This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.cer
File:                     A73D6D578C402A7DD8AED3B5544070906E2FE163.cer (raw, json)
Hash identifier:          zulVgznjjDAA0FvHda8zM8ISY2DqsOqSPUzIr5XZbE8=
Subject key identifier:   A7:3D:6D:57:8C:40:2A:7D:D8:AE:D3:B5:54:40:70:90:6E:2F:E1:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1390333C4C51659A180FE651B043A5AFE971ACAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 09:31:26 +0000
Certificate not after:    Thu 05 Mar 2026 09:36:26 +0000
Subordinate resources:    AS: 269092
                          IP: 45.179.168.0/22
                          IP: 2804:5f54::/32
Validation:               Failed, certificate revoked on Thu 30 Oct 2025 03:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:90:33:3c:4c:51:65:9a:18:0f:e6:51:b0:43:a5:af:e9:71:ac:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 09:31:26 2025 GMT
            Not After : Mar  5 09:36:26 2026 GMT
        Subject: CN=A73D6D578C402A7DD8AED3B5544070906E2FE163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:ef:3a:bd:8d:b3:12:88:b9:c3:41:55:d3:
                    17:8f:bf:ae:93:67:8b:ca:cb:a7:82:2a:6e:92:b7:
                    d8:12:f0:85:a9:2e:86:7b:46:05:7c:7e:11:fd:a7:
                    81:d9:46:54:9d:5b:4e:6f:ec:95:a5:eb:b7:ed:0f:
                    85:7b:7c:c5:4d:af:a9:78:15:68:6c:3c:1f:e4:a8:
                    8c:c2:30:a3:4b:a9:59:77:a4:5a:e1:2b:5b:70:aa:
                    78:22:8b:d6:1b:9c:e2:69:88:cb:52:82:ef:10:28:
                    c5:96:b4:b8:15:42:eb:ee:ba:fa:42:6b:7b:cf:04:
                    21:24:94:f3:f5:c7:78:96:c5:7e:7e:5e:6e:2a:63:
                    84:ac:b9:a1:fe:1f:b5:95:b1:e8:0e:7a:37:29:fb:
                    cd:c3:48:35:ae:ce:a5:79:6d:8e:d6:b2:90:b4:33:
                    02:8b:b9:18:2a:d9:74:eb:2e:80:18:35:2a:74:93:
                    84:ae:65:c9:c8:29:56:2d:d7:7f:8c:4f:97:93:40:
                    00:2f:a8:97:92:d4:e3:a1:e8:b9:03:01:71:35:8b:
                    49:63:04:63:d8:8d:82:ff:dd:25:5a:d4:f4:71:e1:
                    52:f9:e5:e4:1b:2c:60:c9:5b:45:bd:df:55:d9:c2:
                    9b:b8:84:cf:64:db:13:2d:c5:7d:12:98:94:94:e2:
                    8c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:3D:6D:57:8C:40:2A:7D:D8:AE:D3:B5:54:40:70:90:6E:2F:E1:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.168.0/22
                IPv6:
                  2804:5f54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269092

    Signature Algorithm: sha256WithRSAEncryption
         7f:89:b3:d0:3b:bd:01:b1:05:fe:f7:67:7b:cf:c6:51:5c:8f:
         01:78:c6:a5:cf:e7:67:c0:14:df:be:27:26:26:10:69:59:c4:
         63:73:f9:15:b7:70:28:3c:39:2c:df:5f:b6:d8:67:34:36:de:
         a7:60:36:b7:05:58:b8:cb:3d:df:65:9f:1e:13:2a:eb:f7:45:
         89:74:e5:0c:a9:a0:f4:ec:73:a2:a2:e4:0b:be:8b:90:7f:d3:
         2b:66:7e:f1:ac:5a:91:2e:2c:8e:0a:a6:ba:39:bf:0e:90:0a:
         a6:eb:4a:34:f8:1d:88:5e:b8:9a:a0:25:b3:f4:f2:a6:32:04:
         27:a3:39:45:67:76:d0:84:20:c3:27:b6:e7:fa:bf:4b:5d:c0:
         47:61:91:4b:ab:0f:c6:1b:e5:9e:23:93:d4:53:22:fd:7a:68:
         00:5e:85:cb:86:9a:10:c0:db:db:35:cb:9c:ae:31:74:1d:4a:
         09:4c:84:ae:0a:1c:17:8f:da:2b:0d:fe:2f:dd:77:a2:10:e0:
         79:0b:ae:bc:40:19:96:3c:0e:2b:19:5f:f6:8d:40:d3:f8:bd:
         86:89:49:d3:16:5e:a2:cf:a5:2d:6c:5d:63:c5:b5:bf:d2:19:
         74:6b:8e:50:27:a6:7f:2b:73:dc:7a:32:b2:bc:c6:5a:96:ab:
         8f:23:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----