This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9F7BE7FF636315A2112430004A5ADD47912C1F17.cer
File:                     9F7BE7FF636315A2112430004A5ADD47912C1F17.cer (raw, json)
Hash identifier:          +I9BqjUbYpoJ7KWOih+xI5+xCUqU91lTZ7BW7I3jL/8=
Subject key identifier:   9F:7B:E7:FF:63:63:15:A2:11:24:30:00:4A:5A:DD:47:91:2C:1F:17
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       59F679958858669215C787A42AFCAD8252CEB4BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/1/9F7BE7FF636315A2112430004A5ADD47912C1F17.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 17:57:23 +0000
Certificate not after:    Thu 05 Mar 2026 18:02:23 +0000
Subordinate resources:    AS: 267237
                          IP: 45.231.252.0/22
                          IP: 2804:4a64::/32
Validation:               Failed, certificate revoked on Wed 15 Oct 2025 11:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f6:79:95:88:58:66:92:15:c7:87:a4:2a:fc:ad:82:52:ce:b4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 17:57:23 2025 GMT
            Not After : Mar  5 18:02:23 2026 GMT
        Subject: CN=9F7BE7FF636315A2112430004A5ADD47912C1F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:81:01:89:64:94:83:63:c5:59:a5:ec:a1:19:
                    b8:b8:97:40:1a:e9:23:5f:08:2c:c8:f1:78:49:5a:
                    43:18:0e:4f:64:fb:6b:85:de:92:21:fa:9c:d6:ac:
                    00:e0:4c:58:e8:be:49:65:27:da:f7:eb:da:9a:f1:
                    d4:e4:2e:3a:62:2b:b7:6e:06:05:c4:2b:ea:11:76:
                    b5:96:15:a8:4e:18:b5:e5:07:e7:90:45:61:d8:d7:
                    10:0a:02:24:d6:9e:d4:ec:66:f4:e0:88:08:76:a9:
                    11:33:50:a6:f0:88:c0:5b:9d:88:32:26:5c:47:bd:
                    5e:57:b4:c3:4c:65:fe:fe:b0:3a:15:b8:01:6a:35:
                    32:18:e8:86:f0:b9:7e:28:80:1f:a1:d4:ea:33:18:
                    3d:47:19:4a:0e:79:dc:0c:72:75:bc:7e:cb:de:29:
                    e5:73:ae:4b:35:cc:d4:5a:45:be:82:56:31:12:71:
                    7d:03:4f:72:04:38:86:67:28:0c:4a:de:13:3f:13:
                    64:5e:56:a3:98:e6:7d:53:7d:8f:a6:ee:9b:a6:37:
                    6a:aa:88:06:ec:21:b6:39:f0:ad:92:27:13:2a:6e:
                    ca:12:e4:c1:7f:36:93:03:44:8c:7f:7e:bf:ef:12:
                    44:4d:4e:cc:52:d9:d3:a5:3f:b3:29:f6:4f:25:95:
                    5c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:7B:E7:FF:63:63:15:A2:11:24:30:00:4A:5A:DD:47:91:2C:1F:17
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/1/9F7BE7FF636315A2112430004A5ADD47912C1F17.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.252.0/22
                IPv6:
                  2804:4a64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267237

    Signature Algorithm: sha256WithRSAEncryption
         8f:32:f5:a9:6b:97:eb:af:40:b2:e9:3a:41:3c:1f:e2:94:76:
         c6:f9:56:d1:cd:38:1f:90:3c:58:26:a9:b4:37:63:41:8c:0f:
         2f:c6:aa:83:de:1e:de:fb:34:2a:cd:0e:94:b9:d8:f2:94:ed:
         5c:04:98:6b:f4:50:e7:a3:39:da:68:33:53:97:ea:9e:92:1c:
         04:11:b3:9c:4a:39:9c:6f:98:83:7b:8b:09:b3:5a:37:48:fa:
         18:f0:a9:7f:21:6c:65:36:1c:7e:f4:ba:77:f7:56:3d:6f:4e:
         72:8c:c9:e6:56:2b:5c:13:3c:71:4e:44:ac:a1:fc:96:39:77:
         5f:04:3c:27:ed:2a:bb:e9:06:63:25:37:0a:92:af:9c:6b:d7:
         04:f5:6d:e7:05:84:6f:45:d5:c2:da:0b:9a:48:4b:01:07:b0:
         73:c2:25:35:38:ba:b1:6f:e0:9c:f8:f6:1b:ce:5c:3c:3f:f3:
         f6:87:52:db:80:e4:e9:cf:d8:4f:28:70:b4:af:3d:3f:fc:ce:
         c1:cc:a8:59:6b:94:b9:74:31:40:d9:f7:3a:8c:dd:63:91:64:
         7c:2a:8b:e4:ba:77:b7:f7:e6:cb:f0:6e:ab:55:5f:68:af:0f:
         fc:19:84:0a:e6:d5:b9:96:11:69:d8:7b:05:a3:61:79:75:e7:
         44:86:db:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----