This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.cer
File:                     7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.cer (raw, json)
Hash identifier:          tbds6xS1Tu9IkJXzevHruzEsAikWCE2F0t9KWosLLYc=
Subject key identifier:   7C:19:C5:BF:1E:5E:B4:CA:4A:D0:60:52:69:27:20:04:B1:7B:AE:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       49CD3A837189F4E5601512B5A44096F748331CE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Jun 2025 16:56:12 +0000
Certificate not after:    Wed 24 Jun 2026 17:01:12 +0000
Subordinate resources:    AS: 270858
                          IP: 179.0.188.0/22
                          IP: 2804:7284::/32
Validation:               Failed, certificate revoked on Thu 17 Jul 2025 20:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cd:3a:83:71:89:f4:e5:60:15:12:b5:a4:40:96:f7:48:33:1c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 25 16:56:12 2025 GMT
            Not After : Jun 24 17:01:12 2026 GMT
        Subject: CN=7C19C5BF1E5EB4CA4AD0605269272004B17BAE72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:52:3d:97:ab:40:7c:4e:6b:58:a6:8d:de:
                    0d:0b:db:8d:dc:aa:12:73:e5:d2:b9:da:7b:e5:88:
                    c6:91:81:a0:f3:45:ef:f0:04:aa:5e:ce:31:7c:85:
                    59:b5:57:e2:a6:89:3f:8e:39:bc:9f:f2:6e:0f:ec:
                    1a:4e:ea:52:15:ea:a7:69:27:10:cf:9a:a6:0f:ac:
                    dc:fa:35:66:63:9e:82:32:4a:41:48:6d:30:6d:6e:
                    e8:ab:12:b2:25:5f:e0:40:c6:c7:0f:f7:45:de:23:
                    e8:7e:87:e1:98:ae:cf:eb:e1:89:2a:d0:cb:63:19:
                    69:79:e8:4e:38:d3:51:ad:d8:c5:9f:94:2b:c8:6e:
                    e8:99:e3:bd:5f:50:cc:05:49:3d:c2:49:c5:ee:9e:
                    d0:1e:bc:37:cc:6d:58:da:41:d5:a2:11:09:cd:9b:
                    61:db:eb:3d:c8:23:51:38:98:5d:ba:46:d4:bb:2b:
                    71:0c:e3:6b:bd:94:2f:af:26:be:c3:8d:13:ee:45:
                    35:79:82:e4:48:8a:88:77:d1:07:f8:4c:07:e5:f8:
                    8e:a7:21:cf:8c:d3:1c:f2:31:cf:42:9a:fa:ea:5e:
                    7f:cd:49:91:d7:b5:a9:86:6f:6c:10:2e:ab:2c:a6:
                    91:27:ef:a0:90:de:50:68:15:6f:b7:ad:a4:b2:bc:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:19:C5:BF:1E:5E:B4:CA:4A:D0:60:52:69:27:20:04:B1:7B:AE:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.188.0/22
                IPv6:
                  2804:7284::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270858

    Signature Algorithm: sha256WithRSAEncryption
         c6:ad:6d:be:76:05:6f:0c:5b:9c:15:04:01:22:6d:bf:5b:26:
         05:2f:29:ad:e5:04:29:58:7f:17:e0:a1:c5:34:03:8d:9b:c9:
         a1:1a:f8:49:62:bd:95:53:4a:86:df:3e:cd:4c:d4:bb:ca:7d:
         22:fe:43:6c:12:07:57:10:45:a1:3b:78:f1:a6:2e:10:33:22:
         f8:0c:f4:06:bc:f8:a1:52:b4:6d:b9:c8:68:76:fa:b3:51:13:
         05:b3:e0:a6:4c:b6:e5:98:6b:1a:74:cf:33:54:36:8e:0b:56:
         06:ae:64:78:96:25:7b:78:6d:c2:2f:66:57:c3:e1:6a:a3:6f:
         c7:d3:2c:73:1c:54:fa:cb:e0:77:3a:f7:ad:c2:17:b0:48:bb:
         57:6d:74:d3:67:fa:09:c3:a7:79:26:e5:4a:c1:35:dd:f2:45:
         ed:69:7f:46:b6:35:18:79:44:31:d0:6b:11:f8:ce:f3:6b:51:
         6d:75:c4:60:82:aa:94:0e:5c:cc:d0:04:a2:f2:b4:34:6b:67:
         e1:fd:90:96:10:c3:3e:c8:07:90:6d:eb:41:b6:7e:15:95:96:
         df:99:74:0a:46:c1:1b:d2:ca:77:a6:c5:3c:ec:1c:7b:8d:35:
         a5:09:97:9e:e5:23:8e:ca:ee:4c:e9:ef:eb:a6:be:9f:1d:58:
         74:59:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----