This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0634E481BA025A040D7EA172E15ECC7EB23F97AF.cer
File:                     0634E481BA025A040D7EA172E15ECC7EB23F97AF.cer (raw, json)
Hash identifier:          KNa5OFf0uuAdukDAT1+3wYaU/qe8RGW8ZK3W3UVSg5k=
Subject key identifier:   06:34:E4:81:BA:02:5A:04:0D:7E:A1:72:E1:5E:CC:7E:B2:3F:97:AF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30A03508180B77C45E457BF55B6E30350396F070
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/1/0634E481BA025A040D7EA172E15ECC7EB23F97AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Oct 2025 19:57:39 +0000
Certificate not after:    Thu 15 Oct 2026 20:02:39 +0000
Subordinate resources:    AS: 53182
                          IP: 186.227.16.0/20
                          IP: 2804:118c::/32
Validation:               Failed, certificate revoked on Sat 01 Nov 2025 00:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a0:35:08:18:0b:77:c4:5e:45:7b:f5:5b:6e:30:35:03:96:f0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 16 19:57:39 2025 GMT
            Not After : Oct 15 20:02:39 2026 GMT
        Subject: CN=0634E481BA025A040D7EA172E15ECC7EB23F97AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:00:98:ba:2a:9d:0f:7b:73:e0:5f:8f:56:34:
                    17:2e:8c:05:ca:0c:3a:44:43:a3:51:8c:72:c1:f4:
                    fd:65:13:0e:19:25:1e:b6:7d:2c:5a:7a:df:e3:1a:
                    1c:92:4a:2e:34:19:8d:15:e4:3e:a1:cc:38:aa:14:
                    61:3b:5d:5d:d6:06:e7:27:a6:77:36:f2:52:5c:73:
                    b7:5a:e7:ee:d2:19:d6:3e:fb:90:be:dd:82:54:1a:
                    f7:9d:ed:ef:52:f2:6c:3b:19:65:4d:b4:f1:d2:b7:
                    0e:ba:3f:c8:80:38:a1:c6:00:63:44:0e:77:d8:08:
                    4b:e3:35:dc:1d:60:7b:76:fc:0e:c3:fd:3f:a7:9f:
                    d1:31:2b:7e:5d:72:17:9b:33:a9:10:24:b9:11:62:
                    a5:20:83:18:4d:28:b9:8e:d6:80:53:e4:ad:81:f2:
                    c6:03:29:c1:d1:b0:10:c1:25:b5:79:1a:36:8b:66:
                    f9:c8:e0:20:17:e2:0a:08:59:59:bf:c5:7b:c4:b3:
                    5a:ad:07:9e:04:20:57:1c:bf:01:8b:59:e4:fc:69:
                    53:2a:10:e9:1e:aa:66:e0:8b:f8:8c:8f:2e:f2:7e:
                    03:19:34:40:9b:b5:7b:78:fb:e0:ba:e1:ab:58:47:
                    2c:85:8f:90:0f:8b:ff:1e:35:4e:db:dd:13:3d:08:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:34:E4:81:BA:02:5A:04:0D:7E:A1:72:E1:5E:CC:7E:B2:3F:97:AF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/1/0634E481BA025A040D7EA172E15ECC7EB23F97AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.16.0/20
                IPv6:
                  2804:118c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53182

    Signature Algorithm: sha256WithRSAEncryption
         88:15:c8:24:d7:fe:af:db:3d:1e:dc:91:ba:57:a5:2b:a1:f4:
         9d:b3:f6:b6:16:1a:ff:3c:3b:30:5c:cd:57:16:4b:17:c3:8a:
         9a:f2:08:64:7d:70:03:b4:f9:12:af:8f:ce:a2:72:5d:71:a5:
         e2:86:d5:f5:c4:7b:a0:c2:aa:f9:fd:17:f3:1c:99:c1:be:1f:
         29:08:cc:cc:75:b5:4a:79:13:a3:d5:29:b8:de:6d:4d:c0:69:
         02:a9:5c:a3:ba:20:5e:ed:e6:5f:74:81:f2:c4:0c:76:1d:cb:
         63:f9:54:1f:6e:e7:f1:52:85:aa:54:ea:b8:c9:d8:41:56:06:
         eb:d3:da:6e:b3:6c:a8:9c:cb:d3:fa:31:af:1f:bd:36:e8:87:
         dc:3e:0a:bc:86:5a:e8:7b:8d:81:d8:0c:9f:16:04:86:23:6a:
         0c:40:8e:96:92:f2:37:4e:f3:c5:59:68:d1:2a:c0:7c:ab:32:
         71:1b:af:80:6d:79:f0:3b:e5:d5:ea:11:fa:9e:87:62:c3:54:
         75:b1:0b:7b:c8:dc:d1:a8:cb:67:2d:ed:d3:50:27:66:67:6c:
         d8:0a:db:f5:da:9f:cc:52:29:85:15:9b:a0:7c:f5:ee:c0:ca:
         9e:0d:da:02:f2:4f:9e:50:61:e2:ba:12:12:f3:45:84:d7:f4:
         4d:05:c1:6d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUMKA1CBgLd8ReRXv1W24wNQOW8HAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMTYxOTU3MzlaFw0yNjEwMTUyMDAyMzlaMDMxMTAvBgNV
BAMTKDA2MzRFNDgxQkEwMjVBMDQwRDdFQTE3MkUxNUVDQzdFQjIzRjk3QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkAJi6Kp0Pe3PgX49WNBcujAXK
DDpEQ6NRjHLB9P1lEw4ZJR62fSxaet/jGhySSi40GY0V5D6hzDiqFGE7XV3WBucn
pnc28lJcc7da5+7SGdY++5C+3YJUGved7e9S8mw7GWVNtPHStw66P8iAOKHGAGNE
DnfYCEvjNdwdYHt2/A7D/T+nn9ExK35dchebM6kQJLkRYqUggxhNKLmO1oBT5K2B
8sYDKcHRsBDBJbV5GjaLZvnI4CAX4goIWVm/xXvEs1qtB54EIFccvwGLWeT8aVMq
EOkeqmbgi/iMjy7yfgMZNECbtXt4++C64atYRyyFj5APi/8eNU7b3RM9CLGfAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQGNOSBugJaBA1+
oXLhXsx+sj+XrzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVJX
OFdGbVpjOXNGN3l5YkZMQlV2cm9FdjVONEV4VWtwYWVuaUtrdWJXWngvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlS
VzhXRm1aYzlzRjd5eWJGTEJVdnJvRXY1TjRFeFVrcGFlbmlLa3ViV1p4LzEvMDYz
NEU0ODFCQTAyNUEwNDBEN0VBMTcyRTE1RUNDN0VCMjNGOTdBRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEuuMQMA0EAgACMAcDBQAoBBGMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDPvjANBgkqhkiG9w0BAQsFAAOCAQEAiBXIJNf+r9s9HtyR
ulelK6H0nbP2thYa/zw7MFzNVxZLF8OKmvIIZH1wA7T5Eq+PzqJyXXGl4obV9cR7
oMKq+f0X8xyZwb4fKQjMzHW1SnkTo9UpuN5tTcBpAqlco7ogXu3mX3SB8sQMdh3L
Y/lUH27n8VKFqlTquMnYQVYG69PabrNsqJzL0/oxrx+9NuiH3D4KvIZa6HuNgdgM
nxYEhiNqDECOlpLyN07zxVlo0SrAfKsycRuvgG158Dvl1eoR+p6HYsNUdbELe8jc
0ajLZy3t01AnZmds2Arb9dqfzFIphRWboHz17sDKng3aAvJPnlBh4roSEvNFhNf0
TQXBbQ==
-----END CERTIFICATE-----