This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.cer
File:                     6F11EAE0541E2BEF427842B5ACBBB3FA60094958.cer (raw, json)
Hash identifier:          VJ03IzsZXO0KbosEnw1EMNx8PjIfOBeWlQyTqka7wHY=
Subject key identifier:   6F:11:EA:E0:54:1E:2B:EF:42:78:42:B5:AC:BB:B3:FA:60:09:49:58
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       640434D11F70C6435CB791DA3D84496FEDFF6AB9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Apr 2025 14:55:51 +0000
Certificate not after:    Wed 22 Apr 2026 15:00:51 +0000
Subordinate resources:    AS: 271069
                          IP: 179.48.0.0/22
                          IP: 2804:75c8::/32
Validation:               Failed, certificate revoked on Thu 26 Jun 2025 09:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:04:34:d1:1f:70:c6:43:5c:b7:91:da:3d:84:49:6f:ed:ff:6a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 23 14:55:51 2025 GMT
            Not After : Apr 22 15:00:51 2026 GMT
        Subject: CN=6F11EAE0541E2BEF427842B5ACBBB3FA60094958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:93:d9:ec:46:61:5c:74:71:30:ed:ba:9a:
                    5e:2a:94:f7:4d:cc:5d:59:0b:6d:64:e0:f1:86:fb:
                    95:ed:ca:ca:3d:69:ee:d3:16:e9:1c:92:c9:9e:03:
                    28:c4:0d:19:73:0c:0d:22:2e:e5:93:9c:3e:4c:c2:
                    74:5e:7d:39:26:d5:07:20:50:71:fe:a0:c6:73:2c:
                    8a:bc:ae:46:be:c9:1f:be:cc:8d:27:4e:0f:ee:21:
                    77:d7:52:89:88:6e:b7:e6:63:b8:7b:21:a9:f4:d7:
                    02:ce:ca:b7:d7:cf:f7:3e:2a:9a:c1:e2:c7:01:60:
                    c6:b7:44:70:c4:5b:5a:fe:81:ca:1a:4c:c3:c5:14:
                    c7:b4:ea:67:36:d7:98:66:35:66:7b:0b:f2:08:73:
                    05:94:f9:cc:d7:c7:47:27:21:e5:a0:15:ea:2b:e1:
                    bd:7b:4b:8b:ca:f5:0e:54:a1:63:62:2f:d2:39:fa:
                    5e:73:e7:0b:1e:34:b4:b1:b9:be:17:a8:1a:b6:df:
                    c8:50:01:68:36:d3:24:5a:93:ae:58:18:65:3f:24:
                    2d:ff:72:54:40:57:32:89:a5:4a:83:5e:cd:d4:a8:
                    3a:5a:c7:05:d7:b8:04:03:df:6b:9b:d6:6b:94:84:
                    be:73:17:dc:72:15:98:d1:78:e9:ae:23:e0:72:a9:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:11:EA:E0:54:1E:2B:EF:42:78:42:B5:AC:BB:B3:FA:60:09:49:58
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.0.0/22
                IPv6:
                  2804:75c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271069

    Signature Algorithm: sha256WithRSAEncryption
         1c:b8:65:bd:9b:96:a4:18:5f:55:cc:49:89:7b:3b:73:b2:82:
         4e:d0:b5:04:3d:ff:5d:82:55:77:15:32:2e:83:a9:99:49:5d:
         1f:e0:0d:25:ad:61:20:a3:6d:0b:d2:77:ec:6f:7f:d0:bc:17:
         74:3a:6d:ef:7b:3e:1e:80:7a:19:e3:94:8b:08:d2:35:a3:41:
         84:11:bf:7e:8c:7e:7b:58:82:9a:f4:cf:fe:ab:42:ea:58:45:
         c3:b4:48:09:4e:f7:6d:c4:4f:60:4b:73:2d:a5:de:ec:92:53:
         32:86:a1:6b:a9:25:78:6f:db:07:65:2f:1b:c7:0b:f7:fd:89:
         0c:ab:71:f6:79:95:86:67:93:09:c3:89:95:15:d0:37:64:34:
         ce:84:6a:16:8b:f0:f9:af:bb:8a:8e:44:8a:8c:f0:41:11:62:
         66:07:64:7b:ba:f6:c7:cb:73:e2:e6:6c:46:0a:26:1b:df:c8:
         e0:a0:eb:f0:ec:79:e5:cc:5c:85:49:45:e1:c2:56:32:0b:f6:
         4b:34:14:3b:c0:a7:37:c4:84:17:34:21:93:5d:76:dc:a0:28:
         1c:fc:ef:0c:1b:4d:ce:46:5f:c1:6f:7f:e2:80:d1:ca:5f:ed:
         41:3b:c2:5d:0c:bb:04:d4:9d:cd:a1:5b:08:d3:cd:be:b3:19:
         3f:c1:17:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----