This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9F5B32BE9F7543646FE3B721B8829DA6113552B5.cer
File:                     9F5B32BE9F7543646FE3B721B8829DA6113552B5.cer (raw, json)
Hash identifier:          UytAs3+/MRmJmLqvU2orolFgjMRvtMeEZDe/GcRuBwA=
Subject key identifier:   9F:5B:32:BE:9F:75:43:64:6F:E3:B7:21:B8:82:9D:A6:11:35:52:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F33455611865758E6572B9BB1F44C2A65D1D913
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/9F5B32BE9F7543646FE3B721B8829DA6113552B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 May 2025 09:53:40 +0000
Certificate not after:    Thu 14 May 2026 09:58:40 +0000
Subordinate resources:    AS: 267351
                          IP: 45.234.4.0/22
                          IP: 2804:4c20::/32
Validation:               Failed, certificate revoked on Mon 21 Jul 2025 16:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:33:45:56:11:86:57:58:e6:57:2b:9b:b1:f4:4c:2a:65:d1:d9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 15 09:53:40 2025 GMT
            Not After : May 14 09:58:40 2026 GMT
        Subject: CN=9F5B32BE9F7543646FE3B721B8829DA6113552B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3c:97:77:58:a2:2d:25:72:57:ee:5d:90:f1:
                    5a:09:26:1e:b0:05:63:bb:74:50:74:7e:01:78:a2:
                    3e:4b:46:04:37:5f:4d:9f:c1:51:81:dd:c5:43:b7:
                    61:b8:cf:8c:cb:00:f0:19:74:b3:b7:c9:b9:d5:6a:
                    a0:aa:cc:a2:c1:14:6b:d4:63:6b:07:66:27:33:cb:
                    f5:bd:f5:e4:1e:33:c0:fb:ef:3c:8e:c8:cd:a5:a3:
                    a6:ac:2b:ae:68:91:ac:57:6f:c4:4f:5b:c1:a7:bd:
                    ab:c6:90:16:ec:89:3e:2c:b8:a7:2f:dc:07:88:d0:
                    d2:4a:a9:02:ce:29:bf:56:ac:68:16:1b:27:d5:b8:
                    2e:0b:c8:2c:7f:e8:d8:c4:b3:09:21:4b:38:63:3c:
                    84:42:88:f3:d2:96:44:0c:cd:89:66:ce:94:93:46:
                    8f:b4:a0:8c:c9:c8:91:d0:51:7d:3b:48:fb:3f:c1:
                    95:6b:b2:95:9b:1e:12:ed:75:d5:0a:89:eb:26:55:
                    a5:50:10:84:d5:8b:fe:66:a2:d4:7b:80:54:2b:b5:
                    d8:a6:29:76:b3:9d:9e:c9:bf:5e:05:13:bf:11:a1:
                    32:ac:9d:8b:f7:7d:a2:d0:37:b8:87:96:f1:d2:74:
                    f6:da:1e:28:40:47:a4:d2:b4:d5:4a:78:b3:f1:42:
                    2a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:5B:32:BE:9F:75:43:64:6F:E3:B7:21:B8:82:9D:A6:11:35:52:B5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/9F5B32BE9F7543646FE3B721B8829DA6113552B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.4.0/22
                IPv6:
                  2804:4c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267351

    Signature Algorithm: sha256WithRSAEncryption
         74:74:2b:b9:c5:d6:ca:dd:9e:5b:24:94:24:44:cf:54:d6:0e:
         f0:c7:0f:af:06:28:8f:6a:30:75:fb:48:07:bb:6d:99:73:d7:
         dc:94:e6:09:a3:47:8e:41:c0:cc:7b:f1:c9:df:06:84:2c:0a:
         56:02:83:8e:61:19:00:31:4a:3d:56:53:cd:7c:7c:cb:46:1e:
         84:b4:96:0f:7a:6a:c9:75:ab:89:65:9d:6a:7b:cc:13:1e:dc:
         ec:4b:c6:89:fb:50:ef:75:f2:f4:4c:a5:e9:47:21:8f:91:ad:
         c5:46:11:d7:99:1b:ce:f6:65:8e:ca:ae:22:9e:f6:a3:70:40:
         9c:93:6c:3e:97:2f:b6:ce:f7:17:7e:68:aa:b7:6c:38:45:39:
         3e:d2:3f:14:c9:79:ce:44:4a:8a:6c:8f:1a:1b:2b:e0:6a:e4:
         f6:28:50:29:d8:0d:37:84:7b:71:11:72:86:0c:80:0e:0b:f2:
         2a:c7:aa:54:3c:60:18:e2:78:af:7d:23:b2:8e:80:00:24:99:
         44:2b:4c:33:e0:43:8f:93:92:30:b6:42:89:1d:72:cf:bc:6f:
         32:e4:ae:21:d7:7d:0f:6a:63:99:f2:5d:3a:08:39:a1:a1:7d:
         2e:0a:8b:fa:78:a1:ff:f2:23:c3:55:d2:da:b4:a8:4d:52:51:
         f1:35:02:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----