:7d:14:88:ac:60:
                    c8:55:85:39:ff:b9:70:a3:c3:49:e8:d9:b6:4a:a5:
                    38:ce:3a:a1:c3:34:f6:e4:c8:6d:28:98:49:53:54:
                    fd:3c:68:12:bf:be:1c:44:ac:6f:88:5e:c7:5e:1c:
                    77:b0:ba:a5:39:4a:45:e9:5f:26:4d:56:f3:cb:62:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:8C:D3:98:3D:9D:F0:4B:AE:16:D6:B0:5B:69:D9:3B:70:6F:9C:F5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/218CD3983D9DF04BAE16D6B05B69D93B706F9CF5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.200.0/22
                IPv6:
                  2804:3abc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266106

    Signature Algorithm: sha256WithRSAEncryption
         6e:40:54:99:7b:b3:25:bc:25:d4:3e:59:30:7d:34:3e:d2:28:
         1d:ec:37:05:4c:6a:b3:48:6a:6e:8b:94:36:b6:5f:bf:0e:eb:
         a9:33:66:9f:ad:81:3f:1b:85:33:10:8f:2e:c9:1d:dc:d0:e2:
         39:6c:39:23:0b:b4:ee:2a:96:3b:2a:23:76:28:82:f2:b1:46:
         9b:47:42:1b:b1:cf:cd:11:f2:c7:ee:2c:bb:83:73:ca:b1:99:
         e4:c5:3a:b4:2a:8c:35:e7:8c:9a:4c:81:db:1f:b5:8e:cc:5a:
         35:94:97:2d:f6:e0:1d:71:e9:bb:9d:b8:d9:6e:7d:52:8e:fe:
         a1:ad:e9:20:61:3d:a0:f2:66:50:86:f0:cc:2c:b4:0f:45:7f:
         9a:55:82:d4:a5:53:40:4e:20:f7:27:43:e4:5e:1f:c1:73:f4:
         7f:9c:3e:28:11:64:51:3f:03:60:02:79:38:5e:02:65:f4:50:
         2c:56:0a:4c:a2:ef:93:28:9f:8c:a0:d1:9f:e6:e6:17:a5:09:
         11:af:62:71:91:41:d1:fb:81:80:ff:9b:24:50:73:96:74:8d:
         6b:49:34:bd:bc:3b:1d:b0:f5:6e:2e:91:4d:9f:3c:fb:1b:43:
         93:d5:c0:f8:91:43:b7:c0:31:28:34:7d:e1:0a:5f:9d:9e:ca:
         14:9e:be:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----