This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BE7415AD0D46EBFDA548114CE90CBE13B2F27B9D.cer
File:                     BE7415AD0D46EBFDA548114CE90CBE13B2F27B9D.cer (raw, json)
Hash identifier:          MgreyNrSIFuOrbArhjRLn2l0pE+uyEayoir5D/cJilA=
Subject key identifier:   BE:74:15:AD:0D:46:EB:FD:A5:48:11:4C:E9:0C:BE:13:B2:F2:7B:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F0B66AB3D51C341E6C31EA2416AAF18B295A835
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/BE7415AD0D46EBFDA548114CE90CBE13B2F27B9D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Jun 2025 22:49:36 +0000
Certificate not after:    Thu 25 Jun 2026 22:54:36 +0000
Subordinate resources:    AS: 265256
                          IP: 168.0.156.0/22
                          IP: 2804:2d00::/32
Validation:               Failed, certificate revoked on Mon 21 Jul 2025 18:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0b:66:ab:3d:51:c3:41:e6:c3:1e:a2:41:6a:af:18:b2:95:a8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 26 22:49:36 2025 GMT
            Not After : Jun 25 22:54:36 2026 GMT
        Subject: CN=BE7415AD0D46EBFDA548114CE90CBE13B2F27B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9a:2c:b8:50:8a:83:1f:d8:15:33:74:ee:bb:
                    a0:7a:38:50:0c:3e:ab:58:1a:fa:07:1d:33:c2:9e:
                    af:1b:13:0f:02:11:c6:73:f7:64:29:ba:0a:04:70:
                    bc:55:27:4d:d0:47:54:b6:e5:51:5b:64:76:d7:36:
                    41:54:51:c3:6c:80:af:29:b6:75:8d:4f:d5:ea:62:
                    5f:26:41:38:55:3e:6a:4b:90:41:9f:cc:15:69:80:
                    e2:3e:f3:8a:5e:35:d9:98:bd:ec:7a:72:eb:33:c6:
                    18:41:6a:3f:ef:46:69:65:3b:96:38:a4:f8:92:ab:
                    a8:20:6a:5f:39:65:2b:ed:7b:ae:9c:17:81:29:17:
                    2d:1c:23:c0:c0:01:eb:f1:51:9a:13:84:98:02:4c:
                    46:22:1b:97:13:b4:88:a3:8a:83:ca:45:bf:03:6c:
                    85:bd:5d:c0:dc:82:d3:34:b6:c3:7a:b7:38:18:ba:
                    83:64:3b:bc:29:6f:e7:f5:c3:2f:0e:ee:f6:3c:41:
                    fd:87:60:ec:88:e6:c8:b4:98:37:d7:cb:ab:8e:c0:
                    d8:19:33:44:a9:56:66:5c:4f:3a:bb:18:65:bf:04:
                    e8:d5:67:81:13:ec:a6:b0:42:29:a5:31:16:44:3d:
                    43:bc:a2:57:7f:5b:fd:90:1f:33:d2:14:99:5d:c1:
                    d3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:74:15:AD:0D:46:EB:FD:A5:48:11:4C:E9:0C:BE:13:B2:F2:7B:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/BE7415AD0D46EBFDA548114CE90CBE13B2F27B9D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.156.0/22
                IPv6:
                  2804:2d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265256

    Signature Algorithm: sha256WithRSAEncryption
         11:49:76:21:34:65:6c:65:26:2c:34:a3:b5:c1:16:2f:5f:08:
         e5:47:45:4d:b4:06:0e:e2:f6:69:08:d0:9d:bf:7b:db:d6:ea:
         46:b3:6a:88:90:16:8b:1a:21:1c:c9:5b:d4:75:79:78:db:ba:
         ff:0c:c0:b4:7f:4c:fd:21:28:57:29:a8:64:b1:07:3c:aa:21:
         27:5e:60:a7:25:8c:35:ce:9d:31:dd:29:5f:e3:6a:30:fb:41:
         a2:57:9f:10:8d:94:2d:5a:24:f8:62:3e:82:2a:e3:99:5c:5f:
         fb:9d:47:65:e9:24:48:cd:be:9a:26:cd:86:38:99:92:fe:ed:
         65:a7:ca:99:5c:a4:d5:0e:d5:96:59:ce:22:6f:39:b4:f5:f6:
         df:26:ab:fd:48:c6:e4:a8:93:e9:8b:df:cc:ba:30:19:2e:a5:
         00:cc:dc:83:60:63:26:2c:d8:73:ec:21:96:f3:05:f0:49:42:
         37:24:94:a3:f7:fb:eb:a6:c7:db:de:f5:2f:13:4b:6d:e1:a9:
         cc:ec:bd:06:9a:24:19:40:d7:28:13:c1:49:66:f6:c1:21:0c:
         ca:aa:45:44:72:31:07:d1:23:65:b5:64:f2:c4:f9:75:bc:d1:
         04:15:9d:91:49:15:42:79:96:34:79:e0:e7:57:df:a0:78:c8:
         71:f8:4f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----