This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
File:                     B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer (raw, json)
Hash identifier:          ns6FJR60PU/b8otm70Bd0k6GiHBThay6X8j/I53AyGU=
Subject key identifier:   B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       204FF3F4E2651EEA5CC4D07098B1D16B8D040A1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Oct 2025 05:06:02 +0000
Certificate not after:    Fri 23 Oct 2026 05:11:02 +0000
Subordinate resources:    AS: 266440
                          IP: 170.82.20.0/22
                          IP: 2804:37dc::/32
Validation:               Failed, certificate revoked on Mon 27 Oct 2025 14:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4f:f3:f4:e2:65:1e:ea:5c:c4:d0:70:98:b1:d1:6b:8d:04:0a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 24 05:06:02 2025 GMT
            Not After : Oct 23 05:11:02 2026 GMT
        Subject: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:85:30:08:49:6c:d4:ff:b6:e5:a0:78:58:
                    8c:27:b8:cb:af:88:73:d5:a4:02:b1:3a:f0:02:ac:
                    74:5f:c5:6b:0e:41:4b:3e:7c:7a:3c:d3:ef:20:bc:
                    10:e0:6c:72:41:f4:b7:44:e4:62:25:fe:bc:1b:32:
                    ef:f1:16:a0:80:d3:c9:69:d2:97:73:2d:5f:d6:12:
                    ea:70:19:c5:3a:78:4c:8a:fa:8b:e0:70:b4:5e:17:
                    33:d7:71:81:14:5c:e5:16:60:82:12:5e:8b:ff:0e:
                    f0:ea:42:e8:6f:ff:2d:ac:de:42:37:f0:22:6d:ff:
                    ea:1f:12:ca:8e:85:a5:34:21:89:6d:86:6b:55:46:
                    b9:b7:dc:6f:71:d4:f6:f7:5b:b2:24:78:83:2e:2a:
                    02:be:28:01:98:44:24:d5:8f:90:24:d7:4f:8a:a3:
                    9d:10:03:94:fe:21:0e:c0:5e:49:7d:08:6d:bd:02:
                    89:3a:7e:3d:cc:41:43:8f:09:69:cb:5a:a7:23:8a:
                    32:32:7d:65:46:0d:87:00:0f:51:49:88:77:3c:c3:
                    19:c2:63:68:35:df:e9:c0:cd:fb:54:cf:4d:f3:6e:
                    2f:82:9b:35:e8:7c:78:38:ea:a6:52:76:73:86:8e:
                    c2:04:7e:9d:8e:3d:b8:65:2f:d1:29:53:b3:43:c6:
                    66:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.20.0/22
                IPv6:
                  2804:37dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266440

    Signature Algorithm: sha256WithRSAEncryption
         1c:0b:ad:f3:b4:85:fb:34:50:84:3f:6f:7b:1e:11:05:86:34:
         f6:c2:c9:ee:6e:81:7a:e0:1a:4e:9b:3e:57:e8:01:b8:86:97:
         1c:f8:fb:61:9f:92:d0:92:ef:2a:94:c3:23:df:3e:59:94:15:
         ed:aa:26:76:7c:0e:91:98:a2:a9:1a:76:11:b9:81:f9:30:99:
         c8:f3:4b:d1:b7:6b:db:23:04:09:3b:f3:74:09:ad:38:4c:aa:
         5a:03:37:61:4c:f1:59:d4:d7:1b:68:c7:57:f2:47:ba:6b:8f:
         c9:4e:3b:32:f3:16:4f:f6:93:90:25:3c:56:e6:6b:6a:29:a1:
         88:f0:82:90:27:d8:6e:59:6b:3d:72:e2:b6:ac:d8:a9:c5:40:
         ab:8e:99:1c:ac:84:f0:c3:5c:ec:ac:64:0f:a8:d2:83:0c:42:
         22:9c:31:3b:23:c9:e8:6c:8b:4d:d8:05:48:07:ea:4c:4a:e5:
         95:3f:e2:bf:f8:b1:e1:5f:c7:55:57:83:d3:3b:ad:01:25:7b:
         d0:2c:a4:13:54:b7:0a:cb:10:d8:f8:3d:4d:45:8e:d0:e4:ae:
         9d:66:fb:2d:6e:2a:2f:9a:b0:58:fd:97:f4:51:94:ea:ae:92:
         dc:84:97:f9:67:e5:f6:e2:d6:55:c2:9d:b6:e7:6b:cd:c9:f6:
         71:6d:e6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----