This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer
File:                     E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer (raw, json)
Hash identifier:          ctWbg+odLUUIENQYG+2sB9wBXMiMvqpLXQq1qnVK4QE=
Subject key identifier:   E5:FA:EB:BF:BF:86:6B:28:36:F6:04:1B:B1:2E:D3:B0:09:54:4C:B0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2AA835E057BC644177654F80FEF7D28E8450657F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 08:57:55 +0000
Certificate not after:    Wed 25 Mar 2026 09:02:55 +0000
Subordinate resources:    AS: 267998
                          IP: 45.167.96.0/22
                          IP: 2804:5670::/32
Validation:               Failed, certificate revoked on Tue 23 Sep 2025 20:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a8:35:e0:57:bc:64:41:77:65:4f:80:fe:f7:d2:8e:84:50:65:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 08:57:55 2025 GMT
            Not After : Mar 25 09:02:55 2026 GMT
        Subject: CN=E5FAEBBFBF866B2836F6041BB12ED3B009544CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:fc:10:79:9e:90:64:2b:11:23:dd:7b:4d:
                    53:75:9b:fd:7b:16:1d:e5:61:52:ed:66:8c:63:c6:
                    52:f5:89:19:2c:db:f4:c6:ec:62:f9:f5:d3:d1:91:
                    5c:8c:e9:68:f7:f5:6d:f2:4a:ef:cf:06:82:92:5c:
                    f1:bf:27:92:93:6d:42:af:65:92:31:ac:97:ad:b7:
                    10:01:db:b1:ae:ba:de:24:58:78:80:37:39:c1:a8:
                    91:7b:b2:6f:53:42:91:8c:2f:f1:9b:10:03:e5:d9:
                    ed:e5:b2:67:f7:9c:f0:6f:55:46:3f:51:66:6f:64:
                    44:0d:f0:13:94:c8:65:5f:c2:c9:62:ab:77:ee:b4:
                    5e:87:06:a2:9d:76:fa:bb:d2:41:7b:0e:88:7c:3f:
                    8d:ad:68:65:4c:22:9e:c1:29:a4:eb:89:b7:1b:2c:
                    1f:3f:40:7e:d0:e8:01:5e:2f:b0:1d:07:21:83:4c:
                    fb:1d:bb:6a:7d:30:ca:01:c8:ab:fa:44:a7:48:88:
                    5b:64:26:f5:7e:4c:5e:35:9b:be:db:2c:da:f5:42:
                    35:55:b8:73:cc:54:7d:93:73:b4:5d:d1:db:c6:45:
                    72:c0:e7:16:e0:f2:48:ba:78:e4:bb:3d:5e:80:e9:
                    ab:39:bf:c0:1a:02:ed:e4:6e:7e:ce:08:04:c2:68:
                    31:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:FA:EB:BF:BF:86:6B:28:36:F6:04:1B:B1:2E:D3:B0:09:54:4C:B0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.96.0/22
                IPv6:
                  2804:5670::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267998

    Signature Algorithm: sha256WithRSAEncryption
         85:a5:9d:f1:d5:02:0c:0b:0f:04:b7:bf:ca:d5:7e:26:fe:75:
         c7:81:60:41:f4:91:02:d9:31:14:27:4d:b6:bf:5d:69:62:01:
         21:9d:1c:6e:e1:1c:ec:d1:61:0a:24:16:fc:26:74:08:a8:cd:
         bc:2a:5f:91:70:b6:e4:0a:b0:a4:7b:fb:ba:ad:c0:99:d0:ea:
         73:93:f7:6b:56:fc:da:2c:81:31:57:c0:70:aa:ad:b8:03:ae:
         1f:ca:0f:1a:48:1b:41:ed:40:d2:97:5e:86:6a:ca:48:94:a2:
         9c:cd:73:91:c2:04:cc:37:40:80:e5:d3:33:ee:50:17:02:fd:
         28:6e:ae:a1:85:cb:e2:49:11:60:66:10:a8:a4:6f:37:09:e3:
         e9:ba:41:50:78:ac:56:cc:59:08:01:e7:e3:9f:77:0f:54:61:
         d3:4a:15:99:7e:21:f1:1d:b3:9b:07:92:4a:5c:21:f4:6b:c0:
         87:6f:57:71:6b:ba:09:fa:17:ce:35:6d:5e:8c:cf:10:d9:f2:
         b2:62:e5:23:3d:6b:14:6b:ab:b9:66:38:41:84:ec:5a:9a:8d:
         0b:68:d7:21:19:ff:55:f3:1a:60:09:f7:80:57:04:e1:ee:1b:
         db:4c:ad:db:c2:d2:a5:ef:d2:8d:57:52:ad:2f:fc:cc:06:9d:
         e8:7a:c2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----