This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AE633FA2122EBFA2E7103FD806B66EA4E4C9831B.cer
File:                     AE633FA2122EBFA2E7103FD806B66EA4E4C9831B.cer (raw, json)
Hash identifier:          CtNs3+S6g103rEGZSjT04Wz322KZ8h8CvHDG3mtDrY0=
Subject key identifier:   AE:63:3F:A2:12:2E:BF:A2:E7:10:3F:D8:06:B6:6E:A4:E4:C9:83:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F745FC9ACF510FE9C1C098F2BD4ADA3E6DB389C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/AE633FA2122EBFA2E7103FD806B66EA4E4C9831B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Apr 2025 18:10:42 +0000
Certificate not after:    Mon 27 Apr 2026 18:15:42 +0000
Subordinate resources:    AS: 263256
                          IP: 170.247.200.0/22
                          IP: 198.58.8.0/22
                          IP: 2804:17e0::/32
Validation:               Failed, certificate revoked on Thu 15 May 2025 03:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:74:5f:c9:ac:f5:10:fe:9c:1c:09:8f:2b:d4:ad:a3:e6:db:38:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 28 18:10:42 2025 GMT
            Not After : Apr 27 18:15:42 2026 GMT
        Subject: CN=AE633FA2122EBFA2E7103FD806B66EA4E4C9831B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:b7:aa:81:fb:8a:3d:56:78:08:19:36:83:
                    7f:9e:31:6c:01:36:3a:31:bc:3f:59:5f:84:68:40:
                    32:d2:da:f0:0c:d2:2d:c5:2e:da:03:2d:35:bb:9d:
                    3f:51:e4:5c:21:88:09:65:9d:81:91:83:6e:21:86:
                    19:83:35:66:23:46:07:43:25:32:4f:b8:ec:54:9a:
                    25:b0:8a:67:87:b8:73:72:14:be:18:ea:45:b8:34:
                    e4:7b:03:e6:68:e2:80:5f:0f:4f:0e:bb:21:1a:b3:
                    7b:2b:e3:31:66:42:5e:08:88:4f:5f:f4:62:01:4a:
                    6d:49:fe:01:69:28:29:3e:1e:cc:9c:80:98:43:45:
                    ac:5b:c6:af:49:d9:9a:ab:fd:d1:6d:48:78:35:dd:
                    f1:14:a1:62:f8:41:86:8c:70:59:4c:17:6f:12:66:
                    d5:75:c0:18:18:ba:61:3c:94:c2:c8:0e:79:ab:b0:
                    0e:ee:7c:40:0a:56:fa:d2:c3:d8:b5:cf:12:cc:22:
                    0c:fc:a1:a9:e8:ad:83:5c:6e:90:62:7e:9a:f8:fe:
                    56:66:55:69:08:c7:32:ec:6d:b9:f6:2a:05:5a:23:
                    fc:cc:7d:4e:92:50:ba:75:20:03:8f:07:fa:8c:ed:
                    8d:26:82:4f:01:43:c5:d3:4c:8a:2c:8a:f0:47:0d:
                    b3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:63:3F:A2:12:2E:BF:A2:E7:10:3F:D8:06:B6:6E:A4:E4:C9:83:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/AE633FA2122EBFA2E7103FD806B66EA4E4C9831B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.200.0/22
                  198.58.8.0/22
                IPv6:
                  2804:17e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263256

    Signature Algorithm: sha256WithRSAEncryption
         40:c0:1e:28:46:19:7a:b0:a7:61:6c:fa:b5:78:a7:5e:1c:b1:
         50:b5:ad:3b:cc:84:a7:97:21:f8:37:fa:6f:3c:0d:45:ff:ab:
         1d:14:8a:e5:8d:9a:f6:04:09:92:b8:c5:35:ed:a5:f4:94:ac:
         b0:c4:95:98:87:49:ec:45:57:af:36:bc:e9:b6:79:d3:3a:c8:
         84:37:63:f4:2c:51:28:0d:7b:e2:60:d2:42:56:7c:97:b0:f8:
         27:ef:d7:c9:1b:3e:28:93:61:29:6c:96:08:b1:a8:a9:39:c3:
         04:ea:31:d3:72:64:9c:52:ee:c8:ec:93:cb:f1:a5:25:2f:35:
         73:a0:96:4a:d2:de:ce:61:8b:9b:2a:4d:ba:d9:2b:d2:8b:15:
         60:91:47:c5:d8:3a:1c:2f:47:e9:ec:a1:c1:5f:d4:45:ef:e5:
         d4:03:71:53:15:bc:48:46:2a:16:11:61:ea:02:47:4f:9b:ec:
         70:cd:57:b7:4e:e8:72:de:d9:d2:db:8c:d8:e2:06:62:85:5a:
         f2:76:be:db:2e:bb:99:3c:51:65:1d:ca:79:15:b5:09:09:d5:
         fc:46:59:b1:f4:15:68:5f:9d:82:3a:b3:1a:b7:02:7d:f9:c7:
         2f:2c:83:f3:24:a3:9f:76:06:b9:93:c5:e1:c8:cf:9e:41:38:
         e2:7c:c7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----