This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5805426DE711726257B6F6F478D3A3E7F932F7C4.cer
File:                     5805426DE711726257B6F6F478D3A3E7F932F7C4.cer (raw, json)
Hash identifier:          Q4gl6vdBO6Mm84tsbdA6lvIvtIGt2wF8I1nDOj2QmBQ=
Subject key identifier:   58:05:42:6D:E7:11:72:62:57:B6:F6:F4:78:D3:A3:E7:F9:32:F7:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3FFB8B25C46BC5AA868A1CA4B13C0DBB8F66FCB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/5805426DE711726257B6F6F478D3A3E7F932F7C4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 May 2025 13:14:03 +0000
Certificate not after:    Fri 01 May 2026 13:19:03 +0000
Subordinate resources:    AS: 268860
                          IP: 45.173.84.0/22
                          IP: 2804:5ba4::/32
Validation:               Failed, certificate revoked on Tue 26 Aug 2025 21:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fb:8b:25:c4:6b:c5:aa:86:8a:1c:a4:b1:3c:0d:bb:8f:66:fc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  2 13:14:03 2025 GMT
            Not After : May  1 13:19:03 2026 GMT
        Subject: CN=5805426DE711726257B6F6F478D3A3E7F932F7C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:a7:0c:7d:bd:b6:19:57:a9:7c:d0:43:35:
                    ac:12:dc:f0:07:3e:a4:2e:ab:d2:63:b2:ca:68:08:
                    5e:3c:4b:f0:80:c9:c3:84:49:f3:cf:e0:69:57:e1:
                    05:8d:ac:c2:a5:ab:43:4a:40:66:bb:85:6f:6c:12:
                    4b:b5:1c:df:dd:3e:29:e6:fb:00:97:5b:21:03:bd:
                    56:04:88:b1:48:06:0f:92:5d:ca:c1:7a:15:db:01:
                    df:d5:06:40:27:0f:1d:a5:5c:d4:6e:5b:98:f3:de:
                    f7:ff:4a:03:01:a3:5c:50:30:2d:df:eb:35:2f:fd:
                    53:ac:5a:e0:f8:55:04:06:47:25:fc:f1:97:45:5b:
                    0e:bb:06:7b:ea:a2:80:a6:bc:b4:98:49:30:ba:ae:
                    9e:26:2c:f0:69:cb:4b:c1:0d:b6:4d:a8:15:3c:2b:
                    bc:e9:b9:d8:6a:d9:27:ee:67:64:1e:ba:46:23:08:
                    df:d7:1f:87:5d:c1:a2:1b:4f:0a:2a:a2:0c:b8:9b:
                    7d:d2:7b:08:20:a6:ec:2b:6a:23:a5:c0:5c:12:21:
                    78:7c:11:4f:0f:16:21:65:40:20:e1:a1:c2:e3:38:
                    45:77:10:2a:30:43:6a:43:ed:c5:7f:9a:15:81:a2:
                    b9:de:cb:b6:59:7d:6c:a5:d0:40:34:d8:13:67:95:
                    f7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:05:42:6D:E7:11:72:62:57:B6:F6:F4:78:D3:A3:E7:F9:32:F7:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/5805426DE711726257B6F6F478D3A3E7F932F7C4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.84.0/22
                IPv6:
                  2804:5ba4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268860

    Signature Algorithm: sha256WithRSAEncryption
         76:f1:4f:ae:67:c5:53:6e:b6:0a:33:b1:65:ca:3d:8b:1f:37:
         ca:a6:f4:b5:be:56:62:cb:29:c3:12:5b:d4:dc:b4:5e:ba:1d:
         7d:65:d4:ef:41:5f:fe:2e:1a:5e:f3:b1:3e:05:a5:6f:3e:