This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.cer
File:                     3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.cer (raw, json)
Hash identifier:          r41XAOLDdQutekwN4yAjaHX+kWUqYeyiHtnGZDuXXg0=
Subject key identifier:   32:21:F6:BB:BA:53:17:2B:B7:A2:FE:B9:42:CD:33:35:EA:37:E2:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       10C730953C1E36843874AC7681B6C9C7C37AFFA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Oct 2025 00:59:16 +0000
Certificate not after:    Wed 21 Oct 2026 01:04:16 +0000
Subordinate resources:    AS: 52675
                          IP: 177.66.180.0/22
Validation:               Failed, certificate revoked on Tue 28 Oct 2025 05:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c7:30:95:3c:1e:36:84:38:74:ac:76:81:b6:c9:c7:c3:7a:ff:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 22 00:59:16 2025 GMT
            Not After : Oct 21 01:04:16 2026 GMT
        Subject: CN=3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4a:9f:17:cd:17:f5:e4:49:9d:34:a8:85:91:
                    44:70:16:cc:d8:07:12:64:f4:7b:2c:9b:74:75:a4:
                    7b:c6:e2:96:7d:77:5c:05:1c:6e:b8:1e:62:a9:b3:
                    cf:f8:82:70:bc:ec:2b:42:c6:9b:4a:12:c4:39:e2:
                    3a:36:e4:b9:dd:28:40:ba:20:91:4a:96:8f:9c:48:
                    12:7f:96:32:94:ab:29:fe:52:73:60:52:f5:64:52:
                    41:48:e0:de:3a:c9:84:9f:2e:86:31:53:40:5b:be:
                    94:4a:73:4b:56:5c:e0:47:f3:92:6a:f7:77:fb:7c:
                    a5:3c:05:b8:d6:4f:5e:76:bf:16:cc:de:a4:09:44:
                    8e:7f:ed:be:aa:bc:3c:02:4a:8f:aa:c2:39:d7:fe:
                    8f:9c:62:6f:13:44:42:4a:75:de:80:17:e9:bc:a5:
                    54:f8:20:54:97:65:6a:e7:4f:aa:ce:bb:a1:ed:8c:
                    a5:30:64:8e:38:65:4a:72:35:89:e1:11:db:5d:ab:
                    ad:e1:9b:8f:d3:a3:3f:08:d8:65:6d:4a:98:8d:12:
                    af:80:e5:69:6c:23:93:ec:74:0e:fc:87:b4:5e:a2:
                    7b:31:11:eb:4b:46:a4:03:c5:2b:af:6a:96:e8:36:
                    ac:21:23:46:5d:67:c5:5e:37:70:05:33:64:a5:80:
                    bd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:21:F6:BB:BA:53:17:2B:B7:A2:FE:B9:42:CD:33:35:EA:37:E2:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.180.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52675

    Signature Algorithm: sha256WithRSAEncryption
         3e:56:54:7a:90:ca:48:27:63:21:9d:09:b7:d3:97:84:70:f8:
         78:f9:ba:de:53:c6:81:db:17:28:31:5f:a1:8f:bc:c7:57:13:
         0f:e4:4d:36:58:43:41:79:54:5d:24:a0:97:55:83:b6:94:f3:
         f9:b8:3f:c6:a7:15:22:96:57:b5:e7:55:f2:36:67:d8:ec:a3:
         1e:8a:08:82:b9:d8:c7:f5:99:b7:26:ba:b5:e5:11:1b:a2:83:
         98:8f:34:48:3d:cd:52:58:c9:4a:c5:bf:3c:90:95:77:d7:be:
         98:25:f8:9f:03:89:e3:e6:7b:00:f9:c3:2b:61:bf:df:64:47:
         26:86:40:75:9f:79:19:dd:22:2f:2a:32:67:a1:5f:2f:e1:9d:
         1f:fd:8e:21:74:c6:01:4b:aa:c6:f0:c5:2c:3c:6c:90:2f:c6:
         63:65:5b:dd:d4:b6:44:80:3b:ef:5b:ae:8e:6c:e3:9d:0f:a6:
         49:10:9f:6e:22:aa:cb:f9:1b:10:48:a8:c8:25:90:c6:7e:eb:
         1a:dc:1b:68:d1:58:9e:7b:8d:3a:b2:7a:e3:5c:c9:ad:1d:85:
         82:ac:5d:f1:4e:ce:8d:9e:45:5d:03:8b:b2:69:24:6e:9f:d1:
         5d:2b:2d:10:ba:64:86:10:f4:51:bf:47:b0:2d:56:43:82:29:
         ce:a8:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----