This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer
File:                     9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer (raw, json)
Hash identifier:          5hWNU95BGCmpgeFayJfV+vhE3khJIamjexZSSeZM7MA=
Subject key identifier:   9A:3E:45:4B:6B:C1:DD:C0:42:2A:9E:4D:F4:D5:1A:58:7E:17:34:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       54F31770F5E94A786AFE15CC9B5AE182E9E16DAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 03 May 2025 17:30:45 +0000
Certificate not after:    Sat 02 May 2026 17:35:45 +0000
Subordinate resources:    AS: 52660
                          IP: 177.66.248.0/21
                          IP: 2804:c04::/32
Validation:               Failed, certificate revoked on Wed 10 Sep 2025 12:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f3:17:70:f5:e9:4a:78:6a:fe:15:cc:9b:5a:e1:82:e9:e1:6d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  3 17:30:45 2025 GMT
            Not After : May  2 17:35:45 2026 GMT
        Subject: CN=9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:5a:21:32:d3:7c:79:ca:4b:b5:5c:2c:46:
                    ff:da:ab:68:0b:0f:0f:27:a2:27:cd:43:b0:0e:08:
                    61:87:8e:ff:bd:c5:5a:e4:3c:4c:d2:79:bd:36:7e:
                    8c:62:c4:33:09:15:36:b0:2c:a9:ed:88:45:86:ed:
                    b2:66:06:ff:28:f3:6e:fc:d1:be:56:6e:b3:b5:29:
                    bf:b2:a7:54:72:f0:4b:65:82:6d:0c:c9:15:b9:c2:
                    8b:b1:c2:2c:83:3a:a8:6c:c1:40:dc:1d:cc:37:a6:
                    8d:35:5c:23:72:32:45:70:3c:9c:87:a3:4a:e2:d5:
                    5f:66:9f:e7:3f:9c:b3:55:16:81:f2:04:87:dd:40:
                    30:1d:2a:aa:66:c5:57:ce:a7:87:81:5d:3a:73:8f:
                    e5:0f:3c:01:30:2a:ac:d1:27:94:26:30:c8:a1:4d:
                    e3:52:07:a5:09:d2:c4:f4:f3:7f:cf:9e:76:e5:1b:
                    84:d0:41:b3:0a:5f:28:44:a5:e7:0e:2d:f2:6c:ec:
                    f0:e6:bb:2a:95:d6:f5:30:1d:0b:0c:78:cc:81:6b:
                    7b:36:5c:52:0a:e7:68:3d:ab:93:81:0f:ef:76:73:
                    cf:49:c0:55:7f:92:72:09:b9:a0:72:95:b2:b6:11:
                    ae:67:75:4b:b4:e0:7c:c9:4b:76:90:7a:7a:89:c5:
                    95:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:3E:45:4B:6B:C1:DD:C0:42:2A:9E:4D:F4:D5:1A:58:7E:17:34:1D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.248.0/21
                IPv6:
                  2804:c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52660

    Signature Algorithm: sha256WithRSAEncryption
         46:bd:f5:89:4c:0a:4a:d8:14:ab:66:e7:69:95:5f:d2:12:03:
         51:ba:41:24:20:59:ff:72:0e:ec:ac:ac:63:89:16:b2:f9:a0:
         94:87:7e:09:32:c1:c0:62:e7:f2:2f:51:11:f0:bd:d6:f5:8d:
         3a:6a:ff:42:3d:06:6e:bf:ac:78:e3:59:66:de:de:79:f8:e0:
         7f:24:a4:f4:f5:b6:78:23:6c:b7:08:d5:57:2f:11:8f:8f:b7:
         d5:ef:80:dc:5a:e0:d3:72:3a:e5:7b:3d:a0:04:ff:da:a2:68:
         da:28:a8:2b:18:0b:c5:41:50:a9:b7:3d:54:9b:13:b5:96:a4:
         04:14:6b:c5:e3:e3:2a:bf:c9:36:58:c9:af:f2:0b:6c:fe:53:
         4b:d6:90:e2:cb:5f:ab:5b:d8:60:d8:62:09:6a:62:60:47:75:
         ba:e7:be:0e:3d:8c:79:e3:3f:44:cc:d9:aa:ba:70:ea:57:a9:
         8e:9f:e4:67:04:13:df:5f:25:d1:e4:3b:14:7a:63:cc:b7:08:
         b8:17:1d:96:73:6e:74:04:55:04:1a:6a:7a:bc:65:89:3c:35:
         b7:4c:bd:09:3c:cf:68:75:fa:72:c6:9a:42:af:63:71:bb:99:
         61:47:f3:20:9e:11:33:c8:4a:fb:6d:37:38:99:a7:91:6c:c4:
         75:58:f4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----