This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.cer
File:                     209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.cer (raw, json)
Hash identifier:          iPyfkId6Wu03ysZ8zwqSq7muBkzrGhqY2cuzy1wfnHM=
Subject key identifier:   20:9E:FD:90:83:A9:4B:4F:B5:3B:E8:E7:24:DD:5F:23:19:AD:EC:09
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       40898B5546F6609E46192EF9BA181FEBE963F415
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 10:07:46 +0000
Certificate not after:    Thu 05 Mar 2026 10:12:46 +0000
Subordinate resources:    AS: 268298
                          IP: 45.237.208.0/22
                          IP: 2804:4f04::/32
Validation:               Failed, certificate revoked on Mon 23 Jun 2025 12:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:89:8b:55:46:f6:60:9e:46:19:2e:f9:ba:18:1f:eb:e9:63:f4:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 10:07:46 2025 GMT
            Not After : Mar  5 10:12:46 2026 GMT
        Subject: CN=209EFD9083A94B4FB53BE8E724DD5F2319ADEC09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:43:c1:93:67:82:e6:b4:7e:86:05:9d:ce:5c:
                    98:26:14:fb:b5:5a:53:99:49:93:e6:4e:b1:6d:ef:
                    f2:b3:9e:f4:52:99:cd:af:74:fb:9e:41:8d:bf:26:
                    2f:65:f8:28:97:8f:91:3c:56:44:94:a5:68:c7:7a:
                    aa:40:41:61:be:ab:ad:11:f0:44:d9:0d:f2:50:d5:
                    3f:ab:1c:37:92:ce:6c:37:69:5b:20:b1:62:f2:d5:
                    40:15:c0:10:b9:bf:d5:d6:76:78:27:b6:1c:db:25:
                    ca:3a:94:ed:85:16:38:98:20:23:e9:df:0d:6a:67:
                    07:b3:33:66:db:c8:ee:2b:15:8e:91:6d:b1:c0:4f:
                    05:6e:eb:3e:3c:41:2b:ce:55:88:a7:4f:01:ce:15:
                    a1:82:46:52:a9:1d:36:b6:b0:33:66:7e:86:9c:4f:
                    bd:d2:50:39:32:c8:39:73:8f:51:b0:34:5a:ca:50:
                    d5:f1:ad:5d:1b:f7:2c:62:a2:b0:30:23:76:3b:3d:
                    ce:6f:ac:11:40:f3:1c:c1:b6:74:db:07:f9:a9:66:
                    a2:b8:75:2b:65:24:52:98:2e:d1:d1:d0:1c:32:68:
                    21:d0:e7:bc:dc:0a:a1:17:ba:cd:2d:ec:ac:e4:6e:
                    5d:75:1d:47:3d:d8:ce:ac:a8:5c:02:f5:a2:e6:d6:
                    c9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:9E:FD:90:83:A9:4B:4F:B5:3B:E8:E7:24:DD:5F:23:19:AD:EC:09
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.208.0/22
                IPv6:
                  2804:4f04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268298

    Signature Algorithm: sha256WithRSAEncryption
         9f:db:80:52:b8:88:06:8f:0a:d3:58:3c:27:11:5f:8e:04:53:
         f6:ad:9d:d4:9d:ff:a0:11:90:3b:c0:8d:19:d5:61:a2:c2:68:
         c5:d6:22:13:4d:b4:fb:8b:e8:b2:50:aa:31:95:61:53:03:9e:
         8c:77:57:db:4b:94:36:06:b4:b9:f0:9b:13:b1:bf:48:65:9b:
         15:cc:5b:1f:e4:b5:fb:e7:ff:fd:20:de:c5:c8:95:61:3a:51:
         f6:79:59:cb:93:9d:39:e3:d2:44:ec:d2:b8:83:51:d6:5e:05:
         4b:b6:d4:f6:e3:86:92:26:56:e6:27:f3:12:18:c4:06:f6:9e:
         c9:0b:35:80:c3:ec:f2:01:d6:b8:f6:d9:28:c6:96:a4:be:d2:
         ff:0d:55:1b:a8:31:81:28:a9:54:b0:a0:9c:0f:7a:17:67:fa:
         76:2f:c2:dd:ad:98:07:29:73:2d:ae:19:68:31:7e:a2:32:f9:
         4d:f7:6a:c3:b8:69:b9:0e:0b:a7:82:e4:cc:2a:f9:11:de:57:
         6f:67:9f:83:c1:36:8e:00:a2:cc:b5:e4:7d:55:a7:78:7e:ba:
         79:f2:af:41:9d:eb:b7:1e:27:be:6a:f2:63:c7:6f:8b:41:c4:
         31:fa:b5:bf:48:c6:da:ae:27:c9:7e:0f:ce:7c:b9:48:b7:ea:
         35:69:c3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----