This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A940AAD948DF51968F2CFC007E5775994F255968.cer
File:                     A940AAD948DF51968F2CFC007E5775994F255968.cer (raw, json)
Hash identifier:          k3n4UnGpfw35XXsyx9gtpB8swigsGwVnmbpEGqbsr6M=
Subject key identifier:   A9:40:AA:D9:48:DF:51:96:8F:2C:FC:00:7E:57:75:99:4F:25:59:68
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7D369BF13A2C66ABCB193619CA634A4D8F52AE0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/1/A940AAD948DF51968F2CFC007E5775994F255968.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 02:04:44 +0000
Certificate not after:    Fri 06 Mar 2026 02:09:44 +0000
Subordinate resources:    AS: 266402
                          IP: 170.81.104.0/22
                          IP: 2804:374c::/32
Validation:               Failed, certificate revoked on Wed 15 Oct 2025 22:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:36:9b:f1:3a:2c:66:ab:cb:19:36:19:ca:63:4a:4d:8f:52:ae:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 02:04:44 2025 GMT
            Not After : Mar  6 02:09:44 2026 GMT
        Subject: CN=A940AAD948DF51968F2CFC007E5775994F255968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c6:9e:ae:c3:79:98:1b:ee:ee:73:34:2e:4c:
                    df:eb:f3:3a:e8:ad:61:cd:2e:c4:6f:0b:cd:77:3e:
                    a4:b6:b0:4c:8d:da:23:53:24:72:93:33:cb:f3:f8:
                    03:61:55:41:fc:fa:51:2a:8a:8b:6c:7e:c3:29:07:
                    f9:f9:6d:17:8c:16:44:72:c5:9a:b0:13:ab:eb:d4:
                    81:72:87:fa:5c:e6:99:cc:37:33:9d:6b:c9:b5:55:
                    ce:90:17:8d:2f:be:f4:d2:03:26:91:e1:05:e3:b5:
                    b8:db:50:8d:85:82:36:f4:ac:7c:6c:4d:c9:78:fa:
                    e2:e2:43:78:40:db:d5:18:d6:60:fe:e0:8b:da:f7:
                    58:9e:dc:82:bf:2f:80:ef:00:1e:91:1d:c4:13:fd:
                    43:14:0e:73:d0:76:e3:54:77:f7:2e:29:ab:78:4d:
                    b8:13:e5:7d:3f:bc:1c:f9:37:ec:91:1d:bc:a1:0e:
                    30:81:55:1c:a0:d7:3f:2b:20:55:93:71:b7:50:62:
                    90:18:7b:47:fe:d6:79:73:0b:f4:88:db:9e:66:63:
                    60:e9:38:33:86:c4:c8:ff:6f:fd:f1:6f:59:34:1c:
                    7e:c7:e9:ae:34:78:7a:75:85:3d:fa:b3:81:55:fd:
                    e1:95:f6:20:d9:e4:57:74:ff:66:df:a0:be:cd:0b:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:40:AA:D9:48:DF:51:96:8F:2C:FC:00:7E:57:75:99:4F:25:59:68
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/1/A940AAD948DF51968F2CFC007E5775994F255968.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.104.0/22
                IPv6:
                  2804:374c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266402

    Signature Algorithm: sha256WithRSAEncryption
         58:86:86:c4:16:f6:8e:39:e3:2d:c4:58:65:20:57:5c:45:d0:
         5f:ec:03:9d:7d:12:e3:b3:7b:31:6a:dc:33:f9:ee:ba:5b:54:
         59:29:e6:ed:0b:1e:1f:34:18:31:00:19:82:b4:37:f5:37:c6:
         f3:73:3c:56:65:38:71:4e:7e:66:72:53:be:37:37:ea:91:79:
         f9:dd:0a:4a:08:de:89:36:d5:0f:66:c0:50:c1:9c:67:1f:16:
         ab:b6:b9:b5:e2:a8:61:18:8d:1a:96:e6:8e:70:44:7f:ee:c2:
         2d:b9:e2:76:7b:9b:8d:23:39:80:1d:98:98:8f:e1:39:c5:23:
         e5:c3:1b:8b:6c:74:d5:c9:1b:69:3f:ca:c5:27:6d:25:b9:ac:
         18:43:34:6e:88:c9:92:72:4d:08:21:ac:ce:56:82:59:f3:b2:
         45:b6:df:68:7d:0c:5f:a5:b2:57:f2:77:13:2f:ea:0e:d6:53:
         aa:4c:64:a3:77:6b:39:03:9a:07:97:0a:ba:62:d6:45:33:2a:
         cc:b8:d3:b1:93:f6:3c:9e:f3:60:f9:86:17:67:74:32:2e:21:
         03:1e:a7:e9:f6:5f:e3:35:4c:c9:bd:bb:24:6e:39:37:a8:70:
         01:0b:11:af:79:1f:47:6c:6c:97:82:64:b4:39:b4:ac:e6:78:
         42:c5:5f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----