This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/202EC960E4D30720082CD719E1E72E6A76C5343A.cer
File:                     202EC960E4D30720082CD719E1E72E6A76C5343A.cer (raw, json)
Hash identifier:          3f7CHT1jySN2k3+OEaKXFkT1d2bNxpX6+awqCmIuWpo=
Subject key identifier:   20:2E:C9:60:E4:D3:07:20:08:2C:D7:19:E1:E7:2E:6A:76:C5:34:3A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1E16D2208BB016A29BB19CEDC8BD40E269BBD598
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/202EC960E4D30720082CD719E1E72E6A76C5343A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Oct 2025 11:26:03 +0000
Certificate not after:    Mon 05 Oct 2026 11:31:03 +0000
Subordinate resources:    AS: 267610
                          IP: 45.70.248.0/22
                          IP: 2804:4438::/32
Validation:               Failed, certificate revoked on Sat 11 Oct 2025 15:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:16:d2:20:8b:b0:16:a2:9b:b1:9c:ed:c8:bd:40:e2:69:bb:d5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  6 11:26:03 2025 GMT
            Not After : Oct  5 11:31:03 2026 GMT
        Subject: CN=202EC960E4D30720082CD719E1E72E6A76C5343A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:39:91:42:ba:8a:32:02:45:3a:88:7d:a6:cc:
                    fc:6a:81:11:36:85:10:e8:32:e9:f3:ab:08:58:7b:
                    62:22:a0:5d:58:e2:fe:d9:ee:01:1a:8e:53:68:53:
                    52:ff:03:23:1d:c4:ed:84:d9:f2:9f:a9:55:ae:c3:
                    d6:d6:c0:41:2e:28:5f:b4:60:7a:ca:a9:73:a2:95:
                    03:ec:da:f9:0a:c6:09:29:aa:33:eb:e9:ea:0c:8b:
                    6b:60:30:4d:c5:f0:88:b9:a8:03:60:82:ea:28:8c:
                    e2:82:ac:cc:52:f8:b7:ee:95:9d:03:dc:54:97:60:
                    3c:cb:20:95:19:2a:88:de:55:e3:8e:96:f4:4c:66:
                    14:8d:8a:73:16:d6:ef:65:c7:4d:7d:92:d8:aa:c8:
                    14:e4:16:08:7b:e3:9a:76:02:9e:1e:bf:74:fe:f9:
                    78:4e:6f:13:42:09:17:d3:75:2a:3f:14:52:2e:f9:
                    cd:63:c6:25:aa:71:cc:7c:37:83:c5:4e:c8:c9:cb:
                    46:f4:12:ae:7b:ef:df:29:f5:67:65:7c:15:5c:6f:
                    e1:36:f7:9a:6a:d6:98:87:9a:11:59:fb:69:88:2c:
                    4a:31:4f:09:0b:19:40:fe:f1:c3:7d:7d:06:bf:99:
                    c4:2f:fa:74:8f:3f:26:19:bb:be:ae:0c:53:b9:6d:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:2E:C9:60:E4:D3:07:20:08:2C:D7:19:E1:E7:2E:6A:76:C5:34:3A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/202EC960E4D30720082CD719E1E72E6A76C5343A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.248.0/22
                IPv6:
                  2804:4438::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267610

    Signature Algorithm: sha256WithRSAEncryption
         d5:30:f5:b8:d1:b9:68:38:69:fd:17:30:7a:8e:6b:9e:36:b0:
         14:9e:ed:7d:09:b8:58:bf:bc:c9:e3:2e:54:2f:5b:b6:a4:9a:
         70:b3:43:3d:69:fd:43:51:ed:52:05:40:a7:2b:ab:6a:5d:4a:
         60:90:61:64:90:c2:37:be:2a:37:69:35:50:d8:ff:d3:7e:52:
         1b:de:3e:12:da:f1:c4:8e:49:cb:81:8b:e0:07:2e:21:22:d8:
         c9:13:51:74:d4:3c:4f:5f:49:88:ed:42:2f:3c:af:bf:0f:0a:
         f7:89:01:a7:77:2e:97:4a:6f:75:77:f5:f8:5d:fe:a7:a9:12:
         36:95:45:cc:ca:d6:b8:32:84:c7:42:ea:9c:c2:0f:55:b2:e1:
         b6:1d:3d:4a:ea:91:6e:4e:e1:76:92:3d:00:ee:8f:52:6f:56:
         1d:5a:4c:4a:a3:2a:35:8f:ed:08:d1:d5:36:41:f6:30:d3:d2:
         1d:8f:44:85:c6:5b:cd:bf:14:a9:6c:35:8f:e0:ff:63:61:5c:
         bf:ad:aa:63:6e:92:c5:79:e3:d9:ef:91:d8:f2:9c:54:b6:ba:
         bd:59:69:c6:d2:2d:34:75:f0:14:f6:d1:c9:fd:bf:60:27:7c:
         81:2e:27:33:6d:a7:21:dd:b8:3a:93:e0:e3:55:5d:41:07:f0:
         3b:0e:0b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----