This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer
File:                     46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer (raw, json)
Hash identifier:          9Dv94WviIfbGxzCJOIZGT8nV6UoczXVQ9Qv4hRvmqpU=
Subject key identifier:   46:D2:B3:19:40:62:7B:8D:A0:E1:40:5B:FD:28:13:DB:97:71:1E:0A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5054195933A3B10B524E7FB6B59914D61A7118BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Apr 2025 11:08:35 +0000
Certificate not after:    Fri 24 Apr 2026 11:13:35 +0000
Subordinate resources:    AS: 271175
                          IP: 179.51.176.0/22
                          IP: 2804:7764::/32
Validation:               Failed, certificate revoked on Thu 30 Oct 2025 04:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:54:19:59:33:a3:b1:0b:52:4e:7f:b6:b5:99:14:d6:1a:71:18:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 25 11:08:35 2025 GMT
            Not After : Apr 24 11:13:35 2026 GMT
        Subject: CN=46D2B31940627B8DA0E1405BFD2813DB97711E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:83:c8:69:40:94:16:fd:75:16:d6:70:c9:90:
                    85:18:72:b8:06:d0:f1:21:cc:96:89:41:2d:ba:c1:
                    02:0a:ac:b2:06:88:39:94:72:e0:9e:15:1b:f0:a7:
                    04:e6:c9:60:aa:79:36:fa:18:e3:2a:37:4b:e5:2b:
                    62:d6:06:e1:16:9f:17:e5:af:f0:d1:37:8f:a7:b7:
                    32:e6:83:c1:f6:16:36:48:f2:da:16:98:c0:ee:6c:
                    03:b9:d5:6c:98:c8:14:44:7d:55:04:55:1a:21:e3:
                    b8:c9:c8:93:55:2a:49:09:4a:36:44:f5:a3:33:78:
                    de:6d:cd:99:03:d3:0f:b2:9a:44:00:59:0e:02:b5:
                    79:4f:08:f6:30:69:9d:86:76:9e:32:f1:99:2e:88:
                    69:7e:5b:4e:4c:dd:b6:28:8d:10:84:c1:b4:e9:9a:
                    38:9b:8e:e1:6b:7d:a5:9f:22:aa:07:b6:8d:fd:25:
                    95:51:eb:47:7a:1a:8c:7c:0c:71:a1:3f:bc:47:fc:
                    7e:db:8f:86:c1:68:22:41:b8:87:61:1f:ec:01:ed:
                    43:e3:e5:89:82:ed:c7:b3:71:1b:b5:c3:b6:f9:8d:
                    cd:d2:40:ea:4e:9c:b2:a5:61:87:49:4f:cf:23:8a:
                    52:18:ed:6a:5e:e8:a2:c4:42:76:56:1a:87:13:4d:
                    ff:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:D2:B3:19:40:62:7B:8D:A0:E1:40:5B:FD:28:13:DB:97:71:1E:0A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.176.0/22
                IPv6:
                  2804:7764::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271175

    Signature Algorithm: sha256WithRSAEncryption
         c0:f1:aa:df:18:80:39:4d:21:d2:32:52:22:bb:9a:09:a3:99:
         cb:04:c6:14:a1:8a:f2:86:9c:9e:13:0a:6d:05:f7:45:30:6c:
         48:52:a6:f8:ff:cf:92:df:1e:24:ec:a2:82:86:d7:aa:e9:71:
         d8:41:b6:a6:ed:48:5d:78:8e:fa:93:20:6c:1b:e5:62:28:69:
         a4:d5:5f:81:64:f6:eb:88:22:9e:2b:26:7c:6b:b5:03:46:15:
         fc:09:cd:a4:de:25:05:2d:a4:2b:41:f6:f2:ba:6b:f2:15:c5:
         11:08:b2:15:6a:aa:fa:8b:a7:01:32:21:e9:3f:18:e9:d3:44:
         d4:7c:a1:1b:15:1a:0f:6e:51:d3:4d:a8:52:3e:dd:f7:46:74:
         20:d9:fd:96:f2:39:29:91:d8:7f:81:0e:4c:f7:d6:80:cb:c9:
         ed:30:8d:d7:90:05:ab:45:39:10:df:d9:19:c4:cd:20:05:3e:
         3e:fb:e0:65:95:66:61:99:f3:14:bd:ff:17:c8:ae:3d:45:b3:
         82:e2:1e:59:65:51:cb:13:77:07:9f:a7:b8:6a:9f:ee:6a:34:
         2d:89:13:eb:62:44:c0:97:7d:12:4c:40:c5:6b:f9:3f:43:6f:
         36:89:0a:b7:4e:b1:f8:cf:46:19:30:75:80:b7:af:a7:13:e3:
         53:91:98:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----