This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer
File:                     BA84972F94DED1627363CADBFA872D5EA75BBC41.cer (raw, json)
Hash identifier:          BRHrEhjJKstq42bZuy+rvi4vgIyOA1XL4Y04Eb/kD6s=
Subject key identifier:   BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       263A4A5E718D82D16B80E7DCAD4301F60F89777A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft
caRepository:             rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Dec 2025 11:05:03 +0000
Certificate not after:    Tue 08 Dec 2026 11:10:03 +0000
Subordinate resources:    AS: 267533
                          IP: 2804:42e0::/32
Validation:               Failed, certificate revoked on Tue 09 Dec 2025 11:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3a:4a:5e:71:8d:82:d1:6b:80:e7:dc:ad:43:01:f6:0f:89:77:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  9 11:05:03 2025 GMT
            Not After : Dec  8 11:10:03 2026 GMT
        Subject: CN=BA84972F94DED1627363CADBFA872D5EA75BBC41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6c:85:55:11:13:27:45:dd:bc:36:63:b8:79:
                    e3:a0:40:f6:bc:75:ae:a2:90:be:39:ba:fd:9e:85:
                    34:66:23:6f:0a:ab:84:50:04:29:76:38:c1:86:ec:
                    2d:e6:35:d1:f9:f9:12:a1:69:6d:61:90:25:9a:99:
                    e4:40:db:ce:9c:d0:1f:4a:07:a8:3f:37:e5:81:03:
                    a7:36:2f:95:d4:3c:68:6c:e6:c4:d1:7c:76:ea:69:
                    df:cd:cd:db:18:ec:77:a0:8e:14:84:39:aa:7e:21:
                    45:a3:16:79:f5:10:4a:b6:cb:40:e0:0c:e5:55:27:
                    45:3b:ba:05:09:e3:03:fc:e6:e5:c5:ec:0d:b7:f9:
                    94:1a:6a:ad:b5:6b:45:be:3f:d7:d5:74:43:e4:50:
                    0a:b6:44:5a:4d:51:3c:c0:b9:98:f8:f4:f3:c0:0e:
                    0a:82:f7:a5:e5:d1:f4:f1:77:32:fb:b6:db:c9:f5:
                    28:53:09:43:1f:bf:77:8d:3e:99:6c:5e:5b:c4:62:
                    7b:e2:87:a8:78:df:45:5e:cc:92:77:c7:18:d7:19:
                    88:0c:bd:d9:7f:06:7c:eb:2c:cf:87:95:14:9d:c8:
                    10:d3:5a:86:c9:a8:8c:bc:b4:61:09:e6:1e:cd:cf:
                    91:84:ac:27:96:82:36:28:5c:ca:f9:15:4d:a0:5a:
                    c5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267533

    Signature Algorithm: sha256WithRSAEncryption
         ca:13:4d:ca:9d:36:ba:09:19:d9:30:b7:8c:55:4c:2e:c0:59:
         6f:2b:25:63:7f:bd:38:55:c3:16:12:24:b6:0b:a6:96:8a:9e:
         01:d5:f5:3f:26:cb:b3:5d:90:2a:00:a5:5a:26:48:d1:69:85:
         64:b8:70:ba:76:88:56:47:51:e5:a9:55:d5:35:b2:46:94:23:
         70:c1:b0:f0:04:b3:13:c3:57:25:16:9f:71:be:4c:fe:fb:07:
         8f:22:ac:0e:23:67:55:5f:dc:3e:b9:a7:cf:25:10:cc:b7:af:
         9e:25:45:c3:d2:76:4b:1b:88:6a:49:e8:89:25:5b:5e:4f:09:
         ae:8d:5b:d8:fd:c2:ae:b0:e9:8a:ff:8e:d2:12:fc:df:b4:ef:
         15:94:c5:c7:ff:99:49:a0:8e:37:4a:03:41:a1:82:62:10:9d:
         78:95:34:fb:8b:6d:f5:38:2b:39:7b:9f:95:ce:13:34:09:f4:
         ad:7b:59:50:77:dd:8a:2d:e9:57:4e:5e:14:4d:fe:77:e5:38:
         7a:9f:f5:b1:11:cf:d0:4b:be:c8:62:7c:56:f9:f9:c5:49:65:
         bc:8c:72:01:01:af:c8:34:a2:f5:5c:f0:6d:19:d6:1c:0c:49:
         0e:be:12:b7:8b:54:6e:42:6a:5c:33:1a:0e:e2:5f:d3:0e:99:
         e0:3c:04:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----