This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5F709C276A79155FEB7CA111A467097402E890E7.cer
File:                     5F709C276A79155FEB7CA111A467097402E890E7.cer (raw, json)
Hash identifier:          nQxSpaluXFrz+e/SJyjTV5GoLP3SpZXG9ox53vLcyhI=
Subject key identifier:   5F:70:9C:27:6A:79:15:5F:EB:7C:A1:11:A4:67:09:74:02:E8:90:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F643655F7A2C23FF5776E9A524854DF89F54674
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5F709C276A79155FEB7CA111A467097402E890E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Apr 2025 19:28:22 +0000
Certificate not after:    Wed 29 Apr 2026 19:33:22 +0000
Subordinate resources:    AS: 270430
                          IP: 190.111.156.0/22
                          IP: 2804:6bdc::/32
Validation:               Failed, certificate revoked on Mon 23 Jun 2025 14:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:64:36:55:f7:a2:c2:3f:f5:77:6e:9a:52:48:54:df:89:f5:46:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 19:28:22 2025 GMT
            Not After : Apr 29 19:33:22 2026 GMT
        Subject: CN=5F709C276A79155FEB7CA111A467097402E890E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:e8:ab:55:79:b5:34:6a:b6:fe:73:68:63:
                    fd:ea:44:af:7c:90:5b:8c:95:de:5f:15:e7:be:d0:
                    16:f1:19:5c:86:36:d2:16:67:02:bb:93:80:d5:e8:
                    25:58:d6:af:3c:08:75:3f:12:99:0d:28:dc:47:fb:
                    a9:2b:77:c1:49:36:73:59:50:b6:38:66:e9:a1:e2:
                    f0:73:f0:59:07:58:f3:91:29:93:d0:36:3e:ab:97:
                    43:33:00:21:a7:60:94:5a:38:fe:49:bd:4a:ad:9d:
                    55:48:d3:ba:b9:7d:1f:f6:e8:dc:94:2b:ff:b1:d0:
                    7c:ae:fb:40:1d:00:77:42:03:59:1b:1b:36:23:54:
                    b0:97:3e:c2:d5:64:a6:2a:12:17:e8:b0:0e:5d:6a:
                    37:4f:20:ab:22:3b:a2:f7:13:ef:d1:9d:4c:23:b3:
                    70:74:1d:2b:53:2d:d5:20:a6:44:2a:03:fb:46:05:
                    f3:e0:b7:d2:9a:ec:b3:da:33:88:3c:21:ef:30:fb:
                    6e:63:ea:b7:72:04:02:cd:fb:07:5f:57:7b:b3:bb:
                    3c:cc:03:fb:b6:49:e9:8e:6b:96:d8:f5:0c:4b:a2:
                    be:93:48:50:0e:0a:b3:64:d5:75:e3:33:8e:9a:a2:
                    50:f0:c1:b9:95:d7:f3:6e:52:04:76:22:4f:fd:f3:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:70:9C:27:6A:79:15:5F:EB:7C:A1:11:A4:67:09:74:02:E8:90:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5F709C276A79155FEB7CA111A467097402E890E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.156.0/22
                IPv6:
                  2804:6bdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270430

    Signature Algorithm: sha256WithRSAEncryption
         2a:c3:7d:74:48:8e:90:63:f9:d4:45:c5:85:fc:9c:c2:7a:a0:
         c1:9d:50:90:f7:6b:ea:0a:6b:cd:de:39:11:93:aa:4c:d1:26:
         ed:02:f9:b3:60:c5:c2:6c:6a:3c:9a:10:4b:23:39:c8:ae:4e:
         fb:5e:37:85:b7:0c:ed:ae:44:46:63:54:67:1c:c4:33:78:10:
         bc:bd:a3:cd:de:e8:70:f2:41:e4:d6:b4:64:41:ef:47:7e:8a:
         04:db:39:6d:94:20:40:40:83:70:7d:af:d5:88:e7:97:ab:a1:
         4e:55:e9:21:09:7c:20:e7:c1:77:6b:be:87:52:2a:9d:a8:57:
         50:27:d2:bc:c4:69:e8:85:b0:cf:86:db:85:d2:56:ea:c0:0a:
         e5:a7:7c:77:61:2c:4a:cd:85:e8:80:c3:5b:8a:fa:1b:7c:09:
         cc:82:ad:29:ec:c1:d2:89:fd:88:07:a0:7a:16:14:e3:af:22:
         f9:b5:46:17:0d:fa:cb:e5:07:f5:e4:e0:4a:b1:9b:24:04:ea:
         97:3a:89:0f:8f:e6:c8:01:a9:38:0a:5e:24:4f:d4:86:f7:4c:
         c2:68:57:93:b0:80:30:02:52:cc:ed:76:2a:d8:59:02:14:52:
         08:20:cd:45:df:24:56:39:f4:12:96:1e:3c:e6:2c:69:cd:b8:
         20:bc:3a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----