This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer File: D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer (raw, json) Hash identifier: txGA5liEzswF5dZnHLYGXZdTREY7g1ysZXZkhuilz+s= Subject key identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 27308B2728E07F1AF4593B12E12BD4EFD7F46154 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.mft caRepository: rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 23:22:15 +0000 Certificate not after: Thu 05 Mar 2026 23:27:15 +0000 Subordinate resources: AS: 271641 IP: 200.194.188.0/22 IP: 2804:7eb0::/32 Validation: Failed, certificate revoked on Sun 21 Sep 2025 06:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:30:8b:27:28:e0:7f:1a:f4:59:3b:12:e1:2b:d4:ef:d7:f4:61:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 23:22:15 2025 GMT Not After : Mar 5 23:27:15 2026 GMT Subject: CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:f3:a0:cb:dd:17:53:85:aa:90:9f:d6:f5: 4a:b4:84:59:ff:11:62:54:a0:05:89:f9:ef:7d:06: 75:9a:0f:85:b6:80:73:ec:fb:18:55:03:24:98:88: 04:3a:a1:68:f9:90:4f:57:fd:1f:3f:f2:ad:7c:c6: c3:81:13:f8:5a:3b:0d:1d:07:bd:01:d6:38:4c:58: 30:5e:15:43:c6:6d:d2:32:0c:a9:f8:4b:fd:66:13: 8c:8f:2d:10:02:89:f1:8c:c5:19:e0:13:bc:4c:e6: ab:fd:49:31:db:21:c7:f2:9e:eb:a5:08:46:96:fe: 97:97:a6:8d:d5:f2:61:c3:59:58:30:36:ac:d0:45: 1a:2c:57:8b:ae:9a:11:da:38:8f:dc:bf:31:9f:f5: cf:25:01:e3:6c:44:7c:f9:e0:d0:cb:95:8f:8f:b2: 5d:f2:f5:8d:7b:cb:ea:2f:81:6e:53:68:e9:34:21: a8:e9:f9:fd:af:50:3b:10:4f:f0:c3:a9:99:4c:b4: 99:88:20:af:ad:3a:2d:9d:07:9b:80:76:25:17:c7: 6f:9d:99:ea:f7:54:0f:ab:77:5c:90:4c:ca:f1:7f: 59:04:4a:f7:51:d9:51:36:fa:86:fa:63:cc:61:bf: 20:d1:fa:ee:61:ed:b0:36:e8:12:bb:06:1f:90:47: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.194.188.0/22 IPv6: 2804:7eb0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271641 Signature Algorithm: sha256WithRSAEncryption 12:65:11:ba:08:34:bd:18:01:e6:dd:b4:28:d4:4c:7e:56:b9: 69:3f:84:80:b2:e0:0e:20:fc:d2:94:6a:9d:ae:df:17:bc:d1: 4a:ec:5a:bf:18:34:e0:c2:6b:a5:70:50:13:6e:f5:a4:0e:e5: b5:f0:1c:c5:ee:e7:75:68:7b:02:aa:8c:ab:42:e1:8a:41:47: bd:c1:32:c1:69:3d:9e:6b:1b:9c:8a:77:e2:b6:c0:c2:56:55: 2a:03:ef:cc:14:e4:cf:97:7b:53:a0:59:7c:fd:af:c6:35:22: 18:b4:3a:2a:26:2c:a8:57:f1:14:c4:e2:7f:2c:de:69:c6:90: 9d:2a:0e:a6:f0:2b:c5:be:b3:a8:61:f1:8e:6d:0e:62:05:a6: b7:82:5c:89:5b:15:c5:0b:8b:0b:43:97:70:eb:35:54:db:c4: 3d:f2:29:8e:b3:4d:a3:6a:aa:47:ac:4e:d2:c1:36:50:80:12: e6:a4:25:2d:36:69:a1:16:d0:a6:72:7d:ae:9e:b4:9c:08:e8: 63:32:8a:39:90:a7:af:b0:76:7d:70:d9:3b:0b:3f:15:bd:2c: 98:06:dd:2a:3a:27:aa:9f:45:ba:aa:ba:b2:58:e6:b6:57:6c: 84:78:63:ec:1c:32:0e:cb:f7:7b:2e:70:f1:08:fa:d8:39:1f: a4:4f:37:4f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUJzCLJyjgfxr0WTsS4SvU79f0YVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYyMzIyMTVaFw0yNjAzMDUyMzI3MTVaMDMxMTAvBgNV BAMTKEQzOURBRkVGRTVCM0M4NzBGOUUxQThCREFFOTI0RTI5RUYxQTk5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4bPOgy90XU4WqkJ/W9Uq0hFn/ EWJUoAWJ+e99BnWaD4W2gHPs+xhVAySYiAQ6oWj5kE9X/R8/8q18xsOBE/haOw0d B70B1jhMWDBeFUPGbdIyDKn4S/1mE4yPLRACifGMxRngE7xM5qv9STHbIcfynuul CEaW/peXpo3V8mHDWVgwNqzQRRosV4uumhHaOI/cvzGf9c8lAeNsRHz54NDLlY+P sl3y9Y17y+ovgW5TaOk0Iajp+f2vUDsQT/DDqZlMtJmIIK+tOi2dB5uAdiUXx2+d mer3VA+rd1yQTMrxf1kESvdR2VE2+ob6Y8xhvyDR+u5h7bA26BK7Bh+QR1q1AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTna/v5bPIcPnh qL2ukk4p7xqZHTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1J0 aHlNTkNGd29yY0hXQ3ZFd3o1QUZ1aUVqd1J6YnJEOURqbVNmZWZaNVMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdS dGh5TU5DRndvcmNIV0N2RXd6NUFGdWlFandSemJyRDlEam1TZmVmWjVTLzEvRDM5 REFGRUZFNUIzQzg3MEY5RTFBOEJEQUU5MjRFMjlFRjFBOTkxRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyMK8MA0EAgACMAcDBQAoBH6wMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQlGTANBgkqhkiG9w0BAQsFAAOCAQEAEmURugg0vRgB5t20 KNRMfla5aT+EgLLgDiD80pRqna7fF7zRSuxavxg04MJrpXBQE271pA7ltfAcxe7n dWh7AqqMq0LhikFHvcEywWk9nmsbnIp34rbAwlZVKgPvzBTkz5d7U6BZfP2vxjUi GLQ6KiYsqFfxFMTifyzeacaQnSoOpvArxb6zqGHxjm0OYgWmt4JciVsVxQuLC0OX cOs1VNvEPfIpjrNNo2qqR6xO0sE2UIAS5qQlLTZpoRbQpnJ9rp60nAjoYzKKOZCn r7B2fXDZOws/Fb0smAbdKjonqp9Fuqq6sljmtldshHhj7BwyDsv3ey5w8Qj62Dkf pE83Tw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:49:22 2025 by rpki-client