This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/61638C38350D4DE9AEC3E1C6BD4D552F9E8C6177.cer
File:                     61638C38350D4DE9AEC3E1C6BD4D552F9E8C6177.cer (raw, json)
Hash identifier:          wwoZOhQwnMRBKfs/GcWzi7byUBJjJYqjTsrpwPaTxSw=
Subject key identifier:   61:63:8C:38:35:0D:4D:E9:AE:C3:E1:C6:BD:4D:55:2F:9E:8C:61:77
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A5FBB23AFDE1F6F2083C397294C8637BAD4CDBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Fiz1XiSNvEk4u6ZHPY5PDXxErT78yuUXbCrj6dByxVD/0/61638C38350D4DE9AEC3E1C6BD4D552F9E8C6177.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Fiz1XiSNvEk4u6ZHPY5PDXxErT78yuUXbCrj6dByxVD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 May 2025 20:14:54 +0000
Certificate not after:    Thu 21 May 2026 20:19:54 +0000
Subordinate resources:    AS: 274721
                          IP: 2804:9298::/32
Validation:               Failed, certificate revoked on Wed 02 Jul 2025 14:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5f:bb:23:af:de:1f:6f:20:83:c3:97:29:4c:86:37:ba:d4:cd:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 22 20:14:54 2025 GMT
            Not After : May 21 20:19:54 2026 GMT
        Subject: CN=61638C38350D4DE9AEC3E1C6BD4D552F9E8C6177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:85:3a:fb:c6:f4:9b:b4:0b:5f:f3:da:52:f9:
                    c8:04:8d:8a:03:6b:a7:c7:d4:b4:42:55:eb:fd:56:
                    d9:b8:74:8b:f5:dd:2d:27:d7:d1:9b:a7:b6:e7:db:
                    dc:49:49:de:51:40:12:cc:d0:99:13:a7:bc:0f:02:
                    1f:06:66:d7:f9:0d:f7:00:b8:05:77:4b:b5:fa:20:
                    04:e3:cb:43:63:7e:9b:7f:83:29:39:6f:f6:99:1b:
                    5b:37:3f:66:29:d5:5c:21:c1:00:64:5a:d8:ce:23:
                    63:58:33:09:a6:1e:47:43:70:f2:34:17:36:39:9e:
                    fa:55:83:23:8e:32:d3:8c:23:6d:12:f6:86:6f:44:
                    23:8f:91:41:ef:e4:8c:53:6c:e1:47:4b:7d:06:b3:
                    3d:a7:10:d4:b9:db:33:b5:e8:88:11:f4:35:f5:0b:
                    cd:c0:36:37:dd:56:aa:b6:4d:15:73:4f:be:36:3b:
                    65:89:39:c1:22:b6:29:4e:5a:b2:fd:b3:c7:8e:9c:
                    36:eb:be:dd:4f:df:57:ce:aa:a8:36:a9:43:65:ff:
                    2d:e8:a0:b1:e3:1c:e5:20:77:d4:73:0a:6e:9d:c1:
                    97:8d:b7:92:09:8a:1c:67:de:56:39:92:36:a2:dc:
                    ba:8b:91:29:b5:ad:c6:be:da:c0:b2:c3:ae:3e:e5:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:63:8C:38:35:0D:4D:E9:AE:C3:E1:C6:BD:4D:55:2F:9E:8C:61:77
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Fiz1XiSNvEk4u6ZHPY5PDXxErT78yuUXbCrj6dByxVD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Fiz1XiSNvEk4u6ZHPY5PDXxErT78yuUXbCrj6dByxVD/0/61638C38350D4DE9AEC3E1C6BD4D552F9E8C6177.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9298::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274721

    Signature Algorithm: sha256WithRSAEncryption
         9c:78:4f:84:3b:1c:f4:8b:3d:18:eb:23:da:ff:ba:d7:e3:50:
         94:bd:2b:f1:18:58:f9:68:98:82:b8:1e:4a:7e:72:25:ea:51:
         40:61:2e:37:ca:24:8b:bf:82:ad:a5:e0:6b:58:5d:29:02:26:
         58:78:fe:64:40:87:a4:ab:07:62:c4:16:31:13:77:be:b8:cb:
         45:e3:7f:fc:46:00:2c:69:18:7a:6d:41:c3:13:f8:1b:a4:ed:
         a4:fc:1f:d0:c0:51:ba:48:50:7a:b0:93:1f:b3:a2:56:61:95:
         34:ec:7e:04:7a:39:8a:d2:44:23:b3:f5:bd:01:44:c1:b3:c4:
         9e:08:00:77:81:31:ad:d9:8a:d1:6d:b5:de:35:e6:cd:58:78:
         32:1c:8e:17:00:79:4b:bf:de:54:ab:e2:03:40:16:8a:af:44:
         3d:c2:0b:77:e0:34:65:2e:00:22:01:7a:15:a3:ac:35:81:c8:
         91:29:9d:ce:3a:a5:37:7b:3c:eb:a1:af:71:cf:be:06:d1:46:
         03:6b:db:b1:5e:09:e8:09:3d:e3:2c:04:46:f9:84:eb:bf:91:
         49:62:79:de:1d:da:b7:36:85:58:16:5e:43:52:18:a0:44:fa:
         48:9b:00:5a:e5:a4:90:0a:de:61:56:19:e7:09:ef:de:be:62:
         33:48:2b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----