This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C4A6466D9315F022152B2A75EF0E4E3680F9593C.cer
File:                     C4A6466D9315F022152B2A75EF0E4E3680F9593C.cer (raw, json)
Hash identifier:          dbb4lifpPvxsa4zy98ynaCZvLvAa8bC60CwRXzgX3fg=
Subject key identifier:   C4:A6:46:6D:93:15:F0:22:15:2B:2A:75:EF:0E:4E:36:80:F9:59:3C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6524C747EB8F4FFF0B97A9F77DBAEF223264750D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C4A6466D9315F022152B2A75EF0E4E3680F9593C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Apr 2025 18:57:41 +0000
Certificate not after:    Wed 29 Apr 2026 19:02:41 +0000
Subordinate resources:    AS: 268711
                          IP: 45.171.124.0/22
                          IP: 2804:5994::/32
Validation:               Failed, certificate revoked on Fri 04 Jul 2025 09:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:24:c7:47:eb:8f:4f:ff:0b:97:a9:f7:7d:ba:ef:22:32:64:75:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 18:57:41 2025 GMT
            Not After : Apr 29 19:02:41 2026 GMT
        Subject: CN=C4A6466D9315F022152B2A75EF0E4E3680F9593C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:33:7b:a4:cf:bc:f9:ce:8b:49:ff:4a:a6:
                    dd:1d:b8:9d:e8:25:44:e9:d0:22:6f:b6:6d:e4:5a:
                    82:cc:96:43:ad:5e:4d:4d:b5:21:cc:6b:bc:24:3e:
                    8b:f3:d2:fd:b7:41:02:29:7e:7e:c3:d9:b7:c3:6e:
                    29:c9:1e:c1:f2:ae:29:55:7a:d4:b5:7d:37:79:6b:
                    33:af:72:58:58:48:55:ff:0d:df:e2:0e:d1:07:04:
                    40:7b:ea:ae:5f:0b:80:a2:07:55:2c:d7:a9:bb:f5:
                    14:b6:b4:8b:a6:91:24:7c:f7:d9:1e:c1:c4:cc:ca:
                    18:d1:8a:b5:d7:2d:66:61:3c:c0:30:8d:cc:fb:47:
                    08:15:b5:ad:bc:25:fb:d3:0e:1c:d8:0f:18:dc:1e:
                    5e:7d:18:3f:45:af:70:32:6c:ba:9d:4d:a0:7a:39:
                    10:69:b9:9c:65:8c:36:fd:1a:2c:a7:5f:46:4b:6d:
                    69:f4:95:64:c9:a1:93:6d:8b:5d:e0:89:bb:cb:d4:
                    bf:4b:a2:18:51:a1:a7:1b:76:18:74:4a:42:d3:fe:
                    3d:1d:6a:b6:92:37:4a:45:1b:87:be:77:5f:12:52:
                    14:53:fc:f1:83:48:1b:b5:4b:27:8b:d4:e3:e9:40:
                    99:08:f0:57:bb:f5:81:a5:28:eb:0d:25:63:7f:9a:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:A6:46:6D:93:15:F0:22:15:2B:2A:75:EF:0E:4E:36:80:F9:59:3C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C4A6466D9315F022152B2A75EF0E4E3680F9593C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.124.0/22
                IPv6:
                  2804:5994::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268711

    Signature Algorithm: sha256WithRSAEncryption
         17:15:b1:f4:77:91:17:4a:7a:c8:d0:5d:c2:8b:a6:d6:d3:b2:
         ad:6e:72:56:dd:64:38:82:ea:b9:34:29:00:85:f7:7f:31:ca:
         27:04:a4:e4:62:25:a4:0f:e6:37:77:ac:58:d2:40:95:78:fe:
         0c:88:a3:be:75:21:84:9e:cf:59:54:c6:0a:15:f9:56:aa:e6:
         db:05:3c:b8:a3:1d:2e:05:c8:93:29:ed:c5:d5:69:0f:70:bc:
         f1:7c:bb:30:b2:b5:8a:d9:9a:06:76:aa:73:9c:98:59:69:7a:
         da:12:7e:39:a5:41:84:59:e0:d5:5e:66:d4:21:56:8f:87:11:
         59:84:a5:d7:f5:fd:3a:02:f9:69:53:03:04:d5:90:16:c7:b6:
         12:36:88:e7:4e:f7:b0:de:e9:b3:94:62:4f:60:0d:13:b2:c9:
         55:75:bf:32:82:c7:08:be:29:9c:0c:22:44:9f:02:22:f3:6c:
         41:8d:22:17:28:9b:2d:db:85:cf:07:5f:b2:a4:81:b4:7b:af:
         99:86:e9:1d:4a:4e:39:0f:d2:be:85:9c:50:7d:0f:bb:f3:42:
         63:b7:23:bc:a3:6f:02:55:00:7f:f8:60:1b:82:0e:15:78:92:
         90:e7:b6:53:50:b1:f3:66:41:5c:b0:03:1d:9c:3d:51:a6:51:
         69:68:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----