This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
File:                     E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer (raw, json)
Hash identifier:          NSMKY3TTs3Il+JMOtaoP39HJy+fzwRaOXfa5e5qjNtU=
Subject key identifier:   E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       07BF6BDE7EEAD39433ADA0AA9B1FF1BE7AAE1C18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 20:48:08 +0000
Certificate not after:    Thu 05 Mar 2026 20:53:08 +0000
Subordinate resources:    AS: 52706
                          IP: 170.233.212.0/22
                          IP: 177.126.16.0/20
                          IP: 2804:c70::/32
Validation:               Failed, certificate revoked on Thu 21 Aug 2025 06:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bf:6b:de:7e:ea:d3:94:33:ad:a0:aa:9b:1f:f1:be:7a:ae:1c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 20:48:08 2025 GMT
            Not After : Mar  5 20:53:08 2026 GMT
        Subject: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:86:4e:19:29:df:1e:07:80:d6:2e:03:21:
                    75:9a:84:b3:93:9b:59:77:e7:cf:54:84:bd:bf:f9:
                    5f:2c:84:fb:70:b4:25:26:70:8f:6f:fd:ea:95:54:
                    20:b3:29:08:68:09:04:de:16:a4:89:e3:0e:94:3a:
                    f0:74:0e:cf:52:b6:0b:03:1a:a7:15:b0:d2:bd:4e:
                    52:93:5e:26:06:fc:0f:5d:60:53:fa:af:1d:23:61:
                    4d:d2:2b:72:d2:f8:4f:b9:0f:cd:a4:c4:54:4b:47:
                    2b:96:7d:c3:d9:63:31:5c:a1:69:1c:9f:95:be:4d:
                    21:57:2b:70:ec:c6:2b:2d:9b:30:91:6f:d5:18:ed:
                    9f:34:0a:29:32:8e:89:69:e5:e4:b1:f4:36:26:49:
                    0d:80:49:34:fb:18:54:13:b3:47:19:02:26:a8:23:
                    04:94:b9:70:10:2b:3e:40:bd:91:b5:71:84:bc:c5:
                    db:41:72:16:ad:ad:ae:f5:96:ed:8b:21:85:56:10:
                    97:7c:9b:ad:ae:e1:50:27:cb:bf:6e:3d:4b:f8:68:
                    6c:19:1e:81:45:72:ff:6b:b2:71:76:30:ea:fe:6f:
                    10:22:dd:4f:ad:db:82:25:01:90:a6:68:e7:46:78:
                    47:e7:be:16:c5:0c:5b:d3:f1:99:b8:b8:b8:00:fb:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.212.0/22
                  177.126.16.0/20
                IPv6:
                  2804:c70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52706

    Signature Algorithm: sha256WithRSAEncryption
         23:e2:fa:23:c2:ff:ab:77:d5:d7:cf:5c:64:00:ab:99:7a:62:
         69:31:f8:40:c2:d6:e2:ad:d3:1f:b3:49:69:b5:43:9f:c7:08:
         a7:6f:ae:7b:9f:a8:1f:6e:6d:2c:b1:75:0f:68:75:23:f2:92:
         41:dd:8b:f3:fc:30:18:14:18:ba:0b:bd:a7:a1:23:5f:54:30:
         6a:e4:ad:14:41:65:fc:43:b5:f9:34:51:f7:bd:fe:e0:57:55:
         ed:4f:e4:ce:45:0c:9a:00:0d:92:88:04:99:bb:66:5e:08:59:
         1a:db:50:a8:33:b4:27:dd:7b:f4:84:54:2d:24:a9:7d:20:5a:
         82:9d:2d:cb:fe:32:39:22:ee:87:56:47:88:b6:d0:57:3e:8f:
         02:46:e3:58:51:64:ca:e6:b7:40:99:65:81:b4:c5:ae:19:78:
         3a:a1:29:9b:bd:f5:24:fc:bd:d0:bd:f7:85:cb:3e:85:14:f1:
         43:19:61:0f:05:de:00:b3:74:05:43:2e:54:a3:55:db:5b:70:
         0e:70:47:33:d8:9f:fb:13:56:a0:1f:46:b9:be:bd:88:8e:7d:
         18:18:f8:2b:82:53:de:f1:4d:cc:7a:9a:74:e6:93:96:88:45:
         a1:63:66:f7:35:f7:07:2d:d6:b0:7b:34:45:bb:38:e7:9f:51:
         c8:99:19:78
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUB79r3n7q05QzraCqmx/xvnquHBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYyMDQ4MDhaFw0yNjAzMDUyMDUzMDhaMDMxMTAvBgNV
BAMTKEUzNUU1NEYxRDAyNjNCOEU5MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC424ZOGSnfHgeA1i4DIXWahLOT
m1l3589UhL2/+V8shPtwtCUmcI9v/eqVVCCzKQhoCQTeFqSJ4w6UOvB0Ds9StgsD
GqcVsNK9TlKTXiYG/A9dYFP6rx0jYU3SK3LS+E+5D82kxFRLRyuWfcPZYzFcoWkc
n5W+TSFXK3DsxistmzCRb9UY7Z80Cikyjolp5eSx9DYmSQ2ASTT7GFQTs0cZAiao
IwSUuXAQKz5AvZG1cYS8xdtBchatra71lu2LIYVWEJd8m62u4VAny79uPUv4aGwZ
HoFFcv9rsnF2MOr+bxAi3U+t24IlAZCmaOdGeEfnvhbFDFvT8Zm4uLgA+9TXAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjXlTx0CY7jpA6
CSmmExPIxb6NpjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEdI
YU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhXMUcvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRH
SGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEvRTM1
RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhDNUJFOERBNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCqunUAwQEsX4QMA0EAgACMAcDBQAoBAxwMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDN4jANBgkqhkiG9w0BAQsFAAOCAQEAI+L6I8L/
q3fV189cZACrmXpiaTH4QMLW4q3TH7NJabVDn8cIp2+ue5+oH25tLLF1D2h1I/KS
Qd2L8/wwGBQYugu9p6EjX1QwauStFEFl/EO1+TRR973+4FdV7U/kzkUMmgANkogE
mbtmXghZGttQqDO0J9179IRULSSpfSBagp0ty/4yOSLuh1ZHiLbQVz6PAkbjWFFk
yua3QJllgbTFrhl4OqEpm731JPy90L33hcs+hRTxQxlhDwXeALN0BUMuVKNV21tw
DnBHM9if+xNWoB9Gub69iI59GBj4K4JT3vFNzHqadOaTlohFoWNm9zX3By3WsHs0
Rbs4559RyJkZeA==
-----END CERTIFICATE-----