This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F149F6074E69BD8DF1483B6F1B74571591827C7E.cer
File:                     F149F6074E69BD8DF1483B6F1B74571591827C7E.cer (raw, json)
Hash identifier:          2DKMazhVxrr6GLkRCLnTtlDE7YhR40Cst3c7yRKpJm0=
Subject key identifier:   F1:49:F6:07:4E:69:BD:8D:F1:48:3B:6F:1B:74:57:15:91:82:7C:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       65D62241F0E55077892649325AD31604A8ECA533
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Nov 2025 14:41:46 +0000
Certificate not after:    Wed 25 Nov 2026 14:46:46 +0000
Subordinate resources:    AS: 28665
                          IP: 177.12.0.0/18
                          IP: 177.136.128.0/19
                          IP: 189.1.128.0/20
                          IP: 2804:f88::/32
Validation:               Failed, certificate revoked on Thu 27 Nov 2025 00:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d6:22:41:f0:e5:50:77:89:26:49:32:5a:d3:16:04:a8:ec:a5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 26 14:41:46 2025 GMT
            Not After : Nov 25 14:46:46 2026 GMT
        Subject: CN=F149F6074E69BD8DF1483B6F1B74571591827C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0a:d8:2d:2d:26:df:5f:ce:e3:e4:69:0e:9f:
                    3c:e5:05:0d:25:c4:7e:71:e8:62:3e:7d:c6:eb:ae:
                    fc:fe:78:26:f2:80:89:44:a4:4c:d8:31:e1:1c:f2:
                    d4:91:46:4c:66:13:f3:e5:cd:51:cd:9c:69:7b:a8:
                    6e:da:dc:9e:13:4a:a2:83:25:61:2d:13:c5:a2:ad:
                    9b:b4:44:b1:36:12:1b:2a:eb:84:ed:c2:25:57:29:
                    dc:84:35:fa:f4:df:12:58:bb:28:61:64:40:2a:7a:
                    5c:b8:17:4e:91:0e:d8:07:89:c1:7c:f5:d6:80:b2:
                    f0:31:72:b7:c8:14:3b:5d:e5:db:66:d3:30:b6:d3:
                    ca:22:de:3b:f9:5c:c5:47:8f:9d:bd:d8:8c:25:98:
                    c9:b8:4a:74:14:aa:e1:df:ba:ef:9b:bb:fc:c5:62:
                    e6:7c:14:70:06:ff:bf:ff:07:01:da:ea:fc:90:b9:
                    50:7a:ca:7f:27:d6:a7:c1:b4:9c:45:df:4e:56:8a:
                    02:6a:11:d3:02:8c:5c:97:95:d9:ee:76:cf:14:fa:
                    99:94:2f:de:57:29:68:c1:a5:43:65:59:2e:4b:f9:
                    ea:99:df:0f:a9:00:a3:0c:c8:29:fb:4d:4b:8d:b4:
                    d0:c7:4a:1c:14:cd:9e:e1:12:a6:a7:0b:62:fa:a0:
                    f8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:49:F6:07:4E:69:BD:8D:F1:48:3B:6F:1B:74:57:15:91:82:7C:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.0.0/18
                  177.136.128.0/19
                  189.1.128.0/20
                IPv6:
                  2804:f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28665

    Signature Algorithm: sha256WithRSAEncryption
         05:d1:19:03:df:bc:99:d3:61:4a:cf:83:e3:6d:cc:70:0f:1b:
         9b:93:70:9a:b5:f2:7f:68:54:8d:5a:b4:d8:61:46:76:3c:66:
         d4:07:eb:fd:ac:d7:50:e3:62:8e:ae:54:d4:b5:b7:fc:ce:f1:
         5a:65:10:e2:e5:7c:92:5e:ff:6c:c0:03:fd:3b:87:9c:06:3f:
         ac:0b:57:b9:a4:3b:84:45:c4:9a:b8:dc:18:0c:ff:83:49:7d:
         41:22:f2:37:30:12:16:c3:3b:65:35:20:fe:34:8a:b8:be:39:
         0e:af:e4:fd:05:ad:68:2b:1a:e6:03:99:90:22:e2:67:5d:f6:
         b4:08:46:c8:60:ce:67:44:6a:ab:e7:bb:ce:8c:6d:ad:ea:8a:
         af:f0:aa:3c:39:f1:d8:85:92:c1:00:5c:4b:3a:1c:3b:d0:56:
         07:fd:ff:cc:65:9b:fa:c2:9c:69:a9:e5:93:ac:30:5e:47:62:
         c2:16:b9:f7:0c:10:6d:72:69:5e:e8:59:b2:54:27:22:73:1e:
         f9:96:05:8e:21:7c:ac:7e:78:cd:85:66:ca:30:c8:e5:63:54:
         7a:9c:9b:04:b7:4c:81:92:97:9e:ff:13:84:af:9f:56:1a:8c:
         98:8b:94:b0:3b:fc:7d:53:5a:f4:6f:40:4c:54:94:ae:c0:7f:
         db:8b:01:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----