This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
File:                     882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer (raw, json)
Hash identifier:          vHRLPmJYKfDBB+pBBcJAOG5tCODmQx/PCmqXQFYobbs=
Subject key identifier:   88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6F9B4D55A8112C8D31D0BEBC979658A389F7325E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Mar 2025 18:47:06 +0000
Certificate not after:    Mon 16 Mar 2026 18:52:06 +0000
Subordinate resources:    AS: 269182
                          IP: 45.181.100.0/22
                          IP: 2804:60a8::/32
Validation:               Failed, certificate revoked on Fri 04 Jul 2025 23:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9b:4d:55:a8:11:2c:8d:31:d0:be:bc:97:96:58:a3:89:f7:32:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 17 18:47:06 2025 GMT
            Not After : Mar 16 18:52:06 2026 GMT
        Subject: CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:85:26:e7:1b:92:ec:0b:38:df:a0:b9:3f:
                    c8:a3:74:e6:50:0f:e8:03:89:e8:e8:e1:a6:86:2e:
                    04:3c:75:21:9c:e1:27:e0:7e:aa:04:86:0d:e5:27:
                    15:9a:df:03:6f:8c:3a:f7:c2:b1:e4:35:ae:97:bc:
                    72:33:7f:b6:4d:11:84:7f:c6:fd:11:d8:d8:09:5c:
                    d5:dc:92:1f:27:e3:17:0e:37:d5:61:aa:e9:ea:77:
                    42:a7:90:83:9a:3d:70:e3:d1:ad:a5:31:4a:23:0b:
                    99:0b:d2:f2:3c:83:f1:ac:97:fd:93:a8:68:1f:03:
                    24:73:da:b0:e7:ae:b2:a7:61:8b:ed:b7:68:67:5e:
                    cc:05:40:15:7c:b1:b0:71:4b:dd:07:51:ea:19:8f:
                    e1:fb:8d:3e:fd:1a:30:8e:7e:22:7c:49:e8:3b:d5:
                    6f:13:e9:7f:65:de:33:37:5a:02:c0:6f:d1:06:41:
                    28:52:5b:b8:c1:43:5d:63:85:92:d3:84:f5:5b:c1:
                    f5:f8:30:71:02:f9:27:23:65:ae:54:d5:57:84:fe:
                    8f:3f:31:db:4f:8e:67:7b:da:f4:1f:3a:17:6c:87:
                    65:9a:72:6d:19:5c:36:19:67:a7:e3:f6:f8:9b:ea:
                    84:a3:d3:30:fc:21:88:1d:cb:c8:fe:46:0c:4c:d2:
                    d2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.100.0/22
                IPv6:
                  2804:60a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269182

    Signature Algorithm: sha256WithRSAEncryption
         1f:59:b1:c3:6d:fd:e6:a2:49:26:0f:d8:04:fb:76:ac:83:55:
         3c:09:21:4c:ea:15:ec:d0:49:40:be:a8:88:51:e7:68:df:9d:
         d7:6f:25:ee:7a:b2:01:7b:a9:e1:59:b5:a6:13:35:a0:ef:cf:
         2c:76:64:35:5c:8b:3b:aa:39:16:4e:ff:89:30:5e:f1:21:81:
         ca:91:70:f6:ef:ca:10:4d:e2:a4:7a:60:7a:6e:cc:73:b7:26:
         9c:8c:10:3c:44:f9:31:69:24:42:f5:79:7a:82:b5:e7:5e:46:
         04:70:00:e9:b6:b9:86:12:99:43:fa:1d:2d:7b:03:ec:5e:27:
         e0:a8:70:8f:76:b0:e4:51:e0:93:06:90:71:9d:83:10:0e:1b:
         ef:54:8c:fc:7e:cc:ff:73:0b:24:ac:26:e9:3c:21:54:fd:2c:
         03:d4:0e:c4:14:5e:63:76:a3:31:18:03:53:eb:05:54:5f:6a:
         f4:6d:bb:99:19:58:01:8f:e1:52:e7:af:19:13:0c:df:67:49:
         e3:e0:31:7e:d8:f4:eb:6c:4a:a3:1f:43:4c:2b:35:b2:50:19:
         ec:99:50:26:83:18:ec:63:0c:13:35:9f:98:d9:eb:68:17:d3:
         e5:66:4d:ea:c5:64:c5:52:ea:f7:a9:bc:24:d7:40:cd:c4:ff:
         0f:5d:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----