This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
File:                     4DAC2642FACAE6887214205D5E592F569A4E611B.cer (raw, json)
Hash identifier:          o19JcUFYtvNWyT1tIwvigQ1dkthEnGcgi094XyvG230=
Subject key identifier:   4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1E12716DED775563CDC71FCE9BC61BAC5449C69E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Jul 2025 15:30:15 +0000
Certificate not after:    Tue 30 Jun 2026 15:35:15 +0000
Subordinate resources:    AS: 28238
                          IP: 186.216.224.0/20
                          IP: 187.0.128.0/20
Validation:               Failed, certificate revoked on Mon 04 Aug 2025 07:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:12:71:6d:ed:77:55:63:cd:c7:1f:ce:9b:c6:1b:ac:54:49:c6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  1 15:30:15 2025 GMT
            Not After : Jun 30 15:35:15 2026 GMT
        Subject: CN=4DAC2642FACAE6887214205D5E592F569A4E611B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:36:27:bc:77:63:8e:e8:a8:39:81:3c:b9:
                    a8:48:bf:cf:dc:08:71:4d:42:b4:bb:f3:c4:cb:dc:
                    4c:b1:37:79:a4:f1:f2:80:ac:21:b0:b6:57:45:87:
                    42:6c:7b:57:ef:a3:0a:5b:77:83:08:d9:6c:e4:40:
                    b1:79:7b:74:02:46:13:46:d7:e8:c7:ab:e7:41:ac:
                    6f:45:78:08:ba:e6:3e:3a:63:a5:6c:a8:af:5e:6e:
                    2d:90:15:aa:81:5a:df:2e:48:6d:29:f3:84:01:a1:
                    2e:c5:87:3d:1f:6b:ea:ef:e4:8b:be:0a:39:f0:30:
                    82:78:ac:c6:d6:b5:c7:80:d9:0a:e9:99:73:42:b0:
                    5e:ca:bc:cd:9a:d9:b3:e7:87:a3:cb:1d:ff:68:a6:
                    62:4a:d4:29:88:73:25:fd:c0:88:2f:84:05:f1:b4:
                    6b:ec:c6:a8:cb:13:59:f8:3e:fb:5d:3c:8a:5c:2e:
                    a1:03:d5:67:3e:ea:a9:55:7d:67:f8:4e:fc:ab:be:
                    5b:ff:cd:f2:cb:6a:76:55:62:b0:96:b9:cb:98:a4:
                    aa:28:34:9c:ab:99:3d:e9:7e:36:3b:bb:4f:d8:46:
                    2c:69:9f:e2:45:26:de:7b:d3:20:ca:db:76:31:f5:
                    e2:c5:b0:38:86:bd:b5:ba:bd:db:2e:0a:79:2c:a5:
                    c1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.224.0/20
                  187.0.128.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28238

    Signature Algorithm: sha256WithRSAEncryption
         ab:6f:32:2b:96:fd:f6:11:9a:30:16:bd:e1:68:8a:b3:81:e1:
         af:24:79:ee:ce:76:36:3e:79:0c:3a:67:36:d1:af:0e:ac:e7:
         fc:c3:a7:60:9d:6d:73:68:60:3c:b5:df:14:0b:ac:5c:4f:d4:
         a7:9c:27:60:05:74:02:90:b8:c8:27:ca:87:94:eb:0d:24:9d:
         c4:59:0c:19:8e:5e:cb:63:8a:96:08:77:73:4d:5f:d2:dc:cf:
         fb:db:0e:f3:c1:e9:61:4c:31:84:e1:64:f3:11:06:19:67:d9:
         d7:8c:75:76:a0:b4:11:c0:32:40:b6:5c:b9:10:e4:a1:55:6b:
         18:67:6e:24:e4:95:61:38:57:91:03:13:c6:f2:30:17:73:26:
         7d:b5:2c:1d:34:b5:59:fd:62:37:aa:75:1b:ca:89:1e:94:b5:
         59:a2:96:e6:c5:91:de:f3:7e:94:44:b7:d8:67:03:51:a1:10:
         cf:13:80:bb:c0:37:ca:29:7a:3a:d4:57:5a:44:45:b4:ae:1a:
         ae:5a:d6:21:2f:08:07:8e:a1:73:5a:15:41:2b:15:dc:90:9b:
         d4:f0:29:37:0d:94:03:24:e5:d4:7b:5e:50:26:90:78:29:28:
         6c:e2:32:ae:d7:34:f3:40:83:a7:b7:4b:45:96:e3:0e:f8:9c:
         04:2d:7c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----