This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/53BEC138BA48B09E02E2418EF43492F43DCC039D.cer
File:                     53BEC138BA48B09E02E2418EF43492F43DCC039D.cer (raw, json)
Hash identifier:          AUlYXGz0MAbKlviu5ZH7+6yM46NHNdHu2ookadBLGBk=
Subject key identifier:   53:BE:C1:38:BA:48:B0:9E:02:E2:41:8E:F4:34:92:F4:3D:CC:03:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       04AE51DAA9A50D805B8E73493A30DE92AAD99D70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/53BEC138BA48B09E02E2418EF43492F43DCC039D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Feb 2025 16:22:15 +0000
Certificate not after:    Wed 18 Feb 2026 16:27:15 +0000
Subordinate resources:    AS: 262407
                          IP: 138.0.92.0/22
                          IP: 177.38.144.0/21
                          IP: 189.76.240.0/20
                          IP: 2804:3f4::/32
Validation:               Failed, certificate revoked on Thu 14 Aug 2025 01:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ae:51:da:a9:a5:0d:80:5b:8e:73:49:3a:30:de:92:aa:d9:9d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 19 16:22:15 2025 GMT
            Not After : Feb 18 16:27:15 2026 GMT
        Subject: CN=53BEC138BA48B09E02E2418EF43492F43DCC039D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:11:03:b2:50:5e:30:5a:04:e4:48:5e:c2:
                    36:1d:35:3b:16:3e:35:73:89:39:93:5d:07:28:17:
                    87:b5:4a:40:c3:62:b2:ca:56:a1:a6:af:d4:aa:2f:
                    14:dc:6d:0b:96:e3:7c:5a:9f:64:c9:5d:1d:b1:d2:
                    72:8a:d5:c0:29:77:c7:02:c2:dc:ff:2a:cf:51:c3:
                    60:7f:9e:5d:dc:d1:1a:c8:ea:31:49:41:73:0b:73:
                    ba:aa:25:69:91:29:5b:3e:0a:e9:d8:f9:7e:7c:0c:
                    18:07:c7:6e:25:3b:b0:8c:ec:c5:00:3f:ef:f9:9c:
                    b5:d0:d8:ed:93:c1:ca:55:8c:87:e9:04:39:d6:b9:
                    04:d9:9a:b8:8e:1f:83:be:13:a0:c5:a0:af:1a:59:
                    03:45:3a:08:e9:1f:ac:08:b8:f8:c1:09:08:bc:99:
                    b1:cd:a2:3d:06:5a:c5:7c:e2:8c:27:29:28:f2:e2:
                    9c:37:68:0d:d4:73:c9:3b:3e:70:99:d3:f8:c6:75:
                    bb:8e:5a:ba:bc:d2:6c:20:0f:42:61:cc:4f:3a:3d:
                    0f:65:b8:56:3c:86:e2:92:10:f8:e7:c4:47:52:31:
                    49:83:d4:61:b1:01:5e:1b:f0:53:53:f5:08:b1:d6:
                    ee:9f:45:85:d9:15:03:90:59:69:df:cf:18:5d:32:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:BE:C1:38:BA:48:B0:9E:02:E2:41:8E:F4:34:92:F4:3D:CC:03:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/53BEC138BA48B09E02E2418EF43492F43DCC039D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.92.0/22
                  177.38.144.0/21
                  189.76.240.0/20
                IPv6:
                  2804:3f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262407

    Signature Algorithm: sha256WithRSAEncryption
         07:54:b8:4c:ce:f6:d0:2a:1a:c7:79:8b:04:96:03:71:62:e4:
         87:f2:77:e1:89:82:70:0b:53:30:cc:f0:fc:ca:a1:7b:35:9d:
         0e:08:62:57:bf:a3:75:43:c8:bb:64:70:f4:1f:2b:cb:2b:0d:
         8b:88:ec:0b:10:86:6c:e4:b1:f9:77:0f:97:38:f0:f0:9e:06:
         f0:3d:ac:d5:34:01:bb:2d:3e:88:09:b9:ea:0e:04:05:4d:4d:
         65:67:58:07:60:d2:f1:73:9c:cb:ca:32:f7:06:9c:be:26:9e:
         81:28:f5:55:c2:63:3f:a2:62:f1:de:25:2b:ed:26:aa:09:10:
         ef:93:13:92:09:c2:0f:3c:28:c2:83:a9:8a:40:24:5e:ac:1e:
         ae:b7:e5:4a:6b:5e:d1:62:f0:57:78:7a:40:8a:b8:e7:dc:77:
         c1:2d:53:76:c9:c2:d4:ae:d4:74:ba:68:a2:fc:f1:88:cb:47:
         cc:96:6f:4d:f4:88:ef:bf:e3:dc:13:a5:42:37:19:e8:d5:7d:
         6a:dc:a9:b0:98:05:76:12:ce:a9:11:cd:24:fd:7b:fc:93:12:
         66:ce:b3:43:f7:92:45:93:33:43:0c:51:76:c7:55:9a:14:01:
         e5:5f:e2:94:b0:3b:c6:a6:8b:ad:4c:2b:1a:04:21:c9:2d:8e:
         06:fa:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----