This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer
File:                     3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer (raw, json)
Hash identifier:          s3C6TtJpI0EzLEsq50P2eIQFC61V1SPbHm6G8P4GUgc=
Subject key identifier:   3E:4C:E3:FC:0F:15:11:1E:81:7F:6C:E5:26:25:6A:A7:C3:BF:82:8A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       35C03F2AA1D929D0FB900A39AF6F57F5565AD104
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Sep 2025 14:44:20 +0000
Certificate not after:    Mon 14 Sep 2026 14:49:20 +0000
Subordinate resources:    AS: 266502
                          IP: 170.244.172.0/22
                          IP: 2804:38cc::/32
Validation:               Failed, certificate revoked on Sat 20 Sep 2025 16:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c0:3f:2a:a1:d9:29:d0:fb:90:0a:39:af:6f:57:f5:56:5a:d1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 15 14:44:20 2025 GMT
            Not After : Sep 14 14:49:20 2026 GMT
        Subject: CN=3E4CE3FC0F15111E817F6CE526256AA7C3BF828A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:5f:f0:79:94:6b:a8:4d:27:04:8b:df:a4:
                    a4:3b:ee:57:30:06:e1:0b:16:bf:bf:06:ea:ad:c1:
                    5d:71:2c:32:4a:22:78:9d:51:4c:5f:38:88:cd:6d:
                    b6:79:07:cb:70:be:b9:4c:39:cd:95:06:7c:ec:03:
                    ae:ab:5a:7d:ef:08:6a:31:36:89:13:ed:1a:01:09:
                    da:22:0d:0e:ef:4d:61:00:01:45:9e:fc:c3:2b:19:
                    e6:eb:05:14:34:dd:2e:1f:58:ae:b6:80:7a:5b:24:
                    d8:18:97:b1:4c:ce:e4:e3:10:f0:c4:6e:af:9c:4a:
                    21:23:9c:c4:e4:46:6a:35:69:f6:83:3f:09:bc:0f:
                    9e:9a:c2:42:93:c1:4f:3f:82:f2:d8:f3:84:22:2d:
                    71:4f:49:52:3c:f0:7f:a7:8d:00:c1:53:bb:fe:fa:
                    8c:0f:15:32:c9:8d:cd:88:99:67:50:00:6f:b8:9c:
                    b4:a5:ea:37:40:b2:65:1b:f5:a7:d2:bc:16:f1:dc:
                    57:07:36:e9:21:49:97:9b:9c:e0:a2:bb:3d:5a:c9:
                    05:c4:70:a2:90:1f:6f:9e:3f:6a:50:d0:7a:d6:0b:
                    2f:54:38:90:39:17:bd:b8:df:16:2a:ae:24:b2:99:
                    b0:ec:1c:bf:c3:4a:74:bf:8e:d3:99:0d:20:59:db:
                    01:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:4C:E3:FC:0F:15:11:1E:81:7F:6C:E5:26:25:6A:A7:C3:BF:82:8A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.172.0/22
                IPv6:
                  2804:38cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266502

    Signature Algorithm: sha256WithRSAEncryption
         86:c7:4e:27:e3:d0:c8:bd:8f:ff:da:05:d1:35:f2:31:68:e9:
         10:c5:2d:5e:2d:13:00:53:ab:a7:f2:29:15:bf:78:40:04:23:
         ba:5f:1d:7f:e5:ba:d0:62:aa:f4:2b:00:b3:73:b7:96:9e:cb:
         e2:fe:d9:f3:41:df:ad:46:59:73:77:7e:61:f5:8d:80:d1:31:
         7e:c7:1a:17:c3:0e:01:06:d0:00:e0:1b:07:2e:90:48:1d:34:
         f9:9f:dd:a7:6e:3d:0c:9f:ed:7d:fe:78:6e:73:32:ca:61:5b:
         e2:0d:4a:8d:84:2f:89:95:55:3e:1e:63:4d:1f:da:b9:30:00:
         20:d7:44:2e:47:eb:63:89:fb:af:50:06:b6:85:62:11:33:41:
         85:8a:ae:98:64:2a:f8:76:01:7f:d2:93:89:78:de:f7:e8:2e:
         6d:4f:15:ae:e4:d0:d0:14:bb:0b:0a:d1:42:7f:dd:93:2f:13:
         69:d5:cd:44:fb:88:04:09:dc:d4:96:bf:d9:28:4e:2a:f4:6d:
         94:2a:c1:c9:93:04:d7:cd:22:ef:16:ba:f6:1f:f8:f8:22:65:
         a1:e7:ca:58:4f:3b:12:f8:c5:a7:69:72:87:2d:c3:93:7c:f7:
         ed:a2:1a:a1:f3:7d:38:a9:c4:f4:8d:30:2b:0f:1b:6e:9e:d5:
         eb:c4:65:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----