This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.cer
File:                     F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.cer (raw, json)
Hash identifier:          0elNq2jZGSZDi9G3+miT1D4wB8wN6zezAkPr1FnAxk4=
Subject key identifier:   F9:D4:39:43:DC:9C:79:F0:86:4C:8A:5A:95:36:3A:FD:B6:AE:59:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6ED5049C563BDFB1C53809601270B6C9F0B08BDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Sep 2025 14:35:40 +0000
Certificate not after:    Mon 14 Sep 2026 14:40:40 +0000
Subordinate resources:    AS: 52596
                          IP: 179.191.48.0/21
                          IP: 2804:d14::/32
Validation:               Failed, certificate revoked on Thu 25 Sep 2025 02:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d5:04:9c:56:3b:df:b1:c5:38:09:60:12:70:b6:c9:f0:b0:8b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 15 14:35:40 2025 GMT
            Not After : Sep 14 14:40:40 2026 GMT
        Subject: CN=F9D43943DC9C79F0864C8A5A95363AFDB6AE591B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f4:f7:59:50:4b:25:ac:a6:56:a5:94:c9:4a:
                    ef:47:07:78:fc:4c:6c:a7:d7:81:7c:e9:0d:6b:04:
                    91:69:66:2e:e0:40:50:75:30:6e:97:ec:71:52:4f:
                    bc:ad:aa:9c:99:1c:cf:fd:04:e4:fc:4a:97:55:70:
                    c9:c2:36:5f:43:c3:6d:23:80:89:73:ce:55:65:23:
                    b7:a7:16:26:b7:63:5f:96:88:1c:3c:4b:42:88:77:
                    4e:be:73:32:99:ed:1b:5c:9c:16:a7:7a:e2:47:da:
                    99:36:ae:14:08:c7:53:b7:d8:ed:af:ad:92:51:9a:
                    36:71:d1:09:23:24:b1:7d:8a:b0:f1:fd:99:09:16:
                    98:fb:4c:0a:93:08:82:ae:85:1c:77:aa:7d:c5:67:
                    82:5d:78:c0:92:99:96:62:5b:a0:fe:7c:b4:00:a5:
                    3b:e6:75:9b:36:47:ac:4e:fb:4c:f4:0f:74:9c:fa:
                    04:ba:b8:4a:95:e4:2e:7c:4e:30:80:db:5c:ff:1e:
                    48:0b:58:c4:85:e0:07:ab:79:53:1b:9a:95:06:76:
                    c8:71:ad:88:bd:c2:d0:5b:a3:14:fc:dc:4c:b3:d2:
                    58:e3:84:d7:7e:08:96:f6:f1:cd:b6:8a:d7:9d:97:
                    de:14:dc:0c:17:08:ba:9c:0a:86:dc:a4:49:4d:ff:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:D4:39:43:DC:9C:79:F0:86:4C:8A:5A:95:36:3A:FD:B6:AE:59:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/21
                IPv6:
                  2804:d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52596

    Signature Algorithm: sha256WithRSAEncryption
         a8:11:5f:86:c2:f9:b3:5d:31:90:9e:07:3f:44:1c:3c:53:88:
         71:33:91:4a:b1:f0:a9:ae:3b:f5:8c:9c:13:83:17:8a:16:03:
         37:68:cd:a5:78:16:3b:a8:ad:25:38:82:82:10:ea:4f:8f:78:
         62:02:c2:ac:46:4b:58:d0:ae:8e:19:19:b8:fe:56:ec:0c:d2:
         ed:e5:00:62:df:bf:f6:a6:0d:cd:a6:7c:f9:a9:81:b3:64:63:
         ed:ba:ed:64:93:ab:78:02:61:e1:c7:72:f5:b8:9b:73:a0:e5:
         a3:f6:d4:da:a0:aa:2a:d1:fc:12:c9:41:d5:8d:93:15:d8:80:
         ab:e8:bb:3b:ca:da:a7:e3:d4:58:88:fc:0f:6b:40:bc:62:62:
         87:a5:5a:bd:68:28:2d:15:17:78:72:f0:bb:4c:04:6b:45:0d:
         40:fd:6f:58:40:d5:e5:a4:a2:ac:e1:5f:58:52:1d:86:fb:20:
         73:c4:f3:40:40:7f:b4:86:a8:9a:86:c6:64:f4:dc:a5:8b:b6:
         8d:74:60:3b:c0:da:42:f9:90:79:19:9f:37:13:74:93:e7:18:
         2e:56:ba:44:a9:90:2c:6e:42:a1:b4:3f:2f:e3:d1:02:6e:6d:
         aa:b0:c5:d3:1e:03:0e:58:d1:d1:18:1b:30:b1:aa:68:82:97:
         d9:13:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----