This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E77CDECC872E54CA1EBCA25516249415AF1A86B.cer
File:                     3E77CDECC872E54CA1EBCA25516249415AF1A86B.cer (raw, json)
Hash identifier:          P878vWGXUgWBrgazLjSpZnEHyUeqp4GiO47S0Z9+aIk=
Subject key identifier:   3E:77:CD:EC:C8:72:E5:4C:A1:EB:CA:25:51:62:49:41:5A:F1:A8:6B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       27A735BE4317D71D9B923890A1FCC8C3B77DD588
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/3E77CDECC872E54CA1EBCA25516249415AF1A86B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 May 2025 21:40:37 +0000
Certificate not after:    Tue 26 May 2026 21:45:37 +0000
Subordinate resources:    AS: 271145
                          IP: 201.71.216.0/22
                          IP: 2804:76f4::/32
Validation:               Failed, certificate revoked on Tue 14 Oct 2025 02:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a7:35:be:43:17:d7:1d:9b:92:38:90:a1:fc:c8:c3:b7:7d:d5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 27 21:40:37 2025 GMT
            Not After : May 26 21:45:37 2026 GMT
        Subject: CN=3E77CDECC872E54CA1EBCA25516249415AF1A86B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:32:a2:64:7c:ea:b2:9f:01:f1:85:cc:ed:
                    25:50:b5:fb:e8:0d:ae:44:0d:2c:52:56:3b:11:ab:
                    11:1a:3d:c6:be:a8:dd:73:36:25:1c:e5:ad:ba:d3:
                    8c:98:0f:04:a9:bf:b7:46:87:97:0c:33:03:5a:56:
                    16:2b:a1:c8:07:d7:39:88:90:29:48:fb:1e:54:72:
                    b6:af:81:24:25:5c:60:82:f1:85:ec:ca:64:9d:61:
                    c2:56:a5:bc:ac:16:60:7d:3a:44:67:21:e3:a7:f7:
                    56:e9:5f:b9:1a:9f:00:b4:0c:75:3d:9c:f3:6a:fe:
                    d5:d2:a9:ca:22:87:c9:60:01:37:b5:20:1a:cf:b6:
                    cb:76:cb:11:7b:42:e8:77:de:90:11:04:e9:6c:f6:
                    a3:f0:bc:f4:bb:69:f7:31:ef:29:48:32:92:27:f6:
                    39:56:39:87:ca:bc:22:da:75:7d:bf:c1:b1:20:88:
                    78:ff:54:4c:8a:dd:99:a3:dc:46:47:88:da:c7:90:
                    a9:d4:d1:11:33:df:3f:7c:1b:93:e0:dc:c5:dc:02:
                    70:ae:02:2e:36:8b:56:93:2d:66:8e:53:60:41:f5:
                    83:51:36:80:0b:20:4a:9a:5c:53:1e:f9:54:ec:85:
                    37:48:6d:0e:27:93:21:64:22:e2:23:da:67:d9:ab:
                    a4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:77:CD:EC:C8:72:E5:4C:A1:EB:CA:25:51:62:49:41:5A:F1:A8:6B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/3E77CDECC872E54CA1EBCA25516249415AF1A86B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.216.0/22
                IPv6:
                  2804:76f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271145

    Signature Algorithm: sha256WithRSAEncryption
         93:e0:c7:ac:8e:09:70:e0:6f:86:d8:7d:8b:81:fe:05:b0:9d:
         8f:0a:c0:4a:75:0d:25:ad:1e:47:2e:96:95:1e:fc:f4:d7:80:
         f1:12:22:89:62:c4:7d:8d:36:f8:b5:ce:3b:51:1a:2e:49:1a:
         5b:cb:d6:72:65:a0:f6:98:f0:f4:8d:b4:b6:54:05:07:65:f8:
         81:6e:c1:02:f6:8d:bf:40:26:47:0e:7b:23:66:2b:39:e2:6f:
         4a:1c:01:d6:6d:61:df:94:09:78:51:6b:42:e7:ae:68:51:d3:
         13:86:6c:35:a3:f4:fc:61:7b:27:89:c3:f9:35:66:1e:13:3c:
         d5:d2:0c:04:68:35:b8:3f:6e:4a:3c:99:4c:5e:86:65:2f:b9:
         07:1f:58:7b:d5:63:9e:7f:29:dd:ec:90:c5:53:cc:4b:bc:9d:
         70:a1:31:8e:ae:2d:f1:89:a0:88:05:c7:ac:a7:1e:ef:22:3b:
         f6:a2:e7:6e:99:d7:8a:fb:b7:d7:69:a2:ec:61:a8:62:1a:20:
         cb:42:56:2e:4b:11:a2:86:d0:50:cb:80:10:f6:7d:2e:a1:fe:
         fa:c9:17:21:13:45:3b:2f:85:60:ca:23:08:c2:88:8d:e1:39:
         c5:ee:e1:93:13:d9:7c:a6:cf:93:d7:29:95:d9:3b:8a:63:06:
         32:ec:23:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----