This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3AB8D694A7B0FD123FE2783B274D7BF701A79F5B.cer
File:                     3AB8D694A7B0FD123FE2783B274D7BF701A79F5B.cer (raw, json)
Hash identifier:          7QK5hKt1Xd70dquGAnOGc0Is10vMfy3H7x+rGmiYVp4=
Subject key identifier:   3A:B8:D6:94:A7:B0:FD:12:3F:E2:78:3B:27:4D:7B:F7:01:A7:9F:5B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       16B93772D7296CC951FACF156EF46E31DED02078
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3AB8D694A7B0FD123FE2783B274D7BF701A79F5B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Jun 2025 20:48:11 +0000
Certificate not after:    Thu 04 Jun 2026 20:53:11 +0000
Subordinate resources:    AS: 266399
                          IP: 170.81.92.0/22
                          IP: 2804:3740::/32
Validation:               Failed, certificate revoked on Thu 11 Sep 2025 20:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b9:37:72:d7:29:6c:c9:51:fa:cf:15:6e:f4:6e:31:de:d0:20:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  5 20:48:11 2025 GMT
            Not After : Jun  4 20:53:11 2026 GMT
        Subject: CN=3AB8D694A7B0FD123FE2783B274D7BF701A79F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:72:ee:8d:f0:b5:a0:b1:99:30:bd:de:60:
                    03:b3:e9:c6:cb:ca:65:8f:bd:5f:4d:ca:85:52:a5:
                    c5:b0:d8:40:80:25:0e:d5:0b:38:5d:97:8c:c3:f2:
                    2c:e4:04:ca:a6:fe:8e:4b:76:da:ea:a4:8e:09:a7:
                    85:42:d8:1a:6f:03:6b:0e:2d:6e:a4:b4:5a:ad:1f:
                    39:f8:cf:84:b7:7a:df:5a:36:f8:21:d2:5b:d2:4a:
                    0f:c0:b4:08:2d:d8:23:a1:6a:5a:30:d1:58:ce:2d:
                    81:9e:c7:2d:39:8b:dc:99:f2:c5:82:e2:44:4c:d9:
                    e1:84:70:1b:99:12:b9:79:e6:be:6b:8c:62:d2:5d:
                    3f:4b:f8:aa:68:00:86:65:97:a2:04:84:06:b1:f3:
                    3e:3a:93:95:92:0a:c5:62:43:6e:fe:53:11:f7:52:
                    b8:a9:3a:cc:e5:a3:cb:dc:75:8a:2a:f6:80:59:dd:
                    72:3e:01:32:14:9c:39:85:10:e8:2e:62:ac:8e:d5:
                    82:6a:72:fb:ac:67:7d:65:1b:6c:b1:96:b1:66:ca:
                    25:d1:66:de:1c:5c:23:b7:87:a7:8a:a4:96:4d:09:
                    9d:a2:ca:71:d9:33:89:c5:42:3b:6e:82:b4:69:b4:
                    45:91:58:4f:01:ec:56:46:ec:ae:28:c5:ff:28:82:
                    b4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:B8:D6:94:A7:B0:FD:12:3F:E2:78:3B:27:4D:7B:F7:01:A7:9F:5B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3AB8D694A7B0FD123FE2783B274D7BF701A79F5B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.92.0/22
                IPv6:
                  2804:3740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266399

    Signature Algorithm: sha256WithRSAEncryption
         65:46:2d:47:36:f0:0f:ff:ae:7b:dc:df:ba:73:d9:3c:41:52:
         d2:a7:ae:eb:45:84:60:48:64:72:a3:35:c1:ac:db:09:b2:33:
         cf:b4:91:80:1d:51:17:bb:75:58:56:86:9c:4a:d1:60:29:10:
         13:f4:70:19:97:29:f8:62:70:9c:8f:95:cd:b4:28:55:05:f0:
         e5:98:15:c7:c4:8c:15:c7:ab:1d:8a:28:9a:31:41:48:6b:50:
         cf:44:90:94:f7:54:c1:14:ab:41:f9:8f:28:55:aa:7d:1e:82:
         1f:60:b4:b9:11:a1:78:d1:ac:69:f5:c4:9f:fc:e0:57:4c:88:
         64:16:f5:eb:2c:14:f1:aa:53:3b:be:34:3c:f3:4a:eb:7e:22:
         b6:4f:62:b0:fa:04:4c:7a:1a:f9:d7:06:77:2b:75:eb:56:8d:
         5a:4a:62:ad:e4:71:27:e1:62:3d:6a:87:5b:d6:ff:ef:9b:44:
         94:69:e4:5a:8e:37:e5:5c:1f:76:45:06:7d:62:24:30:11:d4:
         22:99:d4:70:8f:b4:7d:f2:55:4a:72:96:67:24:4e:fc:82:e1:
         6c:28:8c:ee:e2:4c:12:01:74:03:fd:e0:0f:10:8b:61:ae:86:
         02:29:39:cb:89:6e:16:23:7d:23:51:8b:35:b0:34:87:c8:df:
         b7:b9:df:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----