This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2557D5F7321503E8A12A274EBA57E5064A6659B8.cer
File:                     2557D5F7321503E8A12A274EBA57E5064A6659B8.cer (raw, json)
Hash identifier:          O6lFvdqW6vQcKqGoQtB2SrL7+bUmjX10IQ2DjPERpLI=
Subject key identifier:   25:57:D5:F7:32:15:03:E8:A1:2A:27:4E:BA:57:E5:06:4A:66:59:B8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B91FE2FD848D4952BAD7F6CB9FCC814B7E5E7F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Apr 2025 03:09:38 +0000
Certificate not after:    Thu 23 Apr 2026 03:14:38 +0000
Subordinate resources:    AS: 269249
                          IP: 45.183.0.0/22
                          IP: 2804:61ac::/32
Validation:               Failed, certificate revoked on Wed 02 Jul 2025 05:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:91:fe:2f:d8:48:d4:95:2b:ad:7f:6c:b9:fc:c8:14:b7:e5:e7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 03:09:38 2025 GMT
            Not After : Apr 23 03:14:38 2026 GMT
        Subject: CN=2557D5F7321503E8A12A274EBA57E5064A6659B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:20:d0:12:09:cb:37:07:8f:99:39:08:22:9e:
                    02:c5:91:4d:b2:a5:13:4c:e2:2b:50:38:56:f2:f5:
                    0a:68:0e:bd:1e:89:61:90:38:6f:b6:57:f8:7a:74:
                    55:28:b4:59:82:a4:cf:1b:ab:41:ac:7c:c7:fd:be:
                    c1:aa:c8:77:64:38:b4:d4:73:1d:20:7d:ab:3b:23:
                    7c:42:68:0a:be:9d:76:a5:4e:9b:a0:93:9f:c7:73:
                    3f:3b:57:e0:ac:d9:5a:7f:87:79:90:e0:75:a9:5d:
                    8f:ee:37:6c:bc:f1:86:7c:9a:a1:33:db:c0:dc:46:
                    e2:63:04:6d:83:ed:bf:83:94:95:8c:b3:b1:f5:0e:
                    c0:4c:7e:a0:d3:14:0e:e8:b1:8f:8a:a6:ec:9f:2d:
                    4e:27:ac:70:f9:9f:4a:23:53:e9:c7:d4:11:12:72:
                    92:f9:d3:68:74:a2:20:56:1f:b1:1b:aa:dd:3d:39:
                    27:ad:3c:88:75:0a:38:7d:21:22:44:95:75:3b:10:
                    61:f4:ea:0b:a5:12:1e:4d:fd:c5:e6:53:01:80:ca:
                    cb:00:9d:78:e8:b4:64:92:da:40:7b:f3:43:09:89:
                    2b:75:93:1d:60:9e:0b:70:75:24:b8:38:92:0b:42:
                    9a:b2:27:1e:98:af:2d:f8:41:aa:63:b8:ee:d2:01:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:57:D5:F7:32:15:03:E8:A1:2A:27:4E:BA:57:E5:06:4A:66:59:B8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.0.0/22
                IPv6:
                  2804:61ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269249

    Signature Algorithm: sha256WithRSAEncryption
         aa:9c:ec:70:a0:16:79:2b:0c:85:a2:18:5e:a9:b1:b9:58:91:
         0d:6c:73:15:ba:87:51:d3:81:84:ab:d1:20:84:cf:0e:43:57:
         fb:f8:59:bf:a5:d5:4f:f4:65:da:a1:7d:3d:3d:1f:15:01:89:
         9a:84:69:a1:3d:49:7b:20:91:0e:15:4f:e5:f2:6e:14:65:94:
         5b:b6:22:4b:24:da:fc:a7:06:bf:9c:3b:fd:49:ae:34:b7:1a:
         66:30:b4:c2:3c:b4:ff:b1:98:d0:09:2c:07:2f:b2:d2:77:4b:
         39:14:ac:83:f3:cb:01:52:55:09:4e:df:ee:52:1e:89:1c:66:
         0c:ff:e3:f7:63:5e:f6:14:6f:4f:44:71:d2:b8:58:07:fe:f2:
         15:c9:f6:2d:97:0a:77:73:7a:b9:2d:53:73:ab:9a:8a:c3:5c:
         a2:16:0f:a1:cf:8e:76:71:c6:f9:e3:e4:d8:76:da:f9:a9:ce:
         b7:70:90:b5:b1:4a:12:f0:ac:9f:bd:32:08:ff:82:b9:41:13:
         e2:cc:c3:21:d8:d7:01:13:72:f5:ec:92:9d:42:02:f2:fa:53:
         26:46:b7:41:d7:45:3e:59:8e:71:3e:89:7b:47:50:55:89:67:
         3f:97:40:5f:7a:2b:17:90:c9:86:5d:42:e9:b4:b2:18:00:9e:
         1d:1a:10:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----