This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.cer
File:                     46FD62111CFE62986F4EDE8B04CEB71789F3CB20.cer (raw, json)
Hash identifier:          aWWAxXxyhccIELrNTzyTarsCl7IfoMYKqTk5Te+RbxE=
Subject key identifier:   46:FD:62:11:1C:FE:62:98:6F:4E:DE:8B:04:CE:B7:17:89:F3:CB:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C54C1057B5337D6DF704728141C417B0D212089
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Nov 2025 18:33:16 +0000
Certificate not after:    Tue 24 Nov 2026 18:38:16 +0000
Subordinate resources:    AS: 264428
                          IP: 131.221.124.0/22
                          IP: 143.0.4.0/22
                          IP: 2804:1e6c::/32
Validation:               Failed, certificate revoked on Tue 25 Nov 2025 19:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:54:c1:05:7b:53:37:d6:df:70:47:28:14:1c:41:7b:0d:21:20:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 25 18:33:16 2025 GMT
            Not After : Nov 24 18:38:16 2026 GMT
        Subject: CN=46FD62111CFE62986F4EDE8B04CEB71789F3CB20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:12:e1:29:47:ca:4c:24:6b:23:d4:d6:18:
                    70:97:56:69:d0:bd:6e:22:c7:3e:ad:79:91:3e:2b:
                    b5:22:22:78:17:6a:c6:77:38:9f:a1:3b:23:f3:48:
                    07:16:29:99:9e:76:da:f8:77:0b:98:8e:6b:01:1b:
                    68:8b:d2:6b:dc:a8:eb:73:3e:c1:be:1f:51:fd:08:
                    03:9c:eb:73:83:ba:3b:ea:b3:ce:a3:5d:2e:38:97:
                    ec:8f:b8:82:15:4d:3a:ef:bd:e2:9d:ab:ac:76:f3:
                    dc:68:11:d2:e2:8b:ff:74:23:0d:e9:34:e4:7b:82:
                    35:7a:3f:7d:7d:6d:89:15:2d:11:fa:1a:c4:38:a4:
                    3f:db:4b:b8:bf:83:ba:0e:71:ad:cf:7b:08:a7:36:
                    36:b3:39:3e:9e:2f:e2:80:af:a4:78:dd:69:c8:c7:
                    57:02:e4:1c:48:47:6f:a3:94:81:8e:4c:13:92:e6:
                    e5:85:00:c9:1a:d2:30:97:0f:5c:a2:50:82:c4:ee:
                    61:fd:60:eb:cc:7e:53:7c:4e:90:e7:bf:de:e4:11:
                    4e:88:84:d0:63:e6:87:c7:5a:a2:b6:68:93:78:0f:
                    61:bb:86:49:53:d8:d4:6c:70:b8:0a:38:71:c7:8f:
                    77:fe:a0:49:10:9d:11:98:fc:8d:b0:72:63:a2:e1:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:FD:62:11:1C:FE:62:98:6F:4E:DE:8B:04:CE:B7:17:89:F3:CB:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.124.0/22
                  143.0.4.0/22
                IPv6:
                  2804:1e6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264428

    Signature Algorithm: sha256WithRSAEncryption
         46:31:42:27:33:92:db:d4:a1:1c:a6:bb:9c:87:45:01:44:64:
         dd:3f:74:fb:ea:3b:4f:36:92:4c:9f:e4:cd:ec:7b:4c:6c:52:
         3c:9b:8a:8d:cc:40:61:1a:ab:f1:c1:8a:9f:eb:07:2a:93:64:
         e7:bb:8a:cf:f2:dc:94:38:c7:77:85:7b:e0:ba:b9:6a:4a:19:
         42:51:3e:6b:82:4d:27:8d:2f:f7:88:52:5d:72:90:42:ea:9d:
         34:02:b9:05:33:26:0b:92:48:bc:aa:13:36:0b:92:ab:b2:80:
         f2:d2:62:a9:6a:5e:21:ff:01:8f:26:a4:2a:59:bb:3a:db:13:
         9e:3e:ca:ae:ba:50:5d:39:55:08:54:7f:6d:cf:14:bd:29:92:
         ae:00:48:f3:c9:9f:cd:71:e5:c0:f0:35:99:2d:4d:3d:34:f0:
         b3:9c:00:e5:49:2a:48:97:62:9d:56:50:46:76:e2:88:f5:67:
         22:4a:b0:50:d8:b4:78:eb:75:b7:a4:53:e0:34:c1:96:55:05:
         ff:2c:68:35:86:60:4b:19:eb:9b:d8:ed:64:22:fd:76:a2:df:
         3b:3c:87:99:fc:a5:4c:d5:a4:87:a8:0d:82:ed:55:12:66:ed:
         56:2d:f8:f5:be:56:45:38:32:0c:23:3d:ae:ba:b8:39:93:2f:
         71:6d:72:07
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUfFTBBXtTN9bfcEcoFBxBew0hIIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMjUxODMzMTZaFw0yNjExMjQxODM4MTZaMDMxMTAvBgNV
BAMTKDQ2RkQ2MjExMUNGRTYyOTg2RjRFREU4QjA0Q0VCNzE3ODlGM0NCMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/xLhKUfKTCRrI9TWGHCXVmnQ
vW4ixz6teZE+K7UiIngXasZ3OJ+hOyPzSAcWKZmedtr4dwuYjmsBG2iL0mvcqOtz
PsG+H1H9CAOc63ODujvqs86jXS44l+yPuIIVTTrvveKdq6x289xoEdLii/90Iw3p
NOR7gjV6P319bYkVLRH6GsQ4pD/bS7i/g7oOca3PewinNjazOT6eL+KAr6R43WnI
x1cC5BxIR2+jlIGOTBOS5uWFAMka0jCXD1yiUILE7mH9YOvMflN8TpDnv97kEU6I
hNBj5ofHWqK2aJN4D2G7hklT2NRscLgKOHHHj3f+oEkQnRGY/I2wcmOi4f0BAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRG/WIRHP5imG9O
3osEzrcXifPLIDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWJ1
ZnVSTmNnaVZobWhITUw1Sm43d1d2N1RwVGNodk5oYmJLU0dYeHhXQnovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fi
dWZ1Uk5jZ2lWaG1oSE1MNUpuN3dXdjdUcFRjaHZOaGJiS1NHWHh4V0J6LzAvNDZG
RDYyMTExQ0ZFNjI5ODZGNEVERThCMDRDRUI3MTc4OUYzQ0IyMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCg918AwQCjwAEMA0EAgACMAcDBQAoBB5sMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQI7DANBgkqhkiG9w0BAQsFAAOCAQEARjFCJzOS
29ShHKa7nIdFAURk3T90++o7TzaSTJ/kzex7TGxSPJuKjcxAYRqr8cGKn+sHKpNk
57uKz/LclDjHd4V74Lq5akoZQlE+a4JNJ40v94hSXXKQQuqdNAK5BTMmC5JIvKoT
NguSq7KA8tJiqWpeIf8BjyakKlm7OtsTnj7KrrpQXTlVCFR/bc8UvSmSrgBI88mf
zXHlwPA1mS1NPTTws5wA5UkqSJdinVZQRnbiiPVnIkqwUNi0eOt1t6RT4DTBllUF
/yxoNYZgSxnrm9jtZCL9dqLfOzyHmfylTNWkh6gNgu1VEmbtVi349b5WRTgyDCM9
rrq4OZMvcW1yBw==
-----END CERTIFICATE-----