This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer
File:                     D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer (raw, json)
Hash identifier:          vSXDfhFyqCmoEdN/h+HRoIfua155wv2r9bdNqJFGvBc=
Subject key identifier:   D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18B68A5B6B3BFE1E08E06A479A0286CDEF767FC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Nov 2025 15:38:58 +0000
Certificate not after:    Fri 20 Nov 2026 15:43:58 +0000
Subordinate resources:    AS: 263468
                          IP: 131.255.96.0/22
                          IP: 177.73.60.0/22
                          IP: 2804:124c::/32
Validation:               Failed, certificate revoked on Mon 01 Dec 2025 13:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b6:8a:5b:6b:3b:fe:1e:08:e0:6a:47:9a:02:86:cd:ef:76:7f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 15:38:58 2025 GMT
            Not After : Nov 20 15:43:58 2026 GMT
        Subject: CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:21:c8:ce:84:d6:74:4c:99:fc:ba:1a:1f:
                    97:40:5b:36:1f:dd:4e:4f:f8:97:e7:c0:e9:c9:cb:
                    3c:63:88:c7:5e:dc:5d:4a:b9:5f:1b:05:d0:ff:dd:
                    09:8b:69:34:ff:07:62:c7:46:42:e4:b3:a7:0c:a3:
                    a7:93:a7:91:1a:c5:b7:e7:ed:6b:45:94:11:0a:7f:
                    94:5d:cc:a6:35:35:9a:cf:d0:2f:84:7c:53:7d:7c:
                    cd:30:5d:7e:79:4d:b0:09:39:8f:6b:82:35:06:fd:
                    fd:5d:0e:4c:7d:eb:c3:80:1a:ca:dc:d9:9f:9f:6a:
                    c5:ef:7e:42:93:eb:18:54:f9:53:7e:89:58:3e:44:
                    af:c9:ff:e5:00:c6:ac:1a:64:74:f9:98:ca:4c:11:
                    22:47:dc:d6:15:fd:b5:2f:6c:21:74:7f:dd:31:01:
                    73:33:2f:1f:14:80:0d:19:97:ce:81:10:5e:8e:33:
                    ef:34:77:74:f0:df:3b:f2:9e:53:34:9b:2f:f4:88:
                    72:84:18:de:8c:9e:37:bb:24:29:ba:4d:82:4f:7a:
                    7d:fb:95:4d:cc:c2:ce:6b:da:ed:35:18:a2:3b:3f:
                    f2:33:7e:49:8f:61:55:b1:0e:df:d2:96:f5:7a:92:
                    16:2b:e7:32:78:8e:9f:9d:3d:67:79:b6:87:b6:7a:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.96.0/22
                  177.73.60.0/22
                IPv6:
                  2804:124c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263468

    Signature Algorithm: sha256WithRSAEncryption
         49:3e:9e:28:a7:2f:e3:e0:4a:35:2a:99:44:1f:f1:6a:c5:91:
         93:a4:65:72:11:20:bd:9c:b8:10:51:61:95:03:3f:00:90:d2:
         09:2f:ca:0a:bf:a9:97:3c:0a:66:66:94:a9:57:ce:42:d0:bb:
         94:8b:70:7e:82:6a:5d:e0:97:ba:98:db:d0:ed:e0:5f:70:8a:
         09:a4:df:90:cd:3d:34:78:92:4c:92:a0:d7:7e:86:a6:d2:8e:
         20:da:8a:a0:88:87:bb:15:ba:6d:95:a6:1f:6c:8d:cd:6f:83:
         ac:e3:46:b3:bc:b2:1f:2c:19:c8:9f:87:f9:28:e0:78:85:86:
         89:22:2a:c6:9e:87:b3:d6:aa:48:c9:6a:5f:2e:d9:53:c2:26:
         79:15:b5:7f:fb:06:15:99:52:6f:06:94:e0:cb:65:94:b2:10:
         ae:28:1f:78:8a:ae:ad:0a:f6:b6:d0:80:1d:15:a9:bb:6d:c8:
         1d:5b:7e:15:34:11:7d:6f:e4:97:02:dd:35:5b:49:41:45:7a:
         a1:91:14:29:52:eb:82:fa:da:92:8c:8d:20:dc:6c:5c:1c:e6:
         5c:03:5c:a0:19:b4:71:a8:d0:c8:20:8f:ae:18:86:ce:48:14:
         e8:ed:35:0b:08:36:f3:df:20:76:7e:fd:79:78:29:9f:c9:6b:
         04:9d:a9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:25:12 2025 by rpki-client