This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer
File:                     D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer (raw, json)
Hash identifier:          7RQ/U/MYXxHUjSYJj+kywBtc92lGENeY4OGsQihkhjc=
Subject key identifier:   D6:E5:14:A5:A6:77:DB:73:1A:91:89:1D:50:52:D5:88:E5:FA:FB:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6358893D57E10775ED11BED3A85C1EC0BE9063F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Jun 2025 00:51:45 +0000
Certificate not after:    Thu 25 Jun 2026 00:56:45 +0000
Subordinate resources:    AS: 267560
                          IP: 181.191.216.0/22
                          IP: 2804:4348::/32
Validation:               Failed, certificate revoked on Mon 06 Oct 2025 16:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:58:89:3d:57:e1:07:75:ed:11:be:d3:a8:5c:1e:c0:be:90:63:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 26 00:51:45 2025 GMT
            Not After : Jun 25 00:56:45 2026 GMT
        Subject: CN=D6E514A5A677DB731A91891D5052D588E5FAFBD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:08:ac:f4:25:87:eb:b4:09:18:fb:56:4d:
                    07:9b:c1:fa:35:6a:81:bf:9a:c6:e7:05:41:b4:a2:
                    43:e1:e2:3f:86:4b:52:12:14:6b:d7:59:36:e7:48:
                    73:1c:cb:dd:04:90:31:e5:2c:ba:12:cd:48:85:22:
                    1b:10:fd:ff:ad:c1:20:a4:86:24:02:aa:7e:2e:5a:
                    d3:ec:44:10:36:55:5d:b1:91:e7:4f:55:cd:f8:03:
                    23:57:9a:b9:bf:4b:20:e0:c2:08:95:b6:89:92:77:
                    9f:87:01:78:91:f5:28:46:62:37:f0:21:c4:62:f0:
                    7f:ed:60:88:e5:c4:5f:9a:1f:f2:0d:c0:27:13:00:
                    d9:1e:16:57:df:d8:ac:a2:43:e1:13:fa:ad:0a:5f:
                    61:84:c1:06:13:8c:3b:1f:ad:36:2e:06:22:40:86:
                    03:61:e5:be:cb:fe:d4:ff:65:50:88:86:30:2a:e0:
                    a3:b2:91:57:0f:10:55:6c:4d:0f:47:23:e2:bd:99:
                    03:f0:d1:1b:dc:08:f9:8f:dc:f7:a6:20:5a:05:70:
                    5a:1b:42:9a:22:bd:a9:2d:71:f8:3a:24:36:07:93:
                    aa:c5:1f:33:e7:e5:cb:98:24:85:ba:fa:30:e6:15:
                    97:a9:5c:08:aa:f4:7f:57:6e:aa:f9:57:1e:1c:31:
                    aa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:E5:14:A5:A6:77:DB:73:1A:91:89:1D:50:52:D5:88:E5:FA:FB:D8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.216.0/22
                IPv6:
                  2804:4348::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267560

    Signature Algorithm: sha256WithRSAEncryption
         01:44:a7:9b:95:2b:a6:77:10:3b:9c:06:a9:93:23:d4:c9:e7:
         5a:a5:32:f0:77:cb:9f:73:72:16:c1:cc:36:ab:37:ad:3f:ef:
         a9:f0:b9:a6:f9:8c:de:2b:6d:04:f7:e0:99:f6:89:d2:b7:49:
         f0:1b:8d:66:22:fa:10:b7:f7:10:5d:21:51:0a:bc:b0:cb:a8:
         98:af:34:55:54:77:94:4d:f7:f9:ac:79:27:ee:67:63:9d:75:
         05:52:57:8a:1d:f4:76:a2:a8:5b:bf:e3:41:c3:e3:9e:d1:fa:
         4a:bc:9c:62:10:93:23:95:a2:2c:17:d1:27:63:96:84:6a:74:
         17:88:ec:1d:79:8c:62:59:ec:5f:83:d7:95:7d:dd:d9:78:b7:
         a3:66:6f:17:df:9c:fd:5c:20:a7:d1:f6:29:15:d1:88:8c:4e:
         67:d5:1e:1f:f7:88:1d:55:92:45:b1:d5:ef:99:b6:54:e0:ee:
         c2:e3:e4:00:5b:cb:3f:39:f8:22:b6:a9:e5:ab:ff:31:5c:80:
         4a:9d:28:49:c1:e5:74:d9:7c:1c:3f:03:11:f4:6f:e1:02:ec:
         c6:69:32:14:98:91:a2:69:c0:d9:db:ae:84:d0:b9:c5:13:bd:
         fd:ad:e9:9d:4a:52:27:cf:dd:4f:56:08:79:76:46:fb:ad:77:
         ce:41:7d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----