This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer
File:                     2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer (raw, json)
Hash identifier:          88MzZ+LWF6WiA77QHsbo+jHK1zvec3y4Agbmj20epaI=
Subject key identifier:   23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       69C35953FBAF424E9385C1889F701C37929A7477
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 31 Mar 2025 13:29:38 +0000
Certificate not after:    Mon 30 Mar 2026 13:34:38 +0000
Subordinate resources:    AS: 267556
                          IP: 45.70.0.0/22
                          IP: 2804:4338::/32
Validation:               Failed, certificate revoked on Tue 09 Sep 2025 13:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c3:59:53:fb:af:42:4e:93:85:c1:88:9f:70:1c:37:92:9a:74:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 31 13:29:38 2025 GMT
            Not After : Mar 30 13:34:38 2026 GMT
        Subject: CN=2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a2:d2:22:62:4d:2d:26:8f:7a:4c:18:bc:51:
                    89:db:7e:af:81:78:8a:79:67:4a:09:90:ef:49:93:
                    24:a4:22:bb:3c:25:cb:80:59:79:d2:eb:82:db:c2:
                    6d:70:ab:c8:eb:a5:d6:83:a8:a7:1c:0b:8a:66:30:
                    90:b3:cc:e6:ee:da:3a:75:55:29:54:ad:22:06:b6:
                    b9:2e:60:b6:67:40:41:1e:59:fc:e3:92:4e:2e:4d:
                    c5:c2:4c:60:4d:3a:0d:d4:dd:1b:9b:32:6e:93:97:
                    24:3b:89:38:66:2f:cc:4d:50:31:76:88:65:57:3a:
                    2d:3b:d4:46:76:5f:49:89:0a:40:d9:01:3b:9d:b4:
                    88:2b:23:8e:d2:05:23:57:33:68:20:38:72:49:46:
                    1c:7c:2c:0d:a6:25:e4:44:91:f6:55:35:22:8f:cb:
                    b2:c0:0e:be:a9:5f:b5:5d:99:8e:63:c5:5e:82:fc:
                    7d:35:aa:27:08:b3:80:38:2d:5b:0a:76:bf:af:52:
                    3f:57:9f:9a:2f:49:3b:9b:31:96:5d:4d:5d:24:2d:
                    0b:89:ba:c6:6b:21:d7:76:19:5e:b9:16:ab:fd:39:
                    25:88:e6:13:eb:75:bd:f2:65:be:46:3b:e4:9e:b9:
                    8b:db:08:a7:e8:a2:e6:45:8c:92:83:04:ff:6f:79:
                    5f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.0.0/22
                IPv6:
                  2804:4338::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267556

    Signature Algorithm: sha256WithRSAEncryption
         74:a4:01:02:6f:67:7f:55:73:b6:1e:d9:f0:aa:1a:a2:dc:cb:
         02:de:32:34:92:22:ec:47:49:f5:8e:d9:67:eb:e3:1b:18:96:
         9f:8f:1b:ab:fc:c4:7e:9c:11:50:b9:33:40:ac:2e:98:75:0a:
         0e:9b:e4:34:63:5c:59:8a:c5:bb:57:e1:de:00:a7:11:46:28:
         24:d9:b1:05:b6:c3:02:b6:cf:e5:c0:c4:7e:70:4c:2a:51:d9:
         ee:b8:c9:0f:91:69:c4:f8:15:62:ad:0f:7c:f4:c2:7c:cc:f1:
         f0:66:ec:c6:18:47:df:9d:4b:2e:82:f8:bd:c6:06:3c:a3:f6:
         d9:9a:9a:7f:98:a7:b8:0c:29:88:7a:71:e2:fe:ae:39:7c:07:
         e1:2d:3f:64:92:f9:a8:bd:40:93:ff:61:74:c1:73:62:d0:73:
         d3:fe:80:4b:10:37:29:fb:a6:af:ef:38:32:fb:e3:04:fa:cb:
         b8:97:80:43:67:5e:5d:13:93:af:9a:01:f0:0d:5a:25:d4:dc:
         fd:1a:ba:48:1f:cc:f9:c0:33:3c:42:2b:4f:04:60:4b:69:db:
         1c:30:f2:5c:0d:fd:25:e6:03:06:25:2c:d6:31:01:5c:9c:a4:
         60:f4:f3:31:6c:8e:5a:61:17:ef:ef:18:d1:10:42:d3:7d:2d:
         ac:77:f9:f8
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUacNZU/uvQk6ThcGIn3AcN5KadHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMzExMzI5MzhaFw0yNjAzMzAxMzM0MzhaMDMxMTAvBgNV
BAMTKDIzODNCM0FGQTM1QURCMkEzNjM4QTlGMkFFMEQ5QzI3QUZCNUM1MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFotIiYk0tJo96TBi8UYnbfq+B
eIp5Z0oJkO9JkySkIrs8JcuAWXnS64Lbwm1wq8jrpdaDqKccC4pmMJCzzObu2jp1
VSlUrSIGtrkuYLZnQEEeWfzjkk4uTcXCTGBNOg3U3RubMm6TlyQ7iThmL8xNUDF2
iGVXOi071EZ2X0mJCkDZATudtIgrI47SBSNXM2ggOHJJRhx8LA2mJeREkfZVNSKP
y7LADr6pX7VdmY5jxV6C/H01qicIs4A4LVsKdr+vUj9Xn5ovSTubMZZdTV0kLQuJ
usZrIdd2GV65Fqv9OSWI5hPrdb3yZb5GO+SeuYvbCKfoouZFjJKDBP9veV9fAgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjg7Ovo1rbKjY4
qfKuDZwnr7XFDjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXlZ
ZHVkRXRmc0ZQSDhidFdkV2FjUHpTMzUzZ29Ua0g0dkY3ZHNHQVUzeC8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXlZ
ZHVkRXRmc0ZQSDhidFdkV2FjUHpTMzUzZ29Ua0g0dkY3ZHNHQVUzeC8wLzIzODNC
M0FGQTM1QURCMkEzNjM4QTlGMkFFMEQ5QzI3QUZCNUM1MEUubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAi1GADANBAIAAjAHAwUAKARDODAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEFSQwDQYJKoZIhvcNAQELBQADggEBAHSkAQJvZ39Vc7Ye2fCq
GqLcywLeMjSSIuxHSfWO2Wfr4xsYlp+PG6v8xH6cEVC5M0CsLph1Cg6b5DRjXFmK
xbtX4d4ApxFGKCTZsQW2wwK2z+XAxH5wTCpR2e64yQ+RacT4FWKtD3z0wnzM8fBm
7MYYR9+dSy6C+L3GBjyj9tmamn+Yp7gMKYh6ceL+rjl8B+EtP2SS+ai9QJP/YXTB
c2LQc9P+gEsQNyn7pq/vODL74wT6y7iXgENnXl0Tk6+aAfANWiXU3P0aukgfzPnA
MzxCK08EYEtp2xww8lwN/SXmAwYlLNYxAVycpGD08zFsjlphF+/vGNEQQtN9Lax3
+fg=
-----END CERTIFICATE-----