This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D05CE4E09A56473D03EDB36445192000C8B77A5D.cer
File:                     D05CE4E09A56473D03EDB36445192000C8B77A5D.cer (raw, json)
Hash identifier:          x+j74FCfHsQuRkd0eZgd+J/29H2oOVOktrhIbgKm4+M=
Subject key identifier:   D0:5C:E4:E0:9A:56:47:3D:03:ED:B3:64:45:19:20:00:C8:B7:7A:5D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1F3398AEAAEBC1A0EC505DE8F80200014509D50F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/D05CE4E09A56473D03EDB36445192000C8B77A5D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Jul 2025 18:11:48 +0000
Certificate not after:    Mon 13 Jul 2026 18:16:48 +0000
Subordinate resources:    AS: 267662
                          IP: 45.224.164.0/22
                          IP: 2804:44f0::/32
Validation:               Failed, certificate revoked on Fri 10 Oct 2025 17:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:33:98:ae:aa:eb:c1:a0:ec:50:5d:e8:f8:02:00:01:45:09:d5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 14 18:11:48 2025 GMT
            Not After : Jul 13 18:16:48 2026 GMT
        Subject: CN=D05CE4E09A56473D03EDB36445192000C8B77A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8f:cf:7d:10:e6:f5:f6:53:66:9b:23:b0:a1:
                    24:93:46:51:87:7a:65:6c:ef:51:b4:d8:9d:9b:bb:
                    47:cd:f1:4a:f3:1b:e8:12:42:b4:58:65:9e:43:47:
                    20:0e:d6:40:58:cb:66:e7:16:e4:44:45:cf:15:cc:
                    dd:5b:38:67:02:3f:41:e0:80:15:6c:b9:b7:9e:e1:
                    f4:ce:bd:ec:c9:0b:69:b8:6f:d2:c0:2c:84:a7:ec:
                    72:8b:b5:28:5c:9c:fe:b8:56:58:a6:00:11:f2:e0:
                    27:43:74:0d:7c:5b:a1:df:72:07:75:94:96:aa:d1:
                    41:6b:8b:99:a3:ff:69:97:3a:fa:a7:af:54:28:d5:
                    ad:0b:f0:1f:08:5b:95:92:76:80:e7:5d:e3:87:4a:
                    89:c4:3c:68:1c:73:7a:01:4d:cb:01:1a:88:14:9c:
                    db:ed:66:9a:c9:6d:c1:4b:0e:58:d2:9a:52:19:c8:
                    87:8c:67:14:df:b6:4b:01:55:31:f2:2a:3f:55:06:
                    33:7b:b5:72:f7:70:09:aa:d9:14:2d:0c:32:8e:62:
                    a9:bc:a8:88:fe:3a:a0:b5:62:f0:65:d8:8c:c5:aa:
                    9e:fb:b9:6c:e7:b1:16:4c:22:ff:aa:42:00:ce:df:
                    22:fe:87:06:1d:8c:0f:ed:49:22:7e:54:28:b1:ae:
                    68:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:5C:E4:E0:9A:56:47:3D:03:ED:B3:64:45:19:20:00:C8:B7:7A:5D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/D05CE4E09A56473D03EDB36445192000C8B77A5D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.164.0/22
                IPv6:
                  2804:44f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267662

    Signature Algorithm: sha256WithRSAEncryption
         77:8b:b4:ac:c2:f3:ab:1c:61:55:96:ec:c1:28:a4:f4:b8:81:
         96:26:74:e1:72:d7:e9:d0:c3:bd:96:39:be:65:b1:22:8a:a3:
         3e:40:75:98:ef:7c:f2:8e:4d:18:7b:cd:41:73:54:4f:2f:f9:
         74:01:19:77:f2:1a:39:6a:2d:bd:a7:38:63:2e:bd:a2:5f:3e:
         52:12:be:19:e0:d5:35:df:a3:7c:89:fb:04:36:3c:17:94:b6:
         6a:fa:80:d6:0e:2f:07:c0:36:65:52:cf:17:8e:0e:76:c2:ad:
         82:61:cf:03:c2:21:fd:69:32:60:c4:c6:8c:28:eb:e7:0f:2c:
         6f:5c:07:25:40:53:b4:8b:ff:98:89:12:0e:9b:42:46:45:cb:
         5e:9d:97:65:bd:91:18:9f:7c:4b:37:c9:95:f6:63:09:24:57:
         66:bf:97:9c:66:5f:19:5e:53:26:9e:2a:a6:ff:13:76:eb:46:
         9b:b1:b6:6d:ed:2d:fe:e1:73:15:93:d8:e5:bd:a6:58:18:9a:
         e3:dd:6a:8a:a9:ad:3d:e4:1c:2b:b5:cf:65:e0:95:60:5d:53:
         94:da:d8:cc:a8:a3:bc:7b:64:c8:a9:74:aa:ad:78:01:ed:fa:
         f9:b1:02:8f:74:fd:b9:c8:d2:5d:08:60:70:a9:6d:cb:04:4f:
         16:27:dc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----