This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4D839483977D78702BA754AB330D5B6AE6DB3FF1.cer
File:                     4D839483977D78702BA754AB330D5B6AE6DB3FF1.cer (raw, json)
Hash identifier:          6pPYlgvnGjdHDHOeiTWAMBBc2dxaMM9GczE8755UEdY=
Subject key identifier:   4D:83:94:83:97:7D:78:70:2B:A7:54:AB:33:0D:5B:6A:E6:DB:3F:F1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D6B732CD8441EB7955E12227977179DA8261C48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/4D839483977D78702BA754AB330D5B6AE6DB3FF1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Jun 2025 18:16:43 +0000
Certificate not after:    Mon 15 Jun 2026 18:21:43 +0000
Subordinate resources:    AS: 262351
                          IP: 177.125.192.0/22
                          IP: 2804:3f34::/32
Validation:               Failed, certificate revoked on Sun 22 Jun 2025 11:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6b:73:2c:d8:44:1e:b7:95:5e:12:22:79:77:17:9d:a8:26:1c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 16 18:16:43 2025 GMT
            Not After : Jun 15 18:21:43 2026 GMT
        Subject: CN=4D839483977D78702BA754AB330D5B6AE6DB3FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:2b:bd:8e:f4:6b:83:35:92:84:26:47:29:
                    94:90:c1:36:01:b3:8d:4e:66:96:ef:74:b6:56:06:
                    77:fd:d0:21:16:84:f5:5c:70:ff:d9:e8:40:85:d3:
                    9b:6a:2a:a9:63:7b:00:6b:db:c0:31:78:65:23:eb:
                    2e:44:80:21:14:4e:a6:e6:e8:7f:67:b4:60:ef:6b:
                    5f:30:6e:3a:32:2c:95:96:93:48:3b:3e:91:fc:46:
                    db:6e:89:1f:97:ab:80:ee:8d:53:6a:01:fa:47:46:
                    f1:30:94:20:d9:9f:b0:47:6a:97:86:93:3e:87:c7:
                    0a:13:ca:5c:83:c6:cf:40:04:41:85:d7:0c:a7:0e:
                    ab:54:92:0f:7b:09:4e:1c:73:8b:51:2f:7c:b5:d5:
                    ee:2b:08:4c:c2:b1:73:bd:96:b9:08:6a:e2:f1:e3:
                    07:0a:07:6b:f6:41:47:bc:b4:5a:2c:5c:42:2b:45:
                    99:1d:c9:6a:74:12:5e:33:c9:a0:ec:26:da:68:03:
                    20:6b:40:77:f9:a0:e0:76:3c:d4:05:df:6a:6c:8d:
                    25:ff:e4:e3:2d:4a:65:d6:fc:d9:a3:be:91:b0:0c:
                    ec:a9:2f:31:35:52:9b:a1:3d:aa:bb:7f:63:3d:dc:
                    c6:6d:cf:31:b7:2b:46:9f:e2:67:7e:c5:60:f3:d2:
                    16:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:83:94:83:97:7D:78:70:2B:A7:54:AB:33:0D:5B:6A:E6:DB:3F:F1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/4D839483977D78702BA754AB330D5B6AE6DB3FF1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.192.0/22
                IPv6:
                  2804:3f34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262351

    Signature Algorithm: sha256WithRSAEncryption
         b8:f9:4e:44:52:ab:84:d2:81:d6:d1:bb:01:f5:68:b2:2f:9e:
         e0:58:7b:15:c8:6d:00:23:7c:88:fc:69:da:93:94:47:c3:57:
         8f:76:1a:41:52:3a:61:fa:ab:32:34:ae:5b:14:26:9c:1e:5d:
         1f:28:79:bf:16:44:76:2a:08:9b:3a:ee:b9:0a:31:f9:d5:ae:
         f5:20:e7:09:68:ce:83:31:f6:43:40:06:02:f3:d8:0a:93:34:
         3e:e1:b6:63:1c:91:e7:fd:d9:b7:f5:e3:80:4c:fe:9f:16:1a:
         10:fc:f0:68:60:c0:fd:a4:47:1e:80:8f:1b:d4:96:9a:b3:0e:
         6d:3b:00:f3:85:42:8e:b8:0d:51:00:cd:3b:db:d9:5e:7d:b5:
         34:55:22:78:d5:09:ed:63:93:e3:6c:bf:fc:c3:b3:9b:bb:e6:
         0d:c3:a9:d9:72:d6:5e:63:b7:b6:7e:e0:20:08:de:70:3e:02:
         79:5c:65:5c:ab:74:55:7c:16:12:24:a2:4e:3a:28:bb:46:ed:
         c7:d0:38:ff:63:0d:9a:5b:ec:f1:25:ac:26:a8:71:11:ae:c2:
         02:7d:15:c7:7e:d3:54:ff:ac:fd:64:52:8a:8f:82:05:0f:6e:
         6c:aa:3a:3f:e8:da:e6:38:5e:de:0d:36:9e:f3:d6:12:94:11:
         ec:46:97:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----