This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CF89EDA5B266281791C7B4E6530567E41282E06E.cer
File:                     CF89EDA5B266281791C7B4E6530567E41282E06E.cer (raw, json)
Hash identifier:          bcPYrIshA2hmJQzG7WDMWX+FY/XPxqQeYxzMtdcpXmo=
Subject key identifier:   CF:89:ED:A5:B2:66:28:17:91:C7:B4:E6:53:05:67:E4:12:82:E0:6E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3FA1A8DB47865B24DA5F9C9A5167CFE28ADA65AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/CF89EDA5B266281791C7B4E6530567E41282E06E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Jun 2025 12:39:48 +0000
Certificate not after:    Fri 05 Jun 2026 12:44:48 +0000
Subordinate resources:    AS: 272724
                          IP: 177.55.92.0/23
                          IP: 2804:87a8::/32
Validation:               Failed, certificate revoked on Wed 20 Aug 2025 07:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a1:a8:db:47:86:5b:24:da:5f:9c:9a:51:67:cf:e2:8a:da:65:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  6 12:39:48 2025 GMT
            Not After : Jun  5 12:44:48 2026 GMT
        Subject: CN=CF89EDA5B266281791C7B4E6530567E41282E06E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:61:80:32:37:b6:2c:fa:bf:3e:c2:a0:85:
                    b6:7a:39:bf:e1:68:30:57:cf:0f:ee:55:aa:54:68:
                    cd:90:4c:0c:63:6c:80:9a:47:f0:0c:af:a2:1e:24:
                    39:ff:e5:fa:f0:d7:90:13:18:20:35:df:4d:6a:87:
                    02:be:2b:28:03:4d:05:ae:c6:b9:48:b4:00:73:46:
                    f0:18:4d:25:fd:38:2a:f2:4d:ac:13:7f:44:84:5b:
                    87:41:e6:9e:94:b1:c5:20:66:45:7a:ad:cb:69:5d:
                    48:43:f9:d1:39:11:b1:42:aa:22:00:98:de:b6:c0:
                    f8:30:45:de:72:11:c2:93:fb:e4:4d:15:8e:18:d0:
                    2b:52:b0:80:51:ee:dd:ef:0b:72:06:ec:d3:1f:a4:
                    1b:66:d5:86:e7:54:37:54:65:c9:af:43:7d:43:bd:
                    af:36:a0:73:bc:94:1b:fd:e9:39:dd:37:1c:63:94:
                    ac:0f:66:ab:86:36:ab:bc:17:18:97:2e:a0:f7:44:
                    a9:46:69:22:3d:a9:83:84:28:23:c9:8e:af:c6:a3:
                    7c:25:4b:db:8d:c2:61:4e:7f:a5:24:4d:61:d2:df:
                    1b:0e:90:bb:8b:0d:bd:d6:1b:7a:d9:49:fa:42:73:
                    c6:7f:25:fa:11:0f:67:7e:7c:1a:89:b8:d0:d6:9a:
                    e3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:89:ED:A5:B2:66:28:17:91:C7:B4:E6:53:05:67:E4:12:82:E0:6E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/CF89EDA5B266281791C7B4E6530567E41282E06E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.92.0/23
                IPv6:
                  2804:87a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272724

    Signature Algorithm: sha256WithRSAEncryption
         9b:3a:93:53:7d:e2:52:87:b0:88:ef:5f:9d:78:92:2e:09:88:
         d7:d6:04:9c:35:78:48:82:7d:05:79:fb:3b:cf:25:f6:fb:17:
         1b:c6:3a:fa:c8:e7:89:8d:9a:a7:a3:41:19:d6:86:5a:ee:8b:
         f2:a8:9a:f3:21:c6:f5:38:6b:12:00:b5:a9:2a:31:97:ee:cc:
         91:0c:b7:44:86:54:4a:a6:15:9f:07:e6:7c:d7:7d:58:38:68:
         82:b1:60:18:d8:f9:e8:8f:bc:74:2a:8c:eb:68:bc:5c:d4:87:
         d3:b3:15:df:d4:84:50:6c:72:89:e6:7d:4b:f5:be:c8:12:4e:
         93:e9:f9:c2:36:a2:4a:07:c6:3b:0b:68:fa:69:6f:d2:2e:d1:
         ab:a3:3b:77:e7:b4:cc:68:7b:17:f3:47:22:30:5b:05:18:15:
         7c:cf:71:8d:e9:a6:e1:e4:22:21:f9:bc:a6:bc:62:28:2d:92:
         0b:d2:7e:f8:c0:8e:3f:80:5a:d9:25:4a:6f:37:0f:48:ca:d8:
         8f:22:b2:f9:c2:e8:d2:14:72:2f:6f:76:e3:e3:a0:3f:df:dc:
         02:70:3a:f5:51:29:de:93:d8:21:f7:7b:a5:af:de:eb:76:d7:
         d7:ea:49:0d:8e:cf:f4:b1:19:3d:fc:72:4e:15:0a:d8:92:f7:
         63:ec:9f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----