This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2136E155D06409C9B152A82F24B3CCCDF3692097.cer
File:                     2136E155D06409C9B152A82F24B3CCCDF3692097.cer (raw, json)
Hash identifier:          mlV9FjnicoXKehLG1MjVvWHrVAfHE82c91oOjwkP2Fg=
Subject key identifier:   21:36:E1:55:D0:64:09:C9:B1:52:A8:2F:24:B3:CC:CD:F3:69:20:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1E6EB052DA8B161544A7B163B0E9B7DFF01CA4C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/2136E155D06409C9B152A82F24B3CCCDF3692097.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 May 2025 22:12:54 +0000
Certificate not after:    Fri 15 May 2026 22:17:54 +0000
Subordinate resources:    AS: 267157
                          IP: 45.230.120.0/22
                          IP: 2804:48fc::/32
Validation:               Failed, certificate revoked on Sat 11 Oct 2025 04:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6e:b0:52:da:8b:16:15:44:a7:b1:63:b0:e9:b7:df:f0:1c:a4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 22:12:54 2025 GMT
            Not After : May 15 22:17:54 2026 GMT
        Subject: CN=2136E155D06409C9B152A82F24B3CCCDF3692097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:bb:5e:c0:a7:8b:af:ce:15:6d:ea:97:ea:
                    dd:48:24:f1:a7:37:52:04:b2:9f:d1:8f:c9:69:c1:
                    55:db:8c:2a:23:f2:95:49:c6:b4:ac:3c:58:70:2d:
                    52:dd:09:b8:0d:f8:22:bf:8a:76:3f:4e:b9:f7:b0:
                    fb:3c:14:cd:9c:90:d4:44:49:4d:09:1e:ec:3d:dd:
                    7c:cf:1c:59:9d:5e:97:46:91:3d:bd:57:2b:93:f7:
                    2d:40:cb:bd:65:ec:d3:18:b0:40:b3:d9:dc:c5:a4:
                    16:1a:2a:32:c6:df:e1:c7:9f:ae:49:23:c9:14:08:
                    70:ea:4b:83:77:15:47:3d:5b:16:94:01:64:79:7a:
                    bd:ee:34:e1:db:ec:a8:9f:40:9d:01:d6:23:0f:c1:
                    fb:86:09:2d:4d:ae:47:be:d6:33:2e:36:64:cc:09:
                    25:62:62:b9:1a:ce:4f:ba:a3:7b:df:f7:00:21:fe:
                    93:6d:1b:3d:d7:ad:18:47:d9:ef:9d:18:4e:7d:ad:
                    00:56:a3:ea:1f:10:db:c3:d7:78:e0:18:40:e3:e5:
                    66:22:30:67:28:08:dc:80:ce:81:0a:f4:8a:7a:30:
                    6f:9e:48:dc:37:b0:fd:5e:e5:5c:47:bd:ae:ad:be:
                    d7:ad:e9:2d:cf:ab:89:42:eb:c3:c9:d4:ca:05:4c:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:36:E1:55:D0:64:09:C9:B1:52:A8:2F:24:B3:CC:CD:F3:69:20:97
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/2136E155D06409C9B152A82F24B3CCCDF3692097.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.120.0/22
                IPv6:
