This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
File:                     2ACA27717E82C4618B8C9B8809209FD48E26847B.cer (raw, json)
Hash identifier:          L5rWI/r67aT6S6fT51zwc7sgL3rJrXkwKkLi69OkjV8=
Subject key identifier:   2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6A6B48F7B953117DD68775E276CC33F2CEEBC256
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Mar 2025 17:31:00 +0000
Certificate not after:    Tue 10 Mar 2026 17:36:00 +0000
Subordinate resources:    AS: 262828
                          IP: 177.155.192.0/21
                          IP: 186.251.96.0/21
                          IP: 2804:2a4::/32
Validation:               Failed, certificate revoked on Mon 29 Sep 2025 06:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6b:48:f7:b9:53:11:7d:d6:87:75:e2:76:cc:33:f2:ce:eb:c2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 11 17:31:00 2025 GMT
            Not After : Mar 10 17:36:00 2026 GMT
        Subject: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:33:f6:fe:0e:7a:14:5b:ed:c5:95:b7:34:
                    2b:26:b4:5f:5c:12:23:b3:bb:25:d1:a0:cf:d5:3a:
                    8e:58:da:c3:17:c0:31:cd:18:72:da:a5:92:c5:0a:
                    f8:99:56:58:01:e9:d3:6e:26:79:71:76:4c:81:05:
                    f4:9a:c3:0b:18:a0:e5:83:54:69:b9:4b:b4:f0:57:
                    3a:b2:5a:73:72:fa:ce:ac:65:0b:8f:ae:29:e0:c8:
                    c5:55:2f:23:86:6b:05:c7:09:2b:5b:84:dc:24:38:
                    71:9a:3c:08:13:3d:c3:93:77:d0:3b:6f:24:94:85:
                    9f:71:0c:ec:62:d5:97:72:06:d7:cd:a2:b5:02:81:
                    63:98:a4:1c:bc:d0:b6:da:9b:f8:44:eb:1b:75:5b:
                    99:c2:0f:ae:fe:c7:69:57:19:a3:50:49:75:5b:e8:
                    d6:a1:62:32:c2:ff:59:8d:a5:4b:69:c1:6f:8d:c5:
                    d3:d9:85:72:46:26:1e:67:5c:a8:0e:1b:f7:c8:7e:
                    3c:3c:e2:f1:9a:d0:e2:db:38:ba:6e:48:40:41:c9:
                    d9:cf:59:0f:81:d1:4b:96:e1:4f:b8:30:d4:03:7e:
                    ae:75:bd:bc:e6:87:83:ad:67:11:37:f6:6a:95:90:
                    14:0a:ea:51:68:4f:39:7d:0f:1c:6b:ec:4a:c6:0b:
                    15:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.192.0/21
                  186.251.96.0/21
                IPv6:
                  2804:2a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262828

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:cc:45:6a:e1:4e:a2:d2:64:57:86:6d:b6:fa:ce:c3:3e:
         1d:d9:97:97:35:c8:a9:67:d3:88:8f:00:e3:f6:72:92:c9:a4:
         68:cf:fa:31:1f:b6:e3:e1:ef:d1:7b:55:e7:6f:9d:01:10:78:
         62:fb:e8:ea:ad:0e:dc:f5:9d:a5:59:0a:ec:91:16:e9:1d:91:
         78:3d:69:d8:a2:a3:03:fa:e9:5d:3f:22:e5:85:c0:5a:e5:3f:
         d1:2f:42:ad:37:b0:24:e0:bc:51:22:22:42:0b:0f:f3:9c:c3:
         0b:1d:be:53:36:fa:8c:c3:ae:d3:99:0f:2c:e4:90:6e:e9:ad:
         ce:f6:78:8b:24:8d:90:19:a3:9c:d2:35:ef:3e:fa:9e:c3:70:
         0e:09:3b:b2:79:85:90:a8:aa:15:54:4e:e1:cd:76:71:f9:4a:
         28:3a:50:a1:3c:cc:ac:a8:9c:83:50:cc:de:4f:8b:39:81:80:
         ea:e1:9c:34:4a:dd:a0:02:f8:bb:61:88:bf:04:a6:e7:31:84:
         cd:61:c2:71:36:f6:49:ae:5a:51:fd:ab:71:b2:59:d2:2a:d6:
         64:42:ba:9b:b1:54:a9:05:08:d8:94:41:7c:01:16:6f:69:17:
         66:b0:8a:bd:a0:ad:ff:5e:9d:d5:69:84:53:29:ba:a6:ef:76:
         77:b5:cf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----