This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D7950E03D821895EF335736E8640695BA4F4AD3E.cer
File:                     D7950E03D821895EF335736E8640695BA4F4AD3E.cer (raw, json)
Hash identifier:          ldHPlwfQqtoS+0Kqx3KxSb0WBT5MsYs82RXYr0cVNRg=
Subject key identifier:   D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       70E6D2AA965281D00A7FA9298B7DA439D67E9C4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/D7950E03D821895EF335736E8640695BA4F4AD3E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Sep 2025 03:29:18 +0000
Certificate not after:    Thu 24 Sep 2026 03:34:18 +0000
Subordinate resources:    AS: 270997
                          IP: 138.99.124.0/22
                          IP: 2804:74b0::/32
Validation:               Failed, certificate revoked on Thu 16 Oct 2025 14:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e6:d2:aa:96:52:81:d0:0a:7f:a9:29:8b:7d:a4:39:d6:7e:9c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 25 03:29:18 2025 GMT
            Not After : Sep 24 03:34:18 2026 GMT
        Subject: CN=D7950E03D821895EF335736E8640695BA4F4AD3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:87:bd:84:e4:47:d9:f9:9a:73:4a:d1:2b:
                    50:df:0f:b1:6f:4d:09:40:0e:54:4e:52:2b:11:7f:
                    9c:28:16:42:3d:1b:4c:0d:f1:31:1c:68:2c:4b:a9:
                    a4:d1:74:83:1b:42:2d:94:7f:7c:af:40:7b:3f:b1:
                    8f:c0:96:ca:89:d2:a7:53:ce:87:0a:b4:26:02:b5:
                    c7:64:5c:00:70:c7:c3:e2:aa:48:65:5c:3e:11:15:
                    52:d6:84:d5:d6:41:c0:4e:96:4c:be:c1:02:8f:03:
                    41:37:db:ed:d9:1a:f1:32:21:7e:30:84:08:a3:25:
                    2f:6b:9d:d3:62:38:34:42:7b:33:88:e8:1d:9a:22:
                    92:31:a2:fa:f8:5e:5d:e3:75:ca:c1:43:ed:0a:d7:
                    d6:e7:b9:c3:95:64:d3:da:4e:ed:6f:6c:5c:1b:f7:
                    f3:5d:da:3f:50:2c:39:74:b5:0b:2a:7b:3d:a2:cb:
                    00:48:8c:14:7f:2a:dd:e0:12:d5:c3:50:01:08:62:
                    5c:06:9f:4d:e3:67:4b:93:d7:ac:f5:44:55:af:0c:
                    d2:46:c2:96:00:4b:5c:fa:9a:b9:5d:69:2a:44:53:
                    cc:18:75:5b:ed:fa:d0:d2:b8:41:90:e0:45:24:67:
                    65:90:d7:40:a3:04:b8:b5:86:95:74:3b:29:ef:fc:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:95:0E:03:D8:21:89:5E:F3:35:73:6E:86:40:69:5B:A4:F4:AD:3E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/D7950E03D821895EF335736E8640695BA4F4AD3E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.124.0/22
                IPv6:
                  2804:74b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270997

    Signature Algorithm: sha256WithRSAEncryption
         56:f9:a4:49:6f:0f:ac:d1:d2:90:a4:c9:3d:1d:7a:ce:02:71:
         b8:9a:c4:7d:2e:9c:33:71:e5:af:90:8b:c8:f1:54:b4:19:7e:
         0e:49:3d:e5:5f:16:b3:a8:94:43:b4:ee:52:24:70:bf:8a:09:
         c0:ca:88:fa:14:17:45:90:50:49:5c:8e:1c:85:59:c6:4f:1b:
         b8:2e:c8:15:61:75:7a:c9:e1:02:85:07:0f:53:16:bc:c1:f7:
         cb:b0:2d:6b:3d:ff:00:99:70:d3:3a:28:f8:a2:be:5f:e3:c2:
         60:15:51:9e:b6:df:44:9c:4f:e7:37:dd:d4:16:cb:de:4e:97:
         12:35:6a:31:2b:96:74:a8:6a:59:62:55:48:d6:de:9c:9d:fb:
         b6:a8:d9:d4:d7:b6:39:6a:74:18:58:b6:0f:a8:d1:80:e0:c3:
         1b:81:3b:e4:f7:9f:a3:ae:eb:e4:53:32:26:52:cd:19:13:5c:
         3a:7c:8b:89:46:86:77:a4:fb:43:19:11:9c:ad:f5:bd:44:ea:
         09:48:e7:66:3f:9a:7a:c6:fe:d5:f8:0d:ad:57:bc:9c:c1:8f:
         24:e2:78:73:f2:6c:3e:ac:a4:49:f7:46:9e:30:78:1c:9d:95:
         38:49:2b:99:43:e8:d2:b3:a5:27:ed:f3:f4:ee:c5:94:a8:2a:
         21:37:58:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----