This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E483282DA50873B6832166A0D902D6605AA93019.cer
File:                     E483282DA50873B6832166A0D902D6605AA93019.cer (raw, json)
Hash identifier:          in7xiRpIOAHGHKi6tXumT6jWFGJ0Z/Fq2AX/Hwhnko8=
Subject key identifier:   E4:83:28:2D:A5:08:73:B6:83:21:66:A0:D9:02:D6:60:5A:A9:30:19
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7140C6DFE5588DF4F9D8EABCCB1814415BEBAA54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Nov 2025 14:37:46 +0000
Certificate not after:    Mon 09 Nov 2026 14:42:46 +0000
Subordinate resources:    AS: 53003
                          IP: 177.55.128.0/20
                          IP: 2804:5038::/32
Validation:               Failed, certificate revoked on Mon 10 Nov 2025 15:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:40:c6:df:e5:58:8d:f4:f9:d8:ea:bc:cb:18:14:41:5b:eb:aa:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 10 14:37:46 2025 GMT
            Not After : Nov  9 14:42:46 2026 GMT
        Subject: CN=E483282DA50873B6832166A0D902D6605AA93019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:82:e0:d1:ff:67:7f:87:0c:f0:2d:8d:34:16:
                    d1:12:7f:2a:ad:8d:c3:74:28:b6:81:5b:f0:81:49:
                    c7:27:91:32:0f:7a:7e:5e:bf:e7:68:5c:cf:74:b2:
                    49:fc:36:e0:1c:03:5c:37:46:f7:dd:62:8a:9c:3f:
                    63:28:ab:50:36:80:3e:67:f4:27:37:d0:e1:a4:45:
                    c8:ee:99:25:c8:43:cd:6a:37:f7:0b:43:6d:f2:4d:
                    ad:fa:1a:e2:12:97:89:10:b3:81:88:c7:5c:ea:36:
                    7b:d6:30:3e:7c:ff:c6:52:ff:8a:ed:ef:5a:ca:c2:
                    17:ce:ab:9d:fc:5b:66:dd:55:4d:ba:bc:8e:2b:a6:
                    f2:0f:d4:38:09:ed:38:c2:18:96:06:3f:0e:e6:57:
                    d8:a4:65:f3:55:f1:5d:d5:49:df:bc:0b:15:a4:98:
                    53:40:77:c1:e7:f3:06:fd:3b:d9:e3:c8:5e:f7:b7:
                    46:e1:82:89:88:b3:65:f7:0a:ca:79:13:fc:97:a7:
                    44:d8:07:8d:09:cb:39:01:14:e9:c9:fd:14:8d:b6:
                    74:4b:5b:b3:73:6a:8a:70:8a:df:39:9b:41:33:23:
                    47:2a:5f:80:b6:f9:02:23:8a:bc:f7:7f:61:02:e9:
                    9f:bf:34:c9:51:e8:2f:45:8e:af:26:13:84:05:99:
                    d2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:83:28:2D:A5:08:73:B6:83:21:66:A0:D9:02:D6:60:5A:A9:30:19
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.128.0/20
                IPv6:
                  2804:5038::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53003

    Signature Algorithm: sha256WithRSAEncryption
         db:a3:a1:2b:92:bc:43:95:80:7d:79:79:13:db:45:40:be:13:
         02:11:1c:69:e9:3d:57:20:6c:ac:ce:08:92:c1:a9:c2:6a:96:
         0b:1d:cc:1f:e9:8b:39:80:04:ef:df:30:2d:01:90:31:98:c8:
         30:c6:6d:10:11:d6:db:2a:84:93:10:61:96:ac:ad:38:f1:be:
         ae:e6:ae:dd:79:d0:68:71:ae:ca:53:dc:38:5a:b0:93:c1:ad:
         98:6d:fb:a6:37:c7:26:0a:1c:d9:30:6e:48:b7:83:43:5f:f3:
         17:25:a4:9f:17:dd:57:7b:9f:05:09:e1:51:c4:c2:89:bf:3b:
         70:d4:c1:b9:44:10:7c:52:98:95:d3:68:b2:bd:99:6a:6e:64:
         09:65:59:53:e6:79:ac:5b:f9:1b:9b:f8:68:ef:86:a1:a7:1c:
         f2:ce:5e:f0:09:df:4e:a1:32:f5:7b:e7:6a:7b:a3:c4:a0:b7:
         8d:10:15:3f:64:8c:41:35:f7:e4:28:e0:9d:aa:16:0a:cb:e3:
         fb:f0:0d:5a:bd:11:df:d1:12:fd:0b:bf:5a:05:11:d8:5e:6c:
         1c:d7:35:1e:4b:c4:3f:a5:a7:48:30:04:f6:d6:33:0b:57:2f:
         71:72:1f:07:49:c7:24:a0:d0:69:06:da:18:c0:1c:5c:88:58:
         d7:87:41:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----