This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/933D25103B9996B3949AF7607EDF6BC993402B70.cer
File:                     933D25103B9996B3949AF7607EDF6BC993402B70.cer (raw, json)
Hash identifier:          uoY3j+sMItaXKFeYUNqYyDnUn+sxwMfIf5v8m2GkzTk=
Subject key identifier:   93:3D:25:10:3B:99:96:B3:94:9A:F7:60:7E:DF:6B:C9:93:40:2B:70
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       384EDB3FDCB868F3EA604532770EC5FF77FB9748
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/933D25103B9996B3949AF7607EDF6BC993402B70.mft
caRepository:             rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 21:24:06 +0000
Certificate not after:    Thu 05 Mar 2026 21:29:06 +0000
Subordinate resources:    AS: 270511
                          IP: 187.49.180.0/22
                          IP: 2804:6d14::/32
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 20:54:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4e:db:3f:dc:b8:68:f3:ea:60:45:32:77:0e:c5:ff:77:fb:97:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 21:24:06 2025 GMT
            Not After : Mar  5 21:29:06 2026 GMT
        Subject: CN=933D25103B9996B3949AF7607EDF6BC993402B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:7d:4b:ea:90:7a:cd:5c:ce:a1:93:2e:6b:
                    27:7e:17:ac:b2:2b:92:ed:c7:d4:a8:66:79:2a:81:
                    44:fd:44:44:d7:93:4a:17:19:be:f4:2a:c5:af:b4:
                    b1:ab:90:36:d3:5f:b7:f5:b3:b0:73:19:2d:eb:cf:
                    b5:6b:ab:37:43:b1:74:ab:eb:dd:44:e0:7d:25:2e:
                    f9:12:52:1b:41:98:f4:01:2e:bf:ce:97:9d:c6:10:
                    ce:f4:a5:42:9a:dc:8a:f9:7b:c6:00:72:4c:a5:f3:
                    a9:13:1b:34:16:e8:df:e9:39:59:9c:31:5f:bd:2b:
                    49:53:80:48:9e:ec:04:ba:6a:c3:7b:2f:ae:1a:65:
                    6a:7d:9f:72:79:b2:e8:a1:05:37:bc:a0:9a:30:11:
                    1a:39:2f:01:3f:9f:1d:21:9e:77:a1:4a:ac:af:16:
                    ae:5a:07:d0:09:b6:fe:49:f9:a9:14:3c:6f:79:b4:
                    52:ad:86:5e:1b:5e:4e:a2:40:7a:e6:45:67:44:fe:
                    a1:0e:de:69:b2:53:8b:55:a6:66:a9:6a:33:90:17:
                    3b:34:2a:5e:d4:55:f0:1a:8c:ef:94:af:47:d6:ca:
                    14:f5:58:94:86:5f:a6:23:47:a2:dc:92:dc:9e:9c:
                    43:a3:be:52:05:49:34:35:e0:90:c7:55:b9:8b:34:
                    be:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:3D:25:10:3B:99:96:B3:94:9A:F7:60:7E:DF:6B:C9:93:40:2B:70
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/933D25103B9996B3949AF7607EDF6BC993402B70.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.180.0/22
                IPv6:
                  2804:6d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270511

    Signature Algorithm: sha256WithRSAEncryption
         5f:8f:59:03:bf:0b:86:2a:6b:99:04:00:51:cd:51:91:b7:3e:
         10:3d:48:9d:ee:8c:e6:8b:8c:68:ce:3f:78:bb:6c:90:46:59:
         2e:ec:f0:00:76:bc:58:55:60:a8:c4:a6:4a:1f:e6:d4:4d:ee:
         2e:31:40:f8:04:59:c4:13:4a:de:80:7f:c6:67:a0:8e:eb:d0:
         34:2f:07:b6:28:be:57:59:1c:18:63:07:78:fc:61:54:97:40:
         40:56:13:15:6d:48:b1:f2:04:2d:24:07:ad:f1:fb:6f:bb:95:
         04:1f:73:2e:7e:31:bf:5c:ec:3c:09:a5:3c:ea:93:b5:13:dc:
         d0:9f:73:a4:48:b5:2c:27:9a:f9:f0:75:1d:f6:69:43:2e:4a:
         eb:9d:c6:4c:de:17:21:39:49:7b:df:7a:35:18:54:60:09:4e:
         96:1e:1b:d0:6b:35:bd:fa:77:56:21:d3:90:7e:f6:54:7e:30:
         26:d9:83:76:62:4e:26:3b:fe:2b:34:03:b0:7c:fd:43:cd:3f:
         7d:85:61:13:f0:f1:61:7a:0f:c5:3f:57:6f:7f:96:99:38:2d:
         89:b8:1f:07:75:47:c9:81:0d:35:e6:8f:74:6a:00:19:13:41:
         0b:2a:d9:66:39:72:8e:9a:5f:75:6b:bd:64:13:02:5a:3e:1f:
         66:65:a4:52
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUOE7bP9y4aPPqYEUydw7F/3f7l0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYyMTI0MDZaFw0yNjAzMDUyMTI5MDZaMDMxMTAvBgNV
BAMTKDkzM0QyNTEwM0I5OTk2QjM5NDlBRjc2MDdFREY2QkM5OTM0MDJCNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsEn1L6pB6zVzOoZMuayd+F6yy
K5Ltx9SoZnkqgUT9RETXk0oXGb70KsWvtLGrkDbTX7f1s7BzGS3rz7VrqzdDsXSr
691E4H0lLvkSUhtBmPQBLr/Ol53GEM70pUKa3Ir5e8YAckyl86kTGzQW6N/pOVmc
MV+9K0lTgEie7AS6asN7L64aZWp9n3J5suihBTe8oJowERo5LwE/nx0hnnehSqyv
Fq5aB9AJtv5J+akUPG95tFKthl4bXk6iQHrmRWdE/qEO3mmyU4tVpmapajOQFzs0
Kl7UVfAajO+Ur0fWyhT1WJSGX6YjR6LcktyenEOjvlIFSTQ14JDHVbmLNL7XAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSTPSUQO5mWs5Sa
92B+32vJk0ArcDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTZS
ZFh4RDlRWHdYV2VocmNoTHNMeVR6QWhMdTRSU3FXdlE2RnJLZXFhQlUvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTZS
ZFh4RDlRWHdYV2VocmNoTHNMeVR6QWhMdTRSU3FXdlE2RnJLZXFhQlUvMS85MzNE
MjUxMDNCOTk5NkIzOTQ5QUY3NjA3RURGNkJDOTkzNDAyQjcwLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAK7MbQwDQQCAAIwBwMFACgEbRQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBCCvMA0GCSqGSIb3DQEBCwUAA4IBAQBfj1kDvwuGKmuZBABR
zVGRtz4QPUid7ozmi4xozj94u2yQRlku7PAAdrxYVWCoxKZKH+bUTe4uMUD4BFnE
E0regH/GZ6CO69A0Lwe2KL5XWRwYYwd4/GFUl0BAVhMVbUix8gQtJAet8ftvu5UE
H3MufjG/XOw8CaU86pO1E9zQn3OkSLUsJ5r58HUd9mlDLkrrncZM3hchOUl733o1
GFRgCU6WHhvQazW9+ndWIdOQfvZUfjAm2YN2Yk4mO/4rNAOwfP1DzT99hWET8PFh
eg/FP1dvf5aZOC2JuB8HdUfJgQ015o90agAZE0ELKtlmOXKOml91a71kEwJaPh9m
ZaRS
-----END CERTIFICATE-----