This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer
File:                     3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.cer (raw, json)
Hash identifier:          0+TSGZjGkxtoeWQ6Uu0N/2SJF/txCxzqBo++5eOwGoY=
Subject key identifier:   3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0BBC59976A4141FF8E9AB85F4F8FB1ED7C5699D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Jul 2025 22:41:00 +0000
Certificate not after:    Tue 30 Jun 2026 22:46:00 +0000
Subordinate resources:    AS: 264422
                          IP: 131.221.172.0/22
                          IP: 2804:1e58::/32
Validation:               Failed, certificate revoked on Wed 29 Oct 2025 06:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bc:59:97:6a:41:41:ff:8e:9a:b8:5f:4f:8f:b1:ed:7c:56:99:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  1 22:41:00 2025 GMT
            Not After : Jun 30 22:46:00 2026 GMT
        Subject: CN=3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:d2:04:74:b3:37:30:7f:4d:ce:a9:80:38:
                    ab:8d:77:a2:a8:d6:db:b7:02:ca:1a:01:14:01:24:
                    eb:c4:09:07:df:2d:d4:b1:32:6a:83:b5:5f:a1:bc:
                    7e:01:28:f6:be:1d:c1:fe:92:a2:e8:a4:14:34:2f:
                    8b:ae:2c:ec:73:be:de:97:ae:77:e4:68:c5:ea:a6:
                    0e:b1:e5:af:0f:2e:47:14:b7:80:d8:b2:e4:fe:cc:
                    75:d0:84:60:a8:21:94:ff:50:ad:aa:ec:20:dc:ce:
                    31:76:4a:0f:9c:f7:12:1d:85:88:06:a9:46:c6:3a:
                    74:1e:97:99:b0:9c:37:1e:ad:07:2b:7e:65:a9:cf:
                    5a:4d:41:d8:c9:20:42:16:5b:c2:89:fb:12:29:41:
                    34:91:5b:50:d9:87:4d:db:5a:15:b7:4a:68:7f:65:
                    a5:ef:d4:14:e8:d7:c4:33:bf:61:a6:a7:c2:7e:e4:
                    ac:ee:2b:26:87:59:0f:c7:c7:b5:a2:fe:07:29:66:
                    6f:cd:4d:a1:93:59:4e:40:4e:90:10:06:d5:4c:a5:
                    bf:0d:8f:65:64:30:59:f7:46:94:f2:3c:d1:c9:c3:
                    20:ca:52:e8:07:c2:60:b7:32:17:de:24:2f:33:90:
                    72:e4:51:c2:3f:88:bf:bf:b7:73:9a:0e:5d:e2:61:
                    9b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:D9:97:AE:0E:B7:17:6C:A8:FB:2F:4D:39:FC:6D:5A:97:AB:E4:1E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3ED997AE0EB7176CA8FB2F4D39FC6D5A97ABE41E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.172.0/22
                IPv6:
                  2804:1e58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264422

    Signature Algorithm: sha256WithRSAEncryption
         a9:ff:cb:46:14:e7:1d:db:5b:7e:1e:04:55:1f:b2:d8:c1:c2:
         22:98:07:c7:b2:84:23:8c:bc:56:da:91:b9:68:3b:76:8b:b3:
         6d:9d:03:d2:88:e5:c8:68:c8:ef:7e:8a:85:05:a9:e7:50:3c:
         26:f3:d3:bb:d2:79:ba:50:41:ed:23:73:fd:04:5b:a1:9d:a7:
         a5:4b:3a:07:da:09:3a:22:bd:b6:3c:73:c0:f8:2a:d0:cc:fd:
         cf:d2:85:f6:6b:4e:60:80:26:c2:e3:51:5d:dc:7d:05:3e:72:
         1c:db:08:79:30:d6:cf:93:fc:16:51:6a:6a:08:81:01:85:71:
         8b:19:99:c5:9b:2f:86:21:24:8b:b7:86:f3:04:31:f6:3f:22:
         b1:43:10:d9:ef:5a:af:ac:80:c4:45:52:af:48:0f:f3:65:69:
         d7:b5:24:0d:df:22:29:46:4e:4f:2c:ca:8e:e7:a6:30:b5:bd:
         5d:2a:ed:2f:05:8c:72:a8:57:fb:b6:41:b8:bb:d7:08:5d:f6:
         61:d1:4a:0e:6e:24:1b:3e:dd:f8:f8:44:9c:01:42:03:c2:b1:
         3d:fc:95:8c:5c:49:3a:f4:6c:2f:28:1c:4a:10:35:8a:59:3d:
         54:72:20:84:22:37:49:04:4a:0e:2d:a6:73:bb:f9:d7:8d:5b:
         5b:97:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----