This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/29F8500E85B65189A847129703894FEA0D4BDECA.cer File: 29F8500E85B65189A847129703894FEA0D4BDECA.cer (raw, json) Hash identifier: fOzV6/CrpIH3IhXOSRoWsPM56G6R/cCFdzS3hozLu6Q= Subject key identifier: 29:F8:50:0E:85:B6:51:89:A8:47:12:97:03:89:4F:EA:0D:4B:DE:CA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7D1F34330D9FC3BF06BB50F61A48AACB72E403D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/29F8500E85B65189A847129703894FEA0D4BDECA.mft caRepository: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 14 Nov 2025 23:11:14 +0000 Certificate not after: Fri 13 Nov 2026 23:16:14 +0000 Subordinate resources: AS: 262503 IP: 45.181.228.0/22 IP: 167.249.168.0/22 IP: 177.66.192.0/22 IP: 177.91.52.0/22 IP: 2804:2be0::/32 Validation: Failed, certificate revoked on Sat 15 Nov 2025 22:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1f:34:33:0d:9f:c3:bf:06:bb:50:f6:1a:48:aa:cb:72:e4:03:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 14 23:11:14 2025 GMT Not After : Nov 13 23:16:14 2026 GMT Subject: CN=29F8500E85B65189A847129703894FEA0D4BDECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:3b:b2:75:d8:cd:5a:e0:63:65:7f:48:78: d6:3c:f0:f8:fe:cb:7b:56:b6:a1:81:95:b4:6e:c2: 77:30:c4:f7:5f:06:7b:1c:5e:2e:38:a9:e9:1b:da: b5:36:1f:b0:b9:52:86:8f:ce:df:bc:64:5c:67:16: 8f:ae:58:2c:61:4d:c2:9e:ce:a3:e1:e4:5e:71:4d: a8:02:54:11:58:0d:da:44:92:46:81:23:76:04:23: 0e:cd:79:65:15:76:1f:a2:13:6d:37:ad:7b:7c:1b: d6:58:62:74:86:d9:29:5b:a9:0a:88:21:59:ea:f5: f3:e6:55:63:50:8f:b6:a7:30:f6:5d:94:26:ff:27: 1e:fd:35:f9:0b:6e:00:3a:b2:b1:a5:a8:fe:03:5f: 3b:76:84:79:b2:e1:0b:24:2a:86:d2:d8:d7:35:b2: 28:c1:52:89:60:8f:2a:62:52:30:43:4f:65:ec:d8: 15:a9:bb:1b:da:e8:6f:a5:58:9f:87:ce:e1:cb:fd: 49:8d:9a:06:d9:55:8a:20:3f:60:64:d6:a5:7d:de: 21:9c:cf:44:27:21:d3:d1:64:98:8d:72:d0:34:ba: 65:9c:e6:83:59:df:19:3c:f0:1e:72:13:10:7b:23: 07:1d:3e:48:cb:e3:d7:80:ca:c2:8a:de:94:e3:7b: 88:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:F8:50:0E:85:B6:51:89:A8:47:12:97:03:89:4F:EA:0D:4B:DE:CA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/29F8500E85B65189A847129703894FEA0D4BDECA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.181.228.0/22 167.249.168.0/22 177.66.192.0/22 177.91.52.0/22 IPv6: 2804:2be0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262503 Signature Algorithm: sha256WithRSAEncryption d0:90:b2:3c:33:65:7f:65:bb:e8:9d:90:aa:af:81:31:59:ed: cf:44:a0:15:60:62:92:2f:1d:01:d0:61:b4:5c:92:d8:8c:36: 07:62:de:ff:cc:99:1b:8e:69:c2:19:42:17:47:ce:73:8e:31: db:0d:44:1c:27:d5:9b:5f:0e:88:cb:fe:13:98:c4:d5:92:0f: b7:b0:9f:9b:e5:51:b0:81:7a:51:e8:71:e7:34:6d:df:52:ee: 8a:69:fd:06:62:ca:cd:5e:dc:d9:3c:31:f5:8b:2a:d7:92:27: 64:1a:3f:3b:20:ed:13:8f:df:3d:b9:86:f4:50:59:0f:68:99: a5:c7:3a:21:6e:90:76:71:f2:d9:0e:01:06:09:49:c0:04:44: aa:04:df:e4:17:5b:53:51:dc:38:5a:1a:16:41:a6:88:99:14: ff:e1:b9:be:d5:49:85:43:37:f4:37:f9:ee:5d:b1:c0:00:ce: bc:31:7e:4a:2b:d1:e5:a1:d2:4d:a2:3f:52:7c:b4:74:51:ed: 5e:96:1e:8d:95:ab:01:bc:0a:0a:4c:18:6e:e0:94:33:75:98: 89:a4:37:4c:80:ad:cb:f4:da:46:c7:08:d0:8c:dd:07:ea:78: 5f:22:d1:7a:b5:98:19:85:91:8d:65:12:a6:04:d5:a9:7c:d1: bc:89:10:c8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUfR80Mw2fw78Gu1D2Gkiqy3LkA9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMTQyMzExMTRaFw0yNjExMTMyMzE2MTRaMDMxMTAvBgNV BAMTKDI5Rjg1MDBFODVCNjUxODlBODQ3MTI5NzAzODk0RkVBMEQ0QkRFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXjuyddjNWuBjZX9IeNY88Pj+ y3tWtqGBlbRuwncwxPdfBnscXi44qekb2rU2H7C5UoaPzt+8ZFxnFo+uWCxhTcKe zqPh5F5xTagCVBFYDdpEkkaBI3YEIw7NeWUVdh+iE203rXt8G9ZYYnSG2SlbqQqI IVnq9fPmVWNQj7anMPZdlCb/Jx79NfkLbgA6srGlqP4DXzt2hHmy4QskKobS2Nc1 sijBUolgjypiUjBDT2Xs2BWpuxva6G+lWJ+HzuHL/UmNmgbZVYogP2Bk1qV93iGc z0QnIdPRZJiNctA0umWc5oNZ3xk88B5yExB7IwcdPkjL49eAysKK3pTje4jTAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQp+FAOhbZRiahH EpcDiU/qDUveyjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEVv NVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1Ga0YvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhF bzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAvMjlG ODUwMEU4NUI2NTE4OUE4NDcxMjk3MDM4OTRGRUEwRDRCREVDQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCLbXkAwQCp/moAwQCsULAAwQCsVs0MA0EAgACMAcD BQAoBCvgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQBZzANBgkqhkiG9w0BAQsF AAOCAQEA0JCyPDNlf2W76J2Qqq+BMVntz0SgFWBiki8dAdBhtFyS2Iw2B2Le/8yZ G45pwhlCF0fOc44x2w1EHCfVm18OiMv+E5jE1ZIPt7Cfm+VRsIF6Uehx5zRt31Lu imn9BmLKzV7c2Twx9Ysq15InZBo/OyDtE4/fPbmG9FBZD2iZpcc6IW6QdnHy2Q4B BglJwAREqgTf5BdbU1HcOFoaFkGmiJkU/+G5vtVJhUM39Df57l2xwADOvDF+SivR 5aHSTaI/Uny0dFHtXpYejZWrAbwKCkwYbuCUM3WYiaQ3TICty/TaRscI0IzdB+p4 XyLRerWYGYWRjWUSpgTVqXzRvIkQyA== -----END CERTIFICATE-----Generated at Sat Dec 20 05:09:34 2025 by rpki-client