This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F60DD5691290F0E1020443A5AA367AB2EA0FF195.cer
File:                     F60DD5691290F0E1020443A5AA367AB2EA0FF195.cer (raw, json)
Hash identifier:          ToXm7cElamiczWMrCAB7gaFJkCazHE7R3doc4DJM+gQ=
Subject key identifier:   F6:0D:D5:69:12:90:F0:E1:02:04:43:A5:AA:36:7A:B2:EA:0F:F1:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E8A52C43DE89F4937034A236F8715E62B7715B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/F60DD5691290F0E1020443A5AA367AB2EA0FF195.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Aug 2025 12:15:59 +0000
Certificate not after:    Wed 26 Aug 2026 12:20:59 +0000
Subordinate resources:    AS: 266194
                          IP: 45.5.176.0/22
                          IP: 2804:3c2c::/32
Validation:               Failed, certificate revoked on Mon 01 Sep 2025 12:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8a:52:c4:3d:e8:9f:49:37:03:4a:23:6f:87:15:e6:2b:77:15:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 27 12:15:59 2025 GMT
            Not After : Aug 26 12:20:59 2026 GMT
        Subject: CN=F60DD5691290F0E1020443A5AA367AB2EA0FF195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:54:50:b0:3a:3e:cd:0f:16:07:4f:b5:bf:90:
                    e8:b7:4a:88:cd:7c:02:45:49:08:e3:bd:47:0e:b3:
                    bb:65:c0:4c:60:26:5b:69:62:af:2b:de:f1:b0:e6:
                    e4:3c:72:f3:e5:66:b3:ca:1b:4f:91:a5:74:6e:3c:
                    e0:a9:c2:c1:db:9e:43:19:7b:6a:73:78:c7:22:f6:
                    72:43:f3:a8:9d:17:32:ba:b2:a3:ff:64:5d:9e:6e:
                    e0:07:c9:12:d2:a6:cf:b0:b7:71:dc:63:75:c3:28:
                    80:57:c7:23:7b:8f:71:e0:f5:95:63:11:55:08:22:
                    30:82:4c:c0:e5:db:01:9b:c9:9b:26:55:2b:70:a2:
                    fb:95:82:e4:c8:9a:4b:f1:e1:0d:70:a5:c4:3d:ea:
                    cd:d3:c7:2a:0b:33:e3:95:75:73:97:ee:f8:56:88:
                    3d:2f:4c:f0:6e:5f:7b:e5:3c:07:53:2d:2d:4b:3d:
                    6f:1f:8d:35:8f:6a:0f:25:07:1e:2d:b5:37:8a:9b:
                    d1:ba:e2:33:96:da:83:78:d4:e6:8e:c8:8f:1a:3d:
                    d7:5c:98:35:10:7d:54:e2:3a:74:b7:04:23:44:1e:
                    4a:fc:70:3e:e3:87:be:1a:0a:15:22:fc:50:49:d7:
                    08:b8:61:d6:66:1c:14:d4:b9:19:02:c7:8e:3a:0b:
                    d3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:0D:D5:69:12:90:F0:E1:02:04:43:A5:AA:36:7A:B2:EA:0F:F1:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/F60DD5691290F0E1020443A5AA367AB2EA0FF195.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.176.0/22
                IPv6:
                  2804:3c2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266194

    Signature Algorithm: sha256WithRSAEncryption
         92:80:3b:8e:22:20:ed:75:de:ea:86:64:75:2e:2e:b4:cb:56:
         bd:24:bb:32:12:d4:52:10:e7:99:26:0b:98:70:d7:e3:13:18:
         c7:cc:ee:44:e6:58:0d:8a:20:f8:6b:e2:67:9d:1e:e2:ef:d3:
         f8:36:dd:5d:8d:f1:31:4a:2b:4c:85:6f:8e:8d:75:81:1a:9e:
         30:9b:4b:00:57:36:aa:38:3b:ee:28:95:fd:d7:b1:0f:a0:07:
         9f:05:70:22:4e:c1:bf:15:19:a9:33:50:ee:57:4d:48:8c:9e:
         03:77:0c:fc:68:6f:90:b7:e7:aa:b5:2e:28:be:9c:d8:2a:09:
         54:27:24:57:43:44:d8:98:5e:d1:bd:e1:39:d3:3f:31:0a:bb:
         ae:68:a0:1e:cb:30:64:66:9d:99:e7:92:b0:bb:ff:90:f2:77:
         6f:a4:0b:45:bb:5e:6b:a1:2b:86:0c:88:e0:50:08:d6:15:7a:
         cb:ee:55:2e:bc:bd:8e:07:05:41:14:89:45:fa:1b:ea:77:a0:
         63:d8:3f:7c:3e:fd:c9:32:ab:f0:3d:ca:34:64:d6:7a:58:04:
         ed:e0:8a:0a:03:ad:f8:ce:18:f6:c1:34:b5:f6:c6:1f:f5:a7:
         d8:43:78:62:0e:cf:0a:35:e1:4b:a4:ab:61:e0:95:1e:02:18:
         54:a8:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 21:57:43 2025 by rpki-client