This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.cer
File:                     21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.cer (raw, json)
Hash identifier:          3x7OyO/JnktQbqan25yiULXDwr0Z6cDY1+jBK0zaDig=
Subject key identifier:   21:C8:7B:27:DD:DE:84:5B:F0:C3:A3:F9:09:65:AA:4D:9B:F4:27:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C80AECD3933E17BD0E589898D7E9803320A36EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Jun 2025 18:06:13 +0000
Certificate not after:    Fri 05 Jun 2026 18:11:13 +0000
Subordinate resources:    AS: 271335
                          IP: 207.248.20.0/22
                          IP: 2804:79e8::/32
Validation:               Failed, certificate revoked on Thu 31 Jul 2025 00:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:80:ae:cd:39:33:e1:7b:d0:e5:89:89:8d:7e:98:03:32:0a:36:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  6 18:06:13 2025 GMT
            Not After : Jun  5 18:11:13 2026 GMT
        Subject: CN=21C87B27DDDE845BF0C3A3F90965AA4D9BF42778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:98:f2:84:d7:f6:76:81:fa:16:a1:0c:ae:
                    74:76:48:c0:04:26:85:6a:6b:03:81:17:4f:7b:38:
                    9a:07:b1:07:19:53:cf:89:66:f3:0b:79:67:73:fd:
                    7a:ea:43:40:0c:f9:a4:82:cd:94:9d:02:ce:b2:23:
                    64:b2:62:54:d2:f7:f4:09:c5:e4:db:d8:72:32:ce:
                    d2:07:9b:dc:2f:32:1c:f0:77:fc:07:1a:30:2c:5e:
                    cc:87:e1:a6:f5:48:48:b9:5b:c4:7d:63:30:d4:c7:
                    16:fa:65:9c:54:85:bf:71:cf:7c:fb:fc:77:f4:9a:
                    64:29:fb:cc:03:37:23:c1:fb:00:0e:7b:d6:89:e7:
                    14:a7:49:bd:1f:f1:d2:47:64:84:81:48:4c:1c:2b:
                    2d:b8:47:85:94:3a:ab:41:7e:d3:34:c1:dd:8a:41:
                    7f:e2:d4:7e:e8:c0:88:90:6b:67:49:be:8a:45:62:
                    f7:2f:3b:f8:4e:49:92:80:4f:ab:b9:f7:5b:99:b3:
                    5a:a2:de:4f:76:a5:b0:37:2c:11:f7:18:c7:a1:f7:
                    03:08:30:06:50:b6:09:a5:b3:60:16:76:62:a7:b3:
                    8a:94:55:75:07:b0:f6:26:61:63:66:23:a6:f3:3a:
                    43:bd:09:6e:fe:53:1a:7c:89:94:c1:28:ae:8e:2a:
                    75:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:C8:7B:27:DD:DE:84:5B:F0:C3:A3:F9:09:65:AA:4D:9B:F4:27:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.20.0/22
                IPv6:
                  2804:79e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271335

    Signature Algorithm: sha256WithRSAEncryption
         8d:72:93:46:0e:36:85:4f:d1:2d:c8:a3:7f:46:8a:39:68:d1:
         3d:43:9c:77:77:c4:08:ef:b0:ac:ed:8c:ce:09:56:c4:76:68:
         9e:45:3f:06:17:8b:bb:8f:45:4d:11:06:a0:e2:da:7a:b3:bd:
         de:42:46:25:d4:9d:3c:12:ec:d1:24:71:2d:09:98:fe:c7:30:
         0a:c1:45:ba:86:be:0d:8e:78:74:5f:4d:8f:0e:e0:5d:50:20:
         60:bd:01:a5:f3:8a:af:28:12:fc:4d:61:cd:7b:9b:96:66:1c:
         b3:0c:41:1f:52:99:66:d6:ad:25:e0:ab:b4:7f:16:41:08:f9:
         77:45:4d:7a:a9:c4:fe:03:2a:98:8b:e4:07:ad:b2:1c:d4:fe:
         06:70:a8:ac:7a:2c:b4:80:f6:6b:77:64:be:70:fd:b3:59:81:
         25:90:32:9e:97:81:af:c9:cf:07:03:78:2b:b7:8a:03:00:8c:
         1d:a2:08:19:78:85:21:86:85:e0:59:4b:9a:fd:f2:1a:7c:5e:
         62:dd:40:ca:2e:85:43:e5:3b:3d:f6:de:84:af:8e:d6:64:5b:
         6b:7c:88:89:83:29:8d:28:a4:14:d3:3e:2e:aa:75:b5:d2:e2:
         01:14:dd:3b:bf:3f:87:97:d0:42:33:cc:a4:3d:be:3b:fc:0e:
         02:f0:8c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----