This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/00044362B7DB59038E4F921646D20D1238A45262.cer
File:                     00044362B7DB59038E4F921646D20D1238A45262.cer (raw, json)
Hash identifier:          tNYCLUaZC3w4uGGtehod6qLwrXhkeCtPpx0dYVy6ivw=
Subject key identifier:   00:04:43:62:B7:DB:59:03:8E:4F:92:16:46:D2:0D:12:38:A4:52:62
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57985FE418AE846D8FFC0537226E853F7292100B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/00044362B7DB59038E4F921646D20D1238A45262.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 20 Apr 2025 12:55:50 +0000
Certificate not after:    Sun 19 Apr 2026 13:00:50 +0000
Subordinate resources:    AS: 265999
                          IP: 164.163.100.0/22
                          IP: 2804:4108::/32
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 20:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:98:5f:e4:18:ae:84:6d:8f:fc:05:37:22:6e:85:3f:72:92:10:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 20 12:55:50 2025 GMT
            Not After : Apr 19 13:00:50 2026 GMT
        Subject: CN=00044362B7DB59038E4F921646D20D1238A45262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cb:38:70:27:3f:56:90:8b:62:4c:47:da:5e:
                    e3:26:85:fe:42:10:51:f9:8d:0b:2b:65:7a:9c:98:
                    56:16:7d:7f:39:2d:a5:67:9d:0f:84:78:60:f8:ea:
                    3b:49:a2:93:c4:c4:bd:87:09:49:5d:98:86:19:37:
                    dc:2f:a8:03:34:41:67:f1:43:70:7f:4f:82:d2:18:
                    2f:c8:a0:92:83:ba:ca:30:68:4c:e3:a2:cf:43:93:
                    6f:73:f5:06:6d:c7:20:5c:bb:56:fc:31:58:c0:00:
                    70:5c:76:31:b6:d0:ee:d3:e5:f2:0b:f2:96:c9:cd:
                    81:01:71:10:1e:58:f2:71:2b:72:20:73:f0:2a:dd:
                    88:30:29:31:43:ce:11:45:f5:62:08:d6:8a:89:a8:
                    5a:4f:70:2c:1f:43:8c:d8:c9:56:61:6e:5e:38:50:
                    f1:3f:b0:ab:1b:ad:38:e3:49:5b:14:63:60:dd:13:
                    a6:c7:a6:f2:90:fe:51:fd:91:41:68:a5:c1:69:1c:
                    02:f0:80:bd:91:14:cf:ce:22:5f:b3:a3:e9:ef:2d:
                    aa:5f:a7:c5:86:b4:82:82:d6:94:ac:96:20:34:92:
                    68:fb:33:0c:88:7a:ab:89:4b:9e:5c:a2:cc:cf:68:
                    5e:33:da:74:c2:ca:ef:28:cd:07:6b:c7:43:50:4c:
                    84:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:04:43:62:B7:DB:59:03:8E:4F:92:16:46:D2:0D:12:38:A4:52:62
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/00044362B7DB59038E4F921646D20D1238A45262.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.100.0/22
                IPv6:
                  2804:4108::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265999

    Signature Algorithm: sha256WithRSAEncryption
         04:29:58:e6:74:56:d7:92:f7:7e:7d:9d:53:8f:9d:c3:c3:b1:
         17:b6:e8:19:09:3b:5f:1d:25:10:41:f5:98:5b:4f:7c:1c:9e:
         43:c6:dd:ef:ef:87:9b:d5:17:82:94:22:e5:08:8a:da:5f:ee:
         38:d2:31:7f:ba:8f:94:19:e0:e2:3e:44:25:3e:ad:13:1c:ad:
         fc:57:4f:69:6c:04:08:17:25:8c:40:9a:87:b4:93:71:8f:1e:
         9c:92:24:83:e4:bd:62:49:6a:59:6e:35:95:2e:fd:90:07:3d:
         15:56:26:87:d8:00:2a:49:1a:ce:a5:cb:5d:e1:90:9a:48:6a:
         38:10:b4:04:bb:82:7e:33:59:40:eb:5c:4a:d9:da:7d:09:ee:
         31:e8:38:ce:5f:bd:2a:ae:ca:6f:b7:ca:9a:28:df:3f:39:7d:
         fa:b7:d9:41:e1:1d:99:ae:13:4a:64:62:71:ed:13:c5:b5:12:
         fe:16:de:6f:61:78:c2:22:f1:21:0a:76:5c:93:1d:fe:fd:d7:
         f6:3b:89:51:81:b3:1b:22:71:af:fe:a9:48:7e:b2:f1:05:7c:
         8a:3f:41:cc:ee:d5:b0:4e:53:1b:0f:9b:d8:79:0f:dc:e9:22:
         62:2f:de:1c:e5:45:b1:23:98:4d:0a:0c:b2:2e:37:0d:1a:f9:
         37:8c:58:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----