This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
File:                     4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer (raw, json)
Hash identifier:          xeaX+8rFZLgU02YiBgw4qmZsqqWLzJEmjrS4NeMSnuE=
Subject key identifier:   4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       27D92CA292CFABF50E0D4E322239E158868ECD8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Feb 2025 00:12:50 +0000
Certificate not after:    Wed 25 Feb 2026 00:17:50 +0000
Subordinate resources:    AS: 269528
                          IP: 45.187.64.0/22
                          IP: 2804:6604::/32
Validation:               Failed, certificate revoked on Tue 12 Aug 2025 11:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d9:2c:a2:92:cf:ab:f5:0e:0d:4e:32:22:39:e1:58:86:8e:cd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 26 00:12:50 2025 GMT
            Not After : Feb 25 00:17:50 2026 GMT
        Subject: CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e8:42:cb:cf:f6:d7:26:72:09:d0:89:37:50:
                    3c:02:cb:de:92:72:9c:6f:97:db:46:35:85:e9:0e:
                    fd:b1:75:16:d0:2a:07:6d:24:c1:64:be:dd:5f:6e:
                    ea:97:ac:67:3b:84:43:99:0e:24:87:a6:ce:33:fa:
                    76:0b:30:6e:a4:62:59:c2:2e:62:39:ac:a9:f2:dc:
                    80:b7:2b:f1:b8:47:93:6b:72:54:2f:1d:df:70:2e:
                    b7:2d:c5:5b:e1:02:e3:b1:89:cb:4d:0c:74:94:87:
                    f6:fb:07:d8:85:cf:c9:86:3d:46:dc:05:e8:92:bf:
                    f1:00:9b:3d:3f:ae:7f:02:c5:d6:d1:20:51:da:2c:
                    c4:4f:1f:2c:de:3b:26:f3:b1:af:1c:42:6f:b7:ce:
                    2c:9f:76:3c:10:5e:ee:da:96:88:b7:40:dc:e4:77:
                    e1:bd:81:d7:c8:3b:fd:05:d8:b3:64:65:63:b4:b2:
                    9c:9c:bb:2d:48:35:6c:7f:ca:9e:07:0f:05:bc:1e:
                    fb:44:f0:c1:41:70:41:fa:17:33:1a:4c:1e:49:94:
                    4a:56:b1:71:03:a8:a0:09:4c:86:1e:5e:31:17:6e:
                    f6:e9:75:15:2b:39:10:d4:04:e5:7d:25:01:8a:0e:
                    53:33:68:80:56:40:f2:c3:fb:dc:38:ca:82:61:fc:
                    0e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.64.0/22
                IPv6:
                  2804:6604::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269528

    Signature Algorithm: sha256WithRSAEncryption
         5a:d9:14:54:bb:85:51:31:73:8e:8d:08:84:d2:1b:c8:83:a1:
         c6:49:91:af:67:65:c4:1e:32:69:3a:15:fc:01:32:b0:97:67:
         59:03:9c:ce:19:85:8e:00:d9:ed:b0:a1:77:c9:3b:b8:0c:ab:
         01:11:2a:aa:b1:5e:df:ca:c4:b9:98:29:50:67:25:5f:57:f1:
         42:8a:cc:8c:b4:fc:34:9b:5e:10:de:b9:a7:d3:cc:fe:3b:db:
         89:ae:5b:8a:95:40:65:dd:13:b3:f9:b5:02:02:f5:b8:08:89:
         3c:7b:4a:63:ba:9c:9b:5b:fd:d2:c2:46:59:c8:e1:50:9c:31:
         d2:e4:1a:62:96:41:ef:8c:c0:93:b3:a1:c6:c7:2c:3d:20:4f:
         ba:78:22:65:84:4b:29:e3:67:2e:b2:e2:2b:ad:85:52:2f:69:
         d6:c1:a6:e0:c3:2a:10:f2:28:c6:25:7c:e9:3c:7e:5d:73:36:
         21:79:0a:01:c6:23:37:ea:0b:ae:03:13:ff:04:9a:ef:d4:d8:
         40:e0:33:1a:7a:58:db:3a:d5:45:01:74:a2:3b:37:44:64:54:
         03:e9:61:88:d4:ad:02:99:1b:fe:57:1a:54:52:97:27:77:07:
         eb:89:62:fe:4d:53:01:9d:e5:74:bf:cd:40:34:cb:48:8c:7e:
         d7:06:6e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----