This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.cer
File:                     5196AC1F82B6DD9F736E549759F63EC70D9AC64A.cer (raw, json)
Hash identifier:          Ol97/Nh497SLPvANX5Cp1G+PFzSWP4GbHN1Zk/QjWX0=
Subject key identifier:   51:96:AC:1F:82:B6:DD:9F:73:6E:54:97:59:F6:3E:C7:0D:9A:C6:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       207B0A504F6EF13C06D7F2570AB00D985B20F0FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Sep 2025 20:37:17 +0000
Certificate not after:    Mon 14 Sep 2026 20:42:17 +0000
Subordinate resources:    AS: 273436
                          IP: 2804:8e98::/32
Validation:               Failed, certificate revoked on Tue 16 Sep 2025 20:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7b:0a:50:4f:6e:f1:3c:06:d7:f2:57:0a:b0:0d:98:5b:20:f0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 15 20:37:17 2025 GMT
            Not After : Sep 14 20:42:17 2026 GMT
        Subject: CN=5196AC1F82B6DD9F736E549759F63EC70D9AC64A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:14:88:7a:0a:6f:d2:9b:ff:71:eb:b9:b0:
                    6f:6b:06:ff:e7:60:df:d3:6a:ba:83:39:19:cb:b6:
                    48:ef:90:18:b1:27:e1:48:09:cf:f6:67:e4:03:82:
                    d5:e1:84:1f:75:92:d1:d3:cc:c5:35:94:9a:5f:5a:
                    76:0a:41:24:95:e1:fb:bc:13:f1:b3:6c:df:8e:4a:
                    3c:41:fe:bd:f6:1c:55:a6:03:86:68:ce:55:eb:0c:
                    b0:32:e0:67:41:9c:dd:96:3b:cd:7a:82:10:59:85:
                    97:6b:81:54:86:f2:d6:54:43:62:43:02:04:56:d0:
                    09:13:d6:5a:cb:ac:f0:a8:32:70:b6:06:ca:de:38:
                    29:fc:95:7a:57:37:2a:33:bc:8e:92:3e:22:e2:54:
                    e3:4a:2d:70:cb:ff:34:56:b3:1e:b0:ec:27:81:24:
                    2f:bc:35:66:27:1c:9f:31:6b:f1:56:5c:c1:71:e0:
                    67:9e:e9:76:ba:e9:1d:10:fc:a2:07:4a:69:09:7d:
                    ff:b6:ed:69:7a:f0:14:fc:81:76:8d:0c:8b:a9:64:
                    5d:37:03:1e:df:67:af:3e:42:61:d7:f7:e6:13:76:
                    79:25:fc:ed:c3:85:a8:4f:59:3b:34:23:54:f1:ca:
                    c3:ff:ee:e0:8e:20:87:cf:6d:8f:7b:37:10:50:1d:
                    be:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:96:AC:1F:82:B6:DD:9F:73:6E:54:97:59:F6:3E:C7:0D:9A:C6:4A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273436

    Signature Algorithm: sha256WithRSAEncryption
         1b:11:63:47:ed:b8:47:db:29:c1:71:3b:b6:90:d0:fa:6a:9c:
         0e:33:44:6b:02:1c:b1:22:07:3a:d4:76:38:95:07:b2:bd:7a:
         03:58:39:8e:c3:4d:8c:93:84:7c:c4:2a:d7:20:3a:40:06:25:
         6a:8b:5c:ed:5d:bd:b4:0e:df:ff:ee:84:b7:d6:02:f6:b4:66:
         a7:c5:04:5f:e2:aa:5c:c1:85:2e:11:b9:22:35:5e:d9:9c:7d:
         d7:5c:0d:fe:f8:8f:54:ed:77:f1:7b:0b:65:34:9b:05:0a:4a:
         5c:d8:48:3c:d3:bf:06:ae:07:84:95:7d:2a:0a:e6:c3:d7:ea:
         95:57:c6:d6:1d:1a:80:54:68:a9:dd:cd:f2:dc:a6:88:fe:ab:
         f7:f7:36:8a:16:94:79:c3:64:49:ed:25:0a:d7:56:62:c2:6a:
         02:8b:f8:22:70:bb:09:ad:63:46:0a:0a:eb:32:20:4f:70:83:
         76:4a:52:cc:00:9a:43:c8:49:0c:fc:3b:55:4c:f1:73:6b:9d:
         db:98:d9:15:7c:13:9e:b8:5a:33:f0:18:ed:22:43:3b:30:50:
         91:1e:9c:ae:45:1b:fb:14:c8:81:07:fc:8c:29:d4:c9:1c:62:
         3f:e5:1f:4b:bf:bd:dd:c6:a7:35:a8:54:88:f1:5d:e2:97:0c:
         34:1b:64:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----