This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/56D283C6C96F8CDFF19FF9397DC907E8E53346E8.cer
File:                     56D283C6C96F8CDFF19FF9397DC907E8E53346E8.cer (raw, json)
Hash identifier:          57Hxial3YOZoyb4G7wYMkj31h3WaFJLC0u1l3NIKLbs=
Subject key identifier:   56:D2:83:C6:C9:6F:8C:DF:F1:9F:F9:39:7D:C9:07:E8:E5:33:46:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       28A7B8D5C61DAE96A4EB29EC86FE8AABE69D5F0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/56D283C6C96F8CDFF19FF9397DC907E8E53346E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Dec 2025 17:21:07 +0000
Certificate not after:    Mon 14 Dec 2026 17:26:07 +0000
Subordinate resources:    AS: 264442
                          IP: 131.221.192.0/22
                          IP: 2804:1ea8::/32
Validation:               Failed, certificate revoked on Mon 15 Dec 2025 17:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a7:b8:d5:c6:1d:ae:96:a4:eb:29:ec:86:fe:8a:ab:e6:9d:5f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 15 17:21:07 2025 GMT
            Not After : Dec 14 17:26:07 2026 GMT
        Subject: CN=56D283C6C96F8CDFF19FF9397DC907E8E53346E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fd:8f:e2:f9:5c:69:a7:63:58:da:c7:37:d8:
                    7f:fc:8b:7a:7d:78:71:69:36:17:b2:d5:46:c0:d3:
                    48:0f:c0:99:01:d0:f4:95:be:f6:1a:61:48:af:64:
                    48:b7:ec:95:1f:7b:95:d3:68:c7:cf:ce:01:c0:5c:
                    24:94:40:65:0a:39:04:59:cd:40:6f:aa:11:2a:e5:
                    c1:c1:04:44:20:e5:d3:8f:12:ac:7d:cb:f0:00:c8:
                    a7:ae:e1:ff:05:d8:e1:5e:c4:45:2d:c9:29:2e:64:
                    ca:1a:88:74:4a:40:f2:0a:7c:46:23:61:87:84:e2:
                    33:eb:28:81:e4:36:54:cc:b3:d5:48:b3:c3:86:d6:
                    2b:15:2a:f6:a7:87:11:6d:61:eb:6e:bc:aa:58:b5:
                    d4:3b:0f:5a:cb:7b:ad:6a:99:84:da:b9:c0:b9:1b:
                    28:00:32:88:6d:72:6f:21:fe:20:0b:ec:bc:7b:92:
                    89:8d:ca:07:d6:40:74:c2:c9:b4:4c:a4:d0:07:a5:
                    60:3b:db:f7:77:82:aa:bf:e6:37:88:86:ac:1d:e3:
                    fe:2c:b7:66:9c:b8:1a:08:e1:65:4e:e2:d4:09:76:
                    7d:20:2b:d7:de:e9:88:ef:1a:58:7c:1e:52:4f:40:
                    1b:be:a3:ce:da:25:ed:ff:ec:9d:6e:f2:0d:db:29:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:D2:83:C6:C9:6F:8C:DF:F1:9F:F9:39:7D:C9:07:E8:E5:33:46:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/56D283C6C96F8CDFF19FF9397DC907E8E53346E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.192.0/22
                IPv6:
                  2804:1ea8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264442

    Signature Algorithm: sha256WithRSAEncryption
         89:37:d3:98:ac:de:75:17:41:9a:a0:9b:d4:ff:70:1a:b8:52:
         bc:7b:0e:46:94:a6:9c:0d:7c:56:fc:2b:12:27:40:18:56:e5:
         7a:ce:83:f6:bc:ef:23:39:80:7b:be:e3:06:20:e8:c3:e3:54:
         a9:9a:97:03:11:2e:5d:7c:d0:ff:51:7c:7e:60:8e:b0:47:45:
         3e:6c:ac:db:24:1c:38:d8:b9:50:37:f6:09:aa:7b:a7:03:59:
         2f:f3:28:11:7b:b7:c1:3a:0b:73:b4:2b:55:0f:33:44:f7:d9:
         56:8b:e0:b5:b8:e9:b4:64:1d:c6:b6:b7:19:b6:11:41:59:77:
         e0:84:1d:c2:b4:1e:2a:36:f6:2e:68:f8:f4:96:c4:2c:23:03:
         5f:c3:fa:db:96:ed:ad:5e:e7:bb:9b:37:b2:81:6d:08:19:63:
         95:2f:84:ca:f9:38:49:80:4c:89:1b:2b:de:25:ac:b5:98:82:
         94:27:41:66:40:bc:04:c1:3a:21:f0:bd:fa:7e:3d:8a:c4:b8:
         11:5e:9a:cc:43:7c:4f:a9:a6:5b:25:2a:bc:6d:8b:95:52:42:
         23:be:61:8c:6b:c4:6b:a4:68:f0:ac:30:e8:db:28:b2:d9:c1:
         2d:40:dc:d7:8a:43:77:9e:cc:fc:00:c3:2e:51:3d:bf:41:93:
         16:0f:f8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----