This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/443FAA41D08D0DC55D06C514471A6A595278B345.cer
File:                     443FAA41D08D0DC55D06C514471A6A595278B345.cer (raw, json)
Hash identifier:          bxlqOabklPsDcsoTO1l9A/JKcRmFTm7tgPozOZ17wdY=
Subject key identifier:   44:3F:AA:41:D0:8D:0D:C5:5D:06:C5:14:47:1A:6A:59:52:78:B3:45
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A3998BF70AC7861B4BE902D50ABB9DF324F7545
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/443FAA41D08D0DC55D06C514471A6A595278B345.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Nov 2025 18:09:17 +0000
Certificate not after:    Mon 02 Nov 2026 18:14:17 +0000
Subordinate resources:    AS: 263302
                          IP: 191.6.248.0/21
                          IP: 2804:13ec::/32
Validation:               Failed, certificate revoked on Mon 03 Nov 2025 18:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:39:98:bf:70:ac:78:61:b4:be:90:2d:50:ab:b9:df:32:4f:75:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  3 18:09:17 2025 GMT
            Not After : Nov  2 18:14:17 2026 GMT
        Subject: CN=443FAA41D08D0DC55D06C514471A6A595278B345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b8:7c:41:cd:e4:cd:01:87:20:e0:6e:42:31:
                    28:69:3a:7a:49:fc:63:bb:bf:59:4c:79:e0:c1:3c:
                    9d:e3:e0:9d:b8:cd:34:e6:9e:16:a0:43:93:42:95:
                    a6:b2:e8:cd:2f:25:28:6d:35:e4:e4:b2:92:81:16:
                    f8:89:4a:4a:e1:5e:13:33:84:c2:58:e2:6f:23:59:
                    d9:fb:91:a6:5a:ea:37:7c:de:a4:0a:df:9e:af:9b:
                    81:60:d1:e6:94:67:fe:02:11:d1:db:ce:8f:49:ad:
                    59:a2:c6:3a:ff:56:1f:fe:2d:5b:5d:ba:fa:03:08:
                    55:5b:72:ca:4e:af:86:d0:53:83:69:5c:89:5a:9f:
                    8d:f1:e9:a0:38:43:93:c2:12:1a:fa:ac:8c:43:fe:
                    ea:6f:03:4e:04:20:02:5a:10:66:9f:2f:b0:8b:70:
                    0e:b4:e1:ba:cb:f3:22:a7:c7:cf:0b:2d:7c:92:c7:
                    0b:f4:d3:f5:4f:b4:ee:5c:7c:f0:67:78:39:89:c2:
                    10:94:9d:ed:d1:0b:d3:dc:65:8e:da:14:9a:bb:72:
                    a7:c0:fe:fa:33:e2:b1:ac:90:c3:9d:20:04:0e:84:
                    01:c0:16:b8:35:f8:a3:e1:aa:a2:b4:46:47:a5:3b:
                    b4:a8:5e:db:19:3e:04:ad:15:f0:4e:fe:88:95:1b:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:3F:AA:41:D0:8D:0D:C5:5D:06:C5:14:47:1A:6A:59:52:78:B3:45
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/443FAA41D08D0DC55D06C514471A6A595278B345.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.248.0/21
                IPv6:
                  2804:13ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263302

    Signature Algorithm: sha256WithRSAEncryption
         b0:37:99:f9:4f:f2:d9:0f:18:0a:e8:38:29:a2:3a:56:6c:00:
         d5:53:69:2e:a5:13:c8:d0:61:46:26:13:cf:88:05:3f:3b:57:
         70:ec:99:da:0b:68:ef:c9:4c:0e:40:bb:7c:25:fc:1a:f7:be:
         a2:52:f3:73:88:f0:00:11:87:96:af:ba:3e:3f:1e:7c:45:5c:
         c2:a7:37:75:d0:97:27:0a:69:de:9c:d6:a4:39:13:2f:4f:40:
         68:9c:79:60:66:b3:53:50:b3:6d:cb:5c:87:94:ec:92:c5:08:
         5f:6a:11:a8:e5:fc:09:db:ef:85:da:dc:03:60:79:47:cc:9a:
         26:75:4f:00:4f:ce:b4:b5:3b:90:55:a3:a0:80:8f:65:c1:fb:
         2b:9e:b6:d7:4e:e6:1e:60:da:6d:4a:9d:45:07:ad:06:9f:18:
         22:f8:71:1b:ab:0c:fd:0f:96:24:e4:36:7c:22:4b:b3:cc:0d:
         07:57:e6:07:0d:30:d8:33:44:48:c3:c7:41:dd:10:4e:60:ef:
         5c:81:e8:20:26:04:06:49:3b:44:43:81:7f:e6:46:9b:5a:05:
         73:88:95:0f:0b:35:bc:ed:1b:09:22:52:a2:8f:47:74:9b:53:
         ff:1b:71:ac:7e:dd:7a:b5:8d:e0:22:81:7a:89:91:f2:2c:cf:
         fb:7f:af:6b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUejmYv3CseGG0vpAtUKu53zJPdUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMDMxODA5MTdaFw0yNjExMDIxODE0MTdaMDMxMTAvBgNV
BAMTKDQ0M0ZBQTQxRDA4RDBEQzU1RDA2QzUxNDQ3MUE2QTU5NTI3OEIzNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtuHxBzeTNAYcg4G5CMShpOnpJ
/GO7v1lMeeDBPJ3j4J24zTTmnhagQ5NClaay6M0vJShtNeTkspKBFviJSkrhXhMz
hMJY4m8jWdn7kaZa6jd83qQK356vm4Fg0eaUZ/4CEdHbzo9JrVmixjr/Vh/+LVtd
uvoDCFVbcspOr4bQU4NpXIlan43x6aA4Q5PCEhr6rIxD/upvA04EIAJaEGafL7CL
cA604brL8yKnx88LLXySxwv00/VPtO5cfPBneDmJwhCUne3RC9PcZY7aFJq7cqfA
/voz4rGskMOdIAQOhAHAFrg1+KPhqqK0RkelO7SoXtsZPgStFfBO/oiVGxuRAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBREP6pB0I0NxV0G
xRRHGmpZUnizRTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2dn
dWhHdE12RTFoQVZ5Mk52cHpDdjNGTDJOa1ZiVkhMeWNVaXNjc0hwYk4vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nn
Z3VoR3RNdkUxaEFWeTJOdnB6Q3YzRkwyTmtWYlZITHljVWlzY3NIcGJOLzAvNDQz
RkFBNDFEMDhEMERDNTVEMDZDNTE0NDcxQTZBNTk1Mjc4QjM0NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDvwb4MA0EAgACMAcDBQAoBBPsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQEhjANBgkqhkiG9w0BAQsFAAOCAQEAsDeZ+U/y2Q8YCug4
KaI6VmwA1VNpLqUTyNBhRiYTz4gFPztXcOyZ2gto78lMDkC7fCX8Gve+olLzc4jw
ABGHlq+6Pj8efEVcwqc3ddCXJwpp3pzWpDkTL09AaJx5YGazU1Czbctch5TsksUI
X2oRqOX8CdvvhdrcA2B5R8yaJnVPAE/OtLU7kFWjoICPZcH7K562107mHmDabUqd
RQetBp8YIvhxG6sM/Q+WJOQ2fCJLs8wNB1fmBw0w2DNESMPHQd0QTmDvXIHoICYE
Bkk7REOBf+ZGm1oFc4iVDws1vO0bCSJSoo9HdJtT/xtxrH7derWN4CKBeomR8izP
+3+vaw==
-----END CERTIFICATE-----