This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.cer
File:                     A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.cer (raw, json)
Hash identifier:          bUAC/bT0vFVyapSlJwLT+V8e+buMCXxjXdzcu1Z+KDQ=
Subject key identifier:   A7:6D:0D:0E:B5:FB:05:C5:DC:C6:13:69:48:DD:8D:7B:CB:11:D6:DA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5C42502D86B92E79A71DC763BFA7145FB255C737
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 May 2025 14:18:06 +0000
Certificate not after:    Fri 29 May 2026 14:23:06 +0000
Subordinate resources:    AS: 272739
                          IP: 2804:87e8::/32
Validation:               Failed, certificate revoked on Wed 01 Oct 2025 04:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:42:50:2d:86:b9:2e:79:a7:1d:c7:63:bf:a7:14:5f:b2:55:c7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 30 14:18:06 2025 GMT
            Not After : May 29 14:23:06 2026 GMT
        Subject: CN=A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5a:15:2f:6b:86:c0:01:a5:ed:ce:a3:8c:ea:
                    6f:99:fa:5a:0c:e9:17:87:09:04:35:5c:cc:11:ae:
                    54:0a:82:cd:2e:d9:b3:db:4f:5c:51:10:00:cf:6b:
                    a4:64:65:74:78:d5:15:43:69:9c:d7:19:41:11:86:
                    e5:0a:40:98:6e:3b:28:9f:da:7a:7f:7c:bc:53:0c:
                    c4:bc:c2:bd:40:be:7b:e8:a9:09:c9:16:ad:c6:2a:
                    bb:62:62:be:13:ed:38:fc:96:f9:96:8e:6f:2e:f3:
                    27:40:a8:9d:a0:15:7a:51:5b:6b:f5:60:4a:d8:4c:
                    9b:de:ee:3a:82:d9:b6:23:f2:dc:1d:5d:87:2f:ce:
                    f6:a3:8c:c1:3e:09:3c:e5:f8:f6:0d:9f:fa:eb:91:
                    5a:98:f5:72:47:9a:ba:8f:0a:00:1c:de:2b:91:7d:
                    77:a0:69:a6:a9:d5:3f:51:a3:c6:93:21:dc:79:cd:
                    2e:82:da:1c:29:0b:ad:aa:5d:60:0e:24:00:ec:2e:
                    88:b9:1f:93:c9:27:d2:b4:d3:a9:fa:35:f5:41:d7:
                    67:2c:50:63:70:e2:09:ff:11:2b:be:4c:c5:39:ed:
                    55:98:f3:9d:74:19:c6:21:01:bd:0f:97:a9:d2:d1:
                    26:2e:06:bf:a6:99:f3:30:dd:b6:74:b3:13:c2:ee:
                    67:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:6D:0D:0E:B5:FB:05:C5:DC:C6:13:69:48:DD:8D:7B:CB:11:D6:DA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272739

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:8a:9e:70:93:39:d7:24:71:70:b1:42:9f:c0:dc:c9:1b:
         5c:4f:79:72:e6:72:b0:38:01:48:07:ea:b0:7a:c9:f3:37:03:
         53:3b:57:31:53:42:c7:f4:55:13:c0:f0:b4:ee:db:a2:07:f2:
         9c:20:40:cf:88:3e:4e:c4:6e:d9:39:a0:3c:5a:94:27:cc:5c:
         28:e8:8c:d9:a6:c3:9f:21:3c:22:a2:6a:d1:5f:ef:c3:a7:31:
         66:31:0e:ee:3f:35:7e:e6:8b:49:ac:e5:d1:92:e1:2c:4c:3b:
         8f:b0:c3:8e:cb:b6:a5:76:11:4d:13:d6:8e:22:e7:00:75:06:
         50:c0:d4:90:35:2b:be:66:e0:16:33:a2:65:89:f0:e4:99:05:
         78:c7:d5:40:27:b3:41:b2:72:ba:c5:06:56:07:16:7a:0d:a1:
         92:c1:3f:57:46:a5:f8:15:fd:8e:ff:b8:98:2c:e1:a9:65:1a:
         d5:e9:fb:95:db:54:a2:89:58:8a:0c:b5:06:75:71:11:f9:59:
         20:8e:12:2f:e4:92:1a:98:a5:2a:3b:15:d4:50:08:f7:dc:3d:
         d3:4a:af:28:3b:42:4c:68:3a:1f:0b:25:e6:a8:02:16:1d:17:
         3d:b2:cb:21:5b:29:a6:84:cd:83:bd:d2:e0:5d:5d:3a:1d:21:
         42:bb:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----