This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.cer
File:                     8515DAD8B5B782A7E8448EFEB96B22E9B9617746.cer (raw, json)
Hash identifier:          l0HO8/WtZLqCc1D88qtabncJfDfUq8epNF1CdqEdiWw=
Subject key identifier:   85:15:DA:D8:B5:B7:82:A7:E8:44:8E:FE:B9:6B:22:E9:B9:61:77:46
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A3E5E326FDE6E9C479702700B696A66CE2BFE00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.mft
caRepository:             rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 May 2025 00:36:43 +0000
Certificate not after:    Wed 06 May 2026 00:41:43 +0000
Subordinate resources:    AS: 268578
                          IP: 45.163.176.0/22
                          IP: 2804:5358::/32
Validation:               Failed, certificate revoked on Wed 21 May 2025 17:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3e:5e:32:6f:de:6e:9c:47:97:02:70:0b:69:6a:66:ce:2b:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  7 00:36:43 2025 GMT
            Not After : May  6 00:41:43 2026 GMT
        Subject: CN=8515DAD8B5B782A7E8448EFEB96B22E9B9617746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:23:9f:39:02:f1:3b:33:8c:a4:5b:a0:d1:
                    9b:3d:71:bb:61:d0:30:47:9e:68:0b:cc:b0:5a:13:
                    1a:c7:00:9d:25:08:20:d8:79:4d:f0:77:6c:d0:70:
                    48:43:9a:c0:53:5c:07:a6:58:3d:6c:37:64:20:8e:
                    ec:5b:b9:56:fc:98:6e:4f:49:ef:f4:88:2c:db:2c:
                    c2:c7:a3:c5:d8:91:31:f2:ca:ed:ae:9c:de:e9:81:
                    20:bc:85:88:58:2b:d5:5e:8e:16:6d:11:4d:f4:d0:
                    10:1a:0a:ed:d5:7e:19:dd:ad:47:81:6e:7d:b0:4d:
                    7f:9b:0b:53:85:d0:f6:7d:d1:ff:fb:41:a8:ff:cf:
                    94:fd:d7:c2:c7:e7:12:b0:49:37:e1:79:10:f2:ee:
                    5c:01:44:29:11:62:e1:db:44:d1:4d:bc:12:65:e7:
                    73:ec:72:32:d2:09:85:17:52:fd:f3:c3:c8:95:42:
                    29:de:68:c4:14:69:ad:51:8a:a3:bb:b7:e0:29:3b:
                    f0:b5:37:e1:2e:e1:9f:a8:4e:99:17:69:c1:22:28:
                    96:c7:b9:a1:21:ab:b3:bb:4e:4d:bc:59:77:fe:b7:
                    ea:47:5a:e9:a6:24:c5:e7:02:f0:da:e0:2a:0c:c2:
                    8f:10:58:51:f8:52:54:dd:c3:a2:48:97:8f:83:29:
                    7c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:15:DA:D8:B5:B7:82:A7:E8:44:8E:FE:B9:6B:22:E9:B9:61:77:46
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.176.0/22
                IPv6:
                  2804:5358::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268578

    Signature Algorithm: sha256WithRSAEncryption
         94:f5:f8:d5:cd:b4:8d:fc:25:5b:f9:f2:84:bc:fd:14:ba:55:
         82:f2:71:57:72:80:22:a4:6d:17:02:ad:28:24:8c:46:1c:aa:
         6e:55:c6:dc:7b:8e:56:5c:88:65:4d:c9:5b:52:22:4b:52:e1:
         72:05:dc:f1:8b:02:34:e9:86:41:b9:03:97:53:28:f6:e5:fb:
         1c:18:99:2c:32:b4:49:bf:7b:32:70:24:98:f8:5d:49:86:8d:
         00:3d:17:a6:6f:49:e3:ad:39:fd:ac:d6:5f:8c:ef:8e:57:d5:
         a4:15:f4:a5:d8:b5:81:50:01:65:e3:cc:19:63:d0:c2:6f:31:
         2b:ab:0a:10:ac:54:6c:31:12:32:1b:b2:d9:d9:cf:1f:e3:18:
         3a:30:41:a8:21:d8:0d:ff:79:c4:47:b6:8d:28:57:60:f6:58:
         2b:a7:d7:6b:db:a8:08:40:0d:a8:2e:9b:01:26:3f:29:7f:84:
         13:88:2d:0b:fe:e9:90:3b:c6:d5:c5:8f:33:93:ac:56:d2:c5:
         27:ad:35:a5:a9:15:f6:5f:3b:d2:6a:0e:36:fd:ef:72:b7:38:
         c8:59:36:ca:ac:b1:bf:fc:a9:24:f4:4f:6a:45:8d:ef:97:a4:
         b8:7c:18:57:33:e2:43:27:75:88:1a:2b:f5:20:eb:8f:ee:6b:
         92:6e:5d:10
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUGj5eMm/ebpxHlwJwC2lqZs4r/gAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA1MDcwMDM2NDNaFw0yNjA1MDYwMDQxNDNaMDMxMTAvBgNV
BAMTKDg1MTVEQUQ4QjVCNzgyQTdFODQ0OEVGRUI5NkIyMkU5Qjk2MTc3NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfpyOfOQLxOzOMpFug0Zs9cbth
0DBHnmgLzLBaExrHAJ0lCCDYeU3wd2zQcEhDmsBTXAemWD1sN2QgjuxbuVb8mG5P
Se/0iCzbLMLHo8XYkTHyyu2unN7pgSC8hYhYK9VejhZtEU300BAaCu3VfhndrUeB
bn2wTX+bC1OF0PZ90f/7Qaj/z5T918LH5xKwSTfheRDy7lwBRCkRYuHbRNFNvBJl
53PscjLSCYUXUv3zw8iVQineaMQUaa1RiqO7t+ApO/C1N+Eu4Z+oTpkXacEiKJbH
uaEhq7O7Tk28WXf+t+pHWummJMXnAvDa4CoMwo8QWFH4UlTdw6JIl4+DKXy1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFFdrYtbeCp+hE
jv65ayLpuWF3RjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTVL
cG9XM0FxdFZjcjVMeks3U25mcVU2TXhYYlYyMlJSTG9oaWc5ZFBmWksvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk1
S3BvVzNBcXRWY3I1THpLN1NuZnFVNk14WGJWMjJSUkxvaGlnOWRQZlpLLzAvODUx
NURBRDhCNUI3ODJBN0U4NDQ4RUZFQjk2QjIyRTlCOTYxNzc0Ni5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaOwMA0EAgACMAcDBQAoBFNYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZIjANBgkqhkiG9w0BAQsFAAOCAQEAlPX41c20jfwlW/ny
hLz9FLpVgvJxV3KAIqRtFwKtKCSMRhyqblXG3HuOVlyIZU3JW1IiS1LhcgXc8YsC
NOmGQbkDl1Mo9uX7HBiZLDK0Sb97MnAkmPhdSYaNAD0Xpm9J4605/azWX4zvjlfV
pBX0pdi1gVABZePMGWPQwm8xK6sKEKxUbDESMhuy2dnPH+MYOjBBqCHYDf95xEe2
jShXYPZYK6fXa9uoCEANqC6bASY/KX+EE4gtC/7pkDvG1cWPM5OsVtLFJ601pakV
9l870moONv3vcrc4yFk2yqyxv/ypJPRPakWN75ekuHwYVzPiQyd1iBor9SDrj+5r
km5dEA==
-----END CERTIFICATE-----