This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.cer
File:                     5A26C85C73E6B8570445B0D41258C0AE86AFF28B.cer (raw, json)
Hash identifier:          TBfljfERn9wg0iax4kfrMVjdbD8b4LYgIJBKYQay1Pg=
Subject key identifier:   5A:26:C8:5C:73:E6:B8:57:04:45:B0:D4:12:58:C0:AE:86:AF:F2:8B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C9B76950A03F51E4B5595309FD26F130AA76DAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Nov 2025 09:26:42 +0000
Certificate not after:    Thu 12 Nov 2026 09:31:42 +0000
Subordinate resources:    AS: 273524
                          IP: 170.79.248.0/24
                          IP: 2804:8ff4::/32
Validation:               Failed, certificate revoked on Mon 01 Dec 2025 21:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9b:76:95:0a:03:f5:1e:4b:55:95:30:9f:d2:6f:13:0a:a7:6d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 13 09:26:42 2025 GMT
            Not After : Nov 12 09:31:42 2026 GMT
        Subject: CN=5A26C85C73E6B8570445B0D41258C0AE86AFF28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:ea:1b:d8:2c:cc:b2:e7:72:66:05:fe:8e:
                    14:ec:dc:55:c4:3d:5b:f8:be:ce:c2:47:79:34:96:
                    a7:9a:da:77:70:43:ca:b1:ad:18:94:5a:21:35:25:
                    8c:ea:96:51:75:c5:a4:95:3f:e8:82:89:be:87:e9:
                    6b:82:75:33:63:8a:f8:d8:e6:fc:b2:d2:6c:58:7c:
                    25:16:6b:81:39:d3:b7:ac:67:66:09:47:f1:e8:c4:
                    e5:ce:9b:a4:cc:c1:1f:1f:51:c7:00:49:5d:42:8e:
                    c1:3a:eb:0c:a0:01:03:47:88:37:1e:3d:73:fd:d9:
                    79:48:cc:ee:53:0f:98:24:44:4a:52:40:21:d6:70:
                    b8:41:4f:a8:93:ec:96:13:ae:7b:31:46:55:42:e4:
                    bb:5a:9d:e4:ce:f5:13:80:3d:c8:a5:0b:b9:43:b5:
                    a6:0b:c6:11:12:6d:fb:4d:34:76:18:3b:5c:5b:94:
                    59:28:be:e3:36:0d:af:e6:c4:83:59:24:d9:7d:ec:
                    9f:e0:36:5d:57:a6:47:ae:9c:24:45:03:bf:e9:fd:
                    64:1d:69:1d:20:25:cc:de:0b:be:8c:21:9f:ff:37:
                    e2:31:dc:00:1e:65:86:49:ba:40:5e:32:f3:9a:eb:
                    16:f8:c3:9c:50:57:f8:93:f4:b8:70:33:79:72:0a:
                    de:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:26:C8:5C:73:E6:B8:57:04:45:B0:D4:12:58:C0:AE:86:AF:F2:8B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.248.0/24
                IPv6:
                  2804:8ff4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273524

    Signature Algorithm: sha256WithRSAEncryption
         6d:14:e8:93:d4:09:11:90:f9:22:da:2c:46:ed:d2:e9:1a:df:
         04:72:f8:67:4e:64:0e:18:99:c1:4b:72:29:5f:7a:73:1d:10:
         fc:c8:d3:86:be:e3:e4:34:1c:5b:b0:c8:e8:87:44:a7:f8:d7:
         0e:5e:f6:cf:c6:2d:bc:45:13:49:48:11:c9:9d:be:ba:7b:37:
         2a:d2:83:1e:ea:26:cc:d1:a8:ad:37:67:7a:20:84:75:e7:7a:
         00:8e:a6:34:15:f7:25:6b:9e:de:f9:83:ca:5f:0f:94:5e:9c:
         fd:bc:84:bf:f5:7b:82:4b:8f:75:51:99:e7:66:26:ab:d0:90:
         ae:e9:d1:54:f3:2e:8e:8f:45:ea:f2:10:bc:fb:75:80:17:3e:
         28:cc:01:03:ee:d9:f6:92:d4:f6:c9:25:8a:08:df:c0:eb:74:
         cb:be:a5:2a:c6:36:4a:b1:49:61:c7:e2:8d:df:e3:75:4b:56:
         24:b1:41:80:f1:56:c1:6a:eb:47:31:b2:60:94:f7:30:63:1e:
         fe:09:a3:f4:77:e9:0b:8b:46:6a:f2:7e:2b:4c:1b:ea:95:70:
         55:7c:e0:f6:3e:e3:1e:5d:72:56:31:0e:ba:30:35:9a:35:0d:
         65:36:46:31:2f:fc:ee:d5:1f:ea:ec:cb:60:36:d9:f2:f8:85:
         e5:0b:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----