This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A055A2B3A35289307B404B8D8A7DC03C7B4605A4.cer
File:                     A055A2B3A35289307B404B8D8A7DC03C7B4605A4.cer (raw, json)
Hash identifier:          VmD60fSUQ24X9nNnGBgWnHs4Q1jTI+ytOzgGR6ZDyto=
Subject key identifier:   A0:55:A2:B3:A3:52:89:30:7B:40:4B:8D:8A:7D:C0:3C:7B:46:05:A4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       74E65BEF45AC41E6DFE5E525F526F38ACC0D75DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/A055A2B3A35289307B404B8D8A7DC03C7B4605A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Jun 2025 13:37:52 +0000
Certificate not after:    Mon 22 Jun 2026 13:42:52 +0000
Subordinate resources:    AS: 270320
                          IP: 190.83.4.0/22
                          IP: 2804:6a38::/32
Validation:               Failed, certificate revoked on Sun 29 Jun 2025 08:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e6:5b:ef:45:ac:41:e6:df:e5:e5:25:f5:26:f3:8a:cc:0d:75:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 23 13:37:52 2025 GMT
            Not After : Jun 22 13:42:52 2026 GMT
        Subject: CN=A055A2B3A35289307B404B8D8A7DC03C7B4605A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9a:9b:e5:09:6b:f6:b4:d7:55:40:31:e9:2c:
                    fe:62:b2:ca:0c:2f:6f:92:90:78:a6:56:fa:51:80:
                    b6:3d:0b:1e:6d:45:c4:97:59:e8:6a:f9:7b:66:fb:
                    f0:24:65:67:7f:47:2a:20:4c:fc:8b:69:f7:a4:85:
                    67:78:65:01:c1:a7:62:30:7d:5f:ec:a8:66:45:14:
                    be:b5:73:c2:b6:61:7d:8e:50:06:f9:25:60:2b:97:
                    fd:6b:cb:90:97:bd:89:6e:0b:fe:ac:ec:16:64:3c:
                    a6:c8:77:4a:f7:ab:2d:2e:cc:e3:c7:0a:89:4e:ef:
                    04:e0:6f:cf:27:9d:40:13:7c:1b:e6:02:a3:13:0b:
                    53:3b:97:e0:6c:d5:d9:e1:95:da:de:f7:f3:a2:dc:
                    a2:4d:c3:38:1c:7f:c3:e7:67:eb:72:4e:eb:53:f5:
                    8f:e4:3d:1a:72:2a:b4:ec:ff:0d:f2:30:75:55:c3:
                    44:a8:c5:3d:55:1b:d8:e7:22:97:4d:3d:86:83:ef:
                    b3:66:11:f8:ef:39:99:58:6c:7b:e8:42:de:17:40:
                    7e:72:fe:8b:d5:c0:2e:cc:6a:cd:d7:58:10:15:34:
                    9c:f0:15:1e:8a:7e:bf:6a:1e:9a:97:6a:1e:8d:da:
                    24:ac:68:7e:a3:a9:ce:d6:f1:d3:11:c8:36:e1:9c:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:55:A2:B3:A3:52:89:30:7B:40:4B:8D:8A:7D:C0:3C:7B:46:05:A4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/A055A2B3A35289307B404B8D8A7DC03C7B4605A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.4.0/22
                IPv6:
                  2804:6a38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270320

    Signature Algorithm: sha256WithRSAEncryption
         c2:92:4c:83:6e:b6:20:0b:dd:98:95:32:1c:f4:ce:02:ef:a1:
         59:6e:01:cf:a9:4b:6c:51:a9:31:69:7e:46:91:4a:51:3c:df:
         51:7b:60:4d:91:9f:f6:8c:6c:5f:05:78:3c:1a:11:30:48:19:
         84:05:c9:9d:1a:e6:17:2e:d5:19:26:00:79:e5:fe:45:06:ae:
         15:95:3c:dc:f9:b4:3f:42:13:27:da:5a:e4:4c:05:13:7d:a7:
         5e:00:90:5b:83:a4:53:45:65:24:be:de:af:79:47:19:fd:60:
         2e:28:90:9f:4f:ae:a4:ad:7d:79:3c:fc:58:91:4e:7d:0c:41:
         9d:c6:8d:b9:55:1f:b0:58:0b:da:23:1f:c5:0b:56:4a:10:73:
         a2:a5:1c:79:81:d2:f8:56:00:0f:9e:4a:b8:c3:c3:4c:91:dd:
         be:d6:34:e0:57:12:56:db:71:fc:43:1e:a6:a8:86:d4:b5:2f:
         79:68:91:2f:c5:8a:9c:c0:f0:ab:f6:c5:e6:5d:8b:b3:da:6d:
         60:1b:74:79:10:cc:a7:de:4f:13:b0:6a:43:06:d4:37:59:25:
         35:70:72:9a:b3:f4:bb:f5:be:65:32:65:26:32:68:35:38:d8:
         da:b6:05:75:81:68:43:36:09:05:35:3c:98:13:5c:62:fe:68:
         b7:b8:cc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----