This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF378FCED112801045DB136F6CA069344BA08F50.cer
File: FF378FCED112801045DB136F6CA069344BA08F50.cer (raw, json)
Hash identifier: QcQ24EHjte81Mm769UI+N7DRHttW6PWTNyK9JPfQL6A=
Subject key identifier: FF:37:8F:CE:D1:12:80:10:45:DB:13:6F:6C:A0:69:34:4B:A0:8F:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 35220F4BB603DAE2574E9A72750C4FF562F5484D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.mft
caRepository: rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 04 Jun 2025 20:31:26 +0000
Certificate not after: Wed 03 Jun 2026 20:36:26 +0000
Subordinate resources: AS: 264295
IP: 138.121.116.0/22
IP: 168.181.152.0/22
IP: 170.246.16.0/22
IP: 2804:25b0::/32
Validation: Failed, certificate revoked on Thu 16 Oct 2025 18:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:22:0f:4b:b6:03:da:e2:57:4e:9a:72:75:0c:4f:f5:62:f5:48:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 4 20:31:26 2025 GMT
Not After : Jun 3 20:36:26 2026 GMT
Subject: CN=FF378FCED112801045DB136F6CA069344BA08F50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:3b:d6:8b:a0:e5:68:8f:25:fe:48:18:5b:
6e:c1:11:ce:3e:9a:b7:a7:5e:91:e1:05:e2:58:10:
4d:e4:26:b7:d0:2f:1b:fb:1e:93:49:0d:16:9f:38:
6b:23:80:71:59:90:60:31:be:5e:79:78:88:0c:a9:
61:fa:a3:e0:46:20:11:1a:86:b8:5c:58:a5:a7:15:
cf:66:98:9b:83:1a:48:fd:7b:46:49:03:c3:3e:4c:
82:77:02:c2:e1:08:06:39:bb:28:bb:8d:af:77:35:
91:ce:d1:4c:c3:cb:e8:38:ac:81:c8:56:08:78:7e:
bd:1a:04:5e:54:54:a4:05:c2:7b:db:ec:23:25:1c:
81:e1:e0:2c:17:78:23:b3:c0:57:d0:da:6f:43:73:
3d:9c:51:b2:cb:1d:63:6a:5a:fb:90:1c:c5:50:7d:
24:4e:e2:8a:7e:c2:6b:fa:4b:66:32:a6:51:c7:f7:
0a:18:4f:25:c0:b7:0e:e5:aa:74:bf:0c:3a:23:ce:
92:4e:83:9e:83:81:0a:1a:84:cd:09:a7:fc:b0:40:
41:e3:7e:f8:87:50:98:f2:4b:63:89:cb:4b:e5:0a:
41:cc:69:bc:26:bc:93:6d:d0:d8:27:70:5f:93:d1:
7c:67:da:d1:ad:e5:44:43:e0:82:36:ae:ce:6d:44:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FF:37:8F:CE:D1:12:80:10:45:DB:13:6F:6C:A0:69:34:4B:A0:8F:50
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.116.0/22
168.181.152.0/22
170.246.16.0/22
IPv6:
2804:25b0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264295
Signature Algorithm: sha256WithRSAEncryption
a9:11:9e:c0:8f:b2:90:66:9d:9b:1f:4d:ec:1c:8f:90:91:92:
16:8b:0d:4e:ff:69:38:f6:7a:aa:84:56:1d:9a:9a:99:c0:1a:
41:ab:32:80:4e:d5:3e:b1:74:d5:7d:cc:f6:e6:66:de:52:7b:
59:43:89:69:47:36:5f:38:6e:5d:3a:05:40:ec:41:7b:d2:27:
c8:74:8f:d3:0a:85:0d:7e:86:30:d1:94:d6:11:a2:22:1b:42:
2d:f6:1f:12:56:98:2e:78:56:22:62:8a:77:c1:56:2a:53:a7:
51:db:56:6d:10:2c:e8:c6:bb:2f:45:25:98:3a:2a:79:6e:6a:
f2:38:fb:f7:3c:a7:11:a7:85:e1:46:63:92:5f:50:2d:4b:91:
63:44:bc:71:db:89:c2:47:e7:e5:fb:c6:b3:ae:ff:cc:6d:c9:
1c:ef:51:d9:d4:ee:ff:e7:e9:88:28:04:28:20:7c:38:09:d0:
ac:7a:95:eb:0a:d4:44:3a:66:5b:ad:bd:38:7f:73:49:5c:fc:
7f:b1:cd:3a:ff:19:d1:77:53:8a:2a:5e:7d:61:04:d4:69:e1:
d9:70:5c:40:72:b6:59:0b:ec:00:c9:d1:33:30:6a:17:ad:28:
dd:84:17:99:64:9a:0e:8b:0a:b4:21:06:59:b8:53:fe:52:39:
76:40:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 14:40:28 2025 by rpki-client