This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A74D2AC2ED3DD4BC52C064FF59D34F413C2360E5.cer
File:                     A74D2AC2ED3DD4BC52C064FF59D34F413C2360E5.cer (raw, json)
Hash identifier:          wtBqnRF8ui5NkyhKKsDsF9VpIZhJ6v/yQq6cG/a3cBs=
Subject key identifier:   A7:4D:2A:C2:ED:3D:D4:BC:52:C0:64:FF:59:D3:4F:41:3C:23:60:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6D4AD06C06207B6C07675D2B1E669F8B250101AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/A74D2AC2ED3DD4BC52C064FF59D34F413C2360E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 May 2025 19:46:32 +0000
Certificate not after:    Wed 27 May 2026 19:51:32 +0000
Subordinate resources:    AS: 265244
                          IP: 168.0.36.0/22
                          IP: 2804:2ccc::/32
Validation:               Failed, certificate revoked on Thu 28 Aug 2025 00:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4a:d0:6c:06:20:7b:6c:07:67:5d:2b:1e:66:9f:8b:25:01:01:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 28 19:46:32 2025 GMT
            Not After : May 27 19:51:32 2026 GMT
        Subject: CN=A74D2AC2ED3DD4BC52C064FF59D34F413C2360E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e5:1c:47:64:23:bc:61:c7:d3:d7:69:25:65:
                    ad:57:17:d2:11:e5:82:88:9d:67:7b:78:33:c1:00:
                    bf:74:3c:2a:12:88:df:57:37:86:80:81:8d:d3:e2:
                    4c:29:93:3f:35:85:29:c3:77:14:bd:f5:56:ac:9c:
                    b7:87:3a:e1:7d:38:d4:30:3c:51:b9:37:d5:13:9b:
                    b4:27:02:2d:50:87:51:20:f8:0d:74:19:23:71:af:
                    8e:cb:11:bf:e5:e8:72:aa:da:82:ae:eb:d4:23:68:
                    90:13:e8:6c:77:a6:d9:91:11:72:7e:e4:33:1d:79:
                    e9:00:33:c8:d3:8f:e8:1e:7f:58:77:53:30:82:a5:
                    29:dc:35:a2:70:87:df:27:81:9f:6e:58:86:4a:c8:
                    8f:4e:86:b9:56:00:63:c0:08:05:b7:53:fe:29:a9:
                    e2:3c:33:5d:c3:64:86:a6:14:63:95:bf:08:58:a8:
                    7c:1c:08:e3:69:67:96:58:71:3f:14:f6:7e:ac:62:
                    b8:cf:7e:5b:eb:5b:a8:df:58:b5:7f:e8:54:7a:2a:
                    69:96:38:fd:8b:06:83:1d:f9:c1:55:7f:f6:34:01:
                    3d:7b:0a:7d:ac:3a:69:07:25:ad:7e:b2:e1:91:1a:
                    9b:f5:94:50:43:2c:f0:e9:25:ec:89:c5:b4:0b:63:
                    37:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:4D:2A:C2:ED:3D:D4:BC:52:C0:64:FF:59:D3:4F:41:3C:23:60:E5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/A74D2AC2ED3DD4BC52C064FF59D34F413C2360E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.36.0/22
                IPv6:
                  2804:2ccc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265244

    Signature Algorithm: sha256WithRSAEncryption
         d8:f7:a2:f5:09:dd:80:2b:7b:1d:23:99:c7:3f:41:d3:79:8a:
         79:84:98:4a:15:11:14:85:ce:b7:37:b0:a3:ee:fd:5e:56:4f:
         05:22:73:3c:bc:48:56:40:32:70:ec:59:03:cd:23:58:b9:11:
         3f:04:fe:c6:a9:72:49:9f:12:62:30:80:07:87:20:06:9f:73:
         54:7d:13:b6:17:09:a3:1d:cb:56:cf:b2:4f:f9:49:2e:58:35:
         f1:58:e5:0f:3f:91:27:b7:f9:e9:a5:c9:d7:d8:30:45:fa:0e:
         c3:ef:cf:db:56:49:7c:b8:43:b2:88:9d:9f:38:26:fb:5f:aa:
         0a:94:62:b1:20:e6:4a:f9:68:e2:af:2e:d4:27:c7:0a:2d:94:
         df:90:bf:1f:9c:86:7c:83:dd:ba:31:f4:33:85:ad:5e:97:04:
         36:43:61:13:f5:89:da:72:3e:19:15:b4:bc:43:58:2b:b2:b0:
         e7:e6:86:43:12:7f:f9:a3:c3:f9:d7:62:ea:18:6d:6e:b6:33:
         9f:f7:63:a1:77:71:22:39:15:b4:5a:b9:2d:86:a1:ce:c2:78:
         fb:4f:fe:d5:4e:8b:8e:f6:7a:2c:71:66:27:01:00:5d:e3:4f:
         00:b1:00:b9:c3:30:0b:9e:d3:b3:1f:de:49:93:08:59:c2:56:
         91:5d:ea:85
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUbUrQbAYge2wHZ10rHmafiyUBAawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA1MjgxOTQ2MzJaFw0yNjA1MjcxOTUxMzJaMDMxMTAvBgNV
BAMTKEE3NEQyQUMyRUQzREQ0QkM1MkMwNjRGRjU5RDM0RjQxM0MyMzYwRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5RxHZCO8YcfT12klZa1XF9IR
5YKInWd7eDPBAL90PCoSiN9XN4aAgY3T4kwpkz81hSnDdxS99VasnLeHOuF9ONQw
PFG5N9UTm7QnAi1Qh1Eg+A10GSNxr47LEb/l6HKq2oKu69QjaJAT6Gx3ptmREXJ+
5DMdeekAM8jTj+gef1h3UzCCpSncNaJwh98ngZ9uWIZKyI9OhrlWAGPACAW3U/4p
qeI8M13DZIamFGOVvwhYqHwcCONpZ5ZYcT8U9n6sYrjPflvrW6jfWLV/6FR6KmmW
OP2LBoMd+cFVf/Y0AT17Cn2sOmkHJa1+suGRGpv1lFBDLPDpJeyJxbQLYzeZAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSnTSrC7T3UvFLA
ZP9Z009BPCNg5TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmFi
dG03QVlVWXZ4Mmk5SktlTmNNU0NiR01WNkZaNDVpdXRXWGhERXUxSzcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jh
YnRtN0FZVVl2eDJpOUpLZU5jTVNDYkdNVjZGWjQ1aXV0V1hoREV1MUs3LzAvQTc0
RDJBQzJFRDNERDRCQzUyQzA2NEZGNTlEMzRGNDEzQzIzNjBFNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqAAkMA0EAgACMAcDBQAoBCzMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQMHDANBgkqhkiG9w0BAQsFAAOCAQEA2Pei9QndgCt7HSOZ
xz9B03mKeYSYShURFIXOtzewo+79XlZPBSJzPLxIVkAycOxZA80jWLkRPwT+xqly
SZ8SYjCAB4cgBp9zVH0TthcJox3LVs+yT/lJLlg18VjlDz+RJ7f56aXJ19gwRfoO
w+/P21ZJfLhDsoidnzgm+1+qCpRisSDmSvlo4q8u1CfHCi2U35C/H5yGfIPdujH0
M4WtXpcENkNhE/WJ2nI+GRW0vENYK7Kw5+aGQxJ/+aPD+ddi6hhtbrYzn/djoXdx
IjkVtFq5LYahzsJ4+0/+1U6LjvZ6LHFmJwEAXeNPALEAucMwC57Tsx/eSZMIWcJW
kV3qhQ==
-----END CERTIFICATE-----