This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer
File:                     44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer (raw, json)
Hash identifier:          J+5BfOWcp0QTlNTjIHSQ/iBaXN2u/Kszrz4N1r5KWzc=
Subject key identifier:   44:F6:D8:3B:E0:FA:5D:3B:20:9C:B8:9B:51:8F:74:DA:0C:D2:BA:9A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2032EE05BF4403C08F234955B8ADE2C9D9E4A742
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Sep 2025 20:46:07 +0000
Certificate not after:    Tue 22 Sep 2026 20:51:07 +0000
Subordinate resources:    AS: 269220
                          IP: 45.182.60.0 -- 45.182.62.255
                          IP: 2804:6134::/32
Validation:               Failed, certificate revoked on Tue 23 Sep 2025 20:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:32:ee:05:bf:44:03:c0:8f:23:49:55:b8:ad:e2:c9:d9:e4:a7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 23 20:46:07 2025 GMT
            Not After : Sep 22 20:51:07 2026 GMT
        Subject: CN=44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:27:69:23:a1:f9:66:27:c2:20:df:9b:69:
                    44:45:5e:64:8e:33:cc:70:9f:60:6a:92:2b:c2:d8:
                    da:b4:28:f1:45:31:9f:61:e1:ea:40:d1:57:29:01:
                    e4:1a:5a:3a:8c:35:85:3d:4a:6c:f8:6e:ca:1c:c3:
                    38:81:7d:a8:e8:57:15:94:bc:7a:59:c3:5c:da:a6:
                    94:e8:e9:ac:58:d8:79:07:e4:d6:26:a6:25:32:c9:
                    1e:3a:5a:31:38:47:50:bf:6e:5f:1f:d1:d8:e0:62:
                    f3:e9:fa:cc:26:b7:10:5e:49:16:85:6c:1f:e5:08:
                    01:62:92:76:d8:63:15:65:27:25:ce:fe:a8:69:61:
                    fd:23:fb:84:79:25:6e:07:5f:f2:8e:81:16:b5:bd:
                    ec:a0:e3:8a:b0:19:b2:74:e1:99:bc:f7:ce:ea:4a:
                    5e:b6:35:d2:29:1e:76:99:03:08:61:b3:41:72:47:
                    f9:9a:c8:3e:98:4e:28:9d:c7:70:bf:ad:6e:b2:41:
                    c2:9b:8a:35:90:34:86:5c:63:8b:11:4b:51:a9:3e:
                    d9:d9:85:dd:34:74:44:b0:4f:6d:b7:c8:28:db:25:
                    2c:4e:58:9c:8a:c8:0e:e4:a5:f7:a2:22:a8:5b:f8:
                    e4:22:2b:a9:98:8a:6b:31:9b:8b:ac:0c:11:ef:ee:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:F6:D8:3B:E0:FA:5D:3B:20:9C:B8:9B:51:8F:74:DA:0C:D2:BA:9A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.60.0-45.182.62.255
                IPv6:
                  2804:6134::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269220

    Signature Algorithm: sha256WithRSAEncryption
         31:0e:83:06:ea:67:e1:6d:f5:4a:ec:62:85:09:8c:47:b7:b8:
         44:b2:76:0e:6e:a8:35:ea:fc:f0:43:5b:a5:8d:97:8e:d5:10:
         76:e6:d5:ec:f9:1e:57:05:6a:46:10:3c:7a:e9:4c:57:ce:36:
         08:9b:a7:3d:01:f3:9e:f0:2b:e3:88:06:78:70:e0:55:27:86:
         60:72:bc:33:a6:0a:92:b9:fd:09:23:33:50:d0:5a:fe:88:5a:
         15:fa:e5:c4:19:d4:2d:d4:1d:5c:66:c9:86:25:38:b9:e3:8b:
         51:c9:f7:13:0c:e9:60:29:75:fd:81:c7:a7:d3:de:32:68:8e:
         49:6c:92:9d:bf:94:57:da:1f:50:9f:5e:d0:73:86:50:1a:3b:
         bd:0b:d4:85:c4:65:dd:d0:06:b7:14:01:c7:33:db:f1:12:ff:
         5b:ae:12:64:22:e0:59:e8:1f:db:2d:73:f7:d3:80:79:58:6e:
         84:58:15:62:4b:9a:f3:f5:bd:01:11:ff:7f:2c:38:56:9c:54:
         d0:b8:9c:3d:62:52:c2:d7:c5:46:e9:8a:1f:db:c4:04:f0:30:
         20:38:b0:80:92:83:5e:a9:03:0c:f8:76:77:fb:ff:bd:9d:12:
         87:93:52:2e:e2:c4:ac:2b:db:ca:ca:e9:3d:91:65:a4:39:2c:
         3f:96:ec:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:46:10 2025 by rpki-client