This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer
File:                     4B238277BD4501DC3B75403E74D8B541B7643097.cer (raw, json)
Hash identifier:          7zU5xnkvyLFI/ZW7n18qFjL01AyYN+E5DSCmeHk0V8c=
Subject key identifier:   4B:23:82:77:BD:45:01:DC:3B:75:40:3E:74:D8:B5:41:B7:64:30:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       502A999EB2BC64A3723920A0EFD974A59510F1F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Apr 2025 20:23:42 +0000
Certificate not after:    Thu 16 Apr 2026 20:28:42 +0000
Subordinate resources:    AS: 271626
                          IP: 181.189.80.0/22
                          IP: 2804:7e78::/32
Validation:               Failed, certificate revoked on Sun 05 Oct 2025 08:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2a:99:9e:b2:bc:64:a3:72:39:20:a0:ef:d9:74:a5:95:10:f1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 17 20:23:42 2025 GMT
            Not After : Apr 16 20:28:42 2026 GMT
        Subject: CN=4B238277BD4501DC3B75403E74D8B541B7643097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:17:46:fd:e4:cf:bf:3a:12:54:84:ab:8a:
                    9c:01:c9:4d:98:b9:ac:d5:dc:d3:6b:e0:38:fe:b2:
                    35:52:86:12:77:5b:1e:6a:d0:73:fe:9d:c6:a7:45:
                    95:d0:75:6d:95:92:2e:78:ed:85:17:14:79:0e:d1:
                    10:92:f4:fd:44:0c:99:65:bd:b4:77:70:46:82:c2:
                    fe:9e:76:19:f1:5c:d9:50:22:8f:59:3d:df:22:3d:
                    ad:9e:b4:61:ac:e7:b5:a5:c3:9d:78:6a:0a:4d:c6:
                    16:cf:20:13:ad:7a:4e:6b:67:08:65:bc:1d:15:8f:
                    00:32:48:62:69:16:f7:8b:d5:22:ba:06:19:0c:34:
                    e2:a0:b0:42:6e:f1:5f:a0:22:99:28:c9:23:0e:02:
                    16:0a:df:c5:05:98:63:7e:8d:0a:92:a0:3f:8d:a1:
                    a0:39:70:78:07:56:2c:6c:a2:8f:8e:fe:bc:43:bb:
                    77:2a:68:6d:d8:3b:2d:57:19:e0:88:75:70:37:ad:
                    54:ae:9c:6e:8e:2f:ea:39:94:38:79:f6:d5:a5:8b:
                    dc:ce:d1:42:dd:8f:51:ac:60:f3:0a:3c:10:12:b3:
                    fd:fa:a1:2d:8e:d2:6f:32:5c:45:c2:49:e2:ba:01:
                    27:5b:25:3b:14:3d:85:03:9f:29:c0:80:7e:f4:e2:
                    59:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:23:82:77:BD:45:01:DC:3B:75:40:3E:74:D8:B5:41:B7:64:30:97
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.80.0/22
                IPv6:
                  2804:7e78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271626

    Signature Algorithm: sha256WithRSAEncryption
         a5:c0:c9:f1:40:60:ca:69:42:31:47:bf:84:40:9d:0b:ff:36:
         b4:c6:f8:52:28:97:d0:ff:67:53:d0:7c:9e:a1:0f:73:ca:47:
         78:45:de:67:1a:0c:f1:44:7a:44:7f:a4:a6:ae:b3:c5:72:26:
         15:7c:6c:9b:ec:a2:f5:5b:7f:2f:b5:e6:3a:f6:99:5c:2a:bb:
         c2:7a:54:e0:cd:26:62:24:6f:06:00:d5:a8:08:12:a4:f3:31:
         6d:76:eb:13:47:33:bc:27:67:62:4f:d5:ae:e4:b8:de:c8:8a:
         e0:09:a8:ec:a2:b8:1b:ac:83:7b:fd:98:f8:01:4d:56:6a:04:
         54:b8:e8:4c:17:0b:57:20:75:48:f6:06:f8:80:66:db:d8:c9:
         70:80:8e:f2:02:c7:f9:0c:74:16:15:73:c8:ee:e4:6c:29:9a:
         fe:b6:1f:63:04:ef:92:45:9c:3f:78:ba:44:04:a0:10:d7:2c:
         ae:54:a5:92:7b:3c:f9:cc:bc:10:13:f8:f1:b6:27:ff:28:f0:
         4c:54:72:9a:26:61:f5:1f:6f:57:5d:e8:c0:d7:88:b2:c4:67:
         b8:bd:31:a0:fe:7f:bc:ce:bd:b7:e6:cd:3e:d9:24:c8:85:2b:
         a8:0b:f2:a6:6e:e4:69:c5:f9:e0:74:25:e8:07:ab:cc:13:26:
         36:94:db:6c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUUCqZnrK8ZKNyOSCg79l0pZUQ8fcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MTcyMDIzNDJaFw0yNjA0MTYyMDI4NDJaMDMxMTAvBgNV
BAMTKDRCMjM4Mjc3QkQ0NTAxREMzQjc1NDAzRTc0RDhCNTQxQjc2NDMwOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjmRdG/eTPvzoSVISripwByU2Y
uazV3NNr4Dj+sjVShhJ3Wx5q0HP+ncanRZXQdW2Vki547YUXFHkO0RCS9P1EDJll
vbR3cEaCwv6edhnxXNlQIo9ZPd8iPa2etGGs57Wlw514agpNxhbPIBOtek5rZwhl
vB0VjwAySGJpFveL1SK6BhkMNOKgsEJu8V+gIpkoySMOAhYK38UFmGN+jQqSoD+N
oaA5cHgHVixsoo+O/rxDu3cqaG3YOy1XGeCIdXA3rVSunG6OL+o5lDh59tWli9zO
0ULdj1GsYPMKPBASs/36oS2O0m8yXEXCSeK6ASdbJTsUPYUDnynAgH704lmZAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLI4J3vUUB3Dt1
QD502LVBt2QwlzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVhQ
WlFVN3BqV3pUd2I0N2E1TXpHdTJNdFNQTkh5RXZrbm9halVnRFBTbmgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVY
UFpRVTdwald6VHdiNDdhNU16R3UyTXRTUE5IeUV2a25vYWpVZ0RQU25oLzAvNEIy
MzgyNzdCRDQ1MDFEQzNCNzU0MDNFNzREOEI1NDFCNzY0MzA5Ny5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCtb1QMA0EAgACMAcDBQAoBH54MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQlCjANBgkqhkiG9w0BAQsFAAOCAQEApcDJ8UBgymlCMUe/
hECdC/82tMb4UiiX0P9nU9B8nqEPc8pHeEXeZxoM8UR6RH+kpq6zxXImFXxsm+yi
9Vt/L7XmOvaZXCq7wnpU4M0mYiRvBgDVqAgSpPMxbXbrE0czvCdnYk/VruS43siK
4Amo7KK4G6yDe/2Y+AFNVmoEVLjoTBcLVyB1SPYG+IBm29jJcICO8gLH+Qx0FhVz
yO7kbCma/rYfYwTvkkWcP3i6RASgENcsrlSlkns8+cy8EBP48bYn/yjwTFRymiZh
9R9vV13owNeIssRnuL0xoP5/vM69t+bNPtkkyIUrqAvypm7kacX54HQl6AerzBMm
NpTbbA==
-----END CERTIFICATE-----