                  2804:48fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267157

    Signature Algorithm: sha256WithRSAEncryption
         b2:88:92:bd:71:0e:c9:aa:09:2b:3a:4b:16:c3:aa:14:e7:05:
         48:c3:92:40:64:e1:cd:22:19:c7:07:95:32:5f:dd:3a:1c:5b:
         6b:ee:9c:45:bd:2d:5c:27:33:5c:2e:5a:ab:c3:40:43:e2:1d:
         7c:c7:e0:83:80:96:ec:78:73:a7:f8:58:96:34:71:09:2a:7e:
         64:7f:c9:76:ca:94:31:63:71:5e:a6:39:52:4e:6b:8a:9c:24:
         5f:0f:f1:38:41:e0:41:25:96:b7:e3:5b:60:c1:43:79:65:91:
         24:e7:b7:da:ce:63:17:b7:9d:36:14:c3:a2:e8:f5:c5:26:af:
         98:85:40:2f:9f:6b:77:16:7e:8a:81:40:00:bc:2a:e0:9f:e1:
         24:bd:43:08:fa:88:e4:cb:e8:a3:86:84:41:5e:db:2d:a4:a5:
         49:6e:17:29:3d:6d:4f:1f:ee:95:54:ac:17:da:08:b4:8b:cc:
         d8:cb:18:d1:af:a4:00:de:55:67:c6:92:0d:03:22:3e:af:fd:
         43:d3:71:8d:cd:8b:3e:9d:67:38:eb:1c:84:4e:0b:4f:80:31:
         28:7d:9c:aa:30:2e:40:d1:56:e2:2b:c0:4d:18:1f:9d:a7:35:
         fe:f5:6f:e4:08:a9:c3:c6:ab:37:35:98:d7:ee:75:69:18:3c:
         48:57:b9:18
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUHm6wUtqLFhVEp7FjsOm33/AcpMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA1MTYyMjEyNTRaFw0yNjA1MTUyMjE3NTRaMDMxMTAvBgNV
BAMTKDIxMzZFMTU1RDA2NDA5QzlCMTUyQTgyRjI0QjNDQ0NERjM2OTIwOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFz7tewKeLr84VbeqX6t1IJPGn
N1IEsp/Rj8lpwVXbjCoj8pVJxrSsPFhwLVLdCbgN+CK/inY/Trn3sPs8FM2ckNRE
SU0JHuw93XzPHFmdXpdGkT29VyuT9y1Ay71l7NMYsECz2dzFpBYaKjLG3+HHn65J
I8kUCHDqS4N3FUc9WxaUAWR5er3uNOHb7KifQJ0B1iMPwfuGCS1Nrke+1jMuNmTM
CSViYrkazk+6o3vf9wAh/pNtGz3XrRhH2e+dGE59rQBWo+ofENvD13jgGEDj5WYi
MGcoCNyAzoEK9Ip6MG+eSNw3sP1e5VxHva6tvtet6S3Pq4lC68PJ1MoFTMZPAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhNuFV0GQJybFS
qC8ks8zN82kglzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0VX
WEhvVGlKazY1SlhFTnhwcDdXSktHTTRid3YxUlM1bU1lYVNoZUwxNFcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NF
V1hIb1RpSms2NUpYRU54cHA3V0pLR000Ynd2MVJTNW1NZWFTaGVMMTRXLzAvMjEz
NkUxNTVEMDY0MDlDOUIxNTJBODJGMjRCM0NDQ0RGMzY5MjA5Ny5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeZ4MA0EAgACMAcDBQAoBEj8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQTlTANBgkqhkiG9w0BAQsFAAOCAQEAsoiSvXEOyaoJKzpL
FsOqFOcFSMOSQGThzSIZxweVMl/dOhxba+6cRb0tXCczXC5aq8NAQ+IdfMfgg4CW
7Hhzp/hYljRxCSp+ZH/JdsqUMWNxXqY5Uk5ripwkXw/xOEHgQSWWt+NbYMFDeWWR
JOe32s5jF7edNhTDouj1xSavmIVAL59rdxZ+ioFAALwq4J/hJL1DCPqI5Mvoo4aE
QV7bLaSlSW4XKT1tTx/ulVSsF9oItIvM2MsY0a+kAN5VZ8aSDQMiPq/9Q9Nxjc2L
Pp1nOOschE4LT4AxKH2cqjAuQNFW4ivATRgfnac1/vVv5Aipw8arNzWY1+51aRg8
SFe5GA==
-----END CERTIFICATE-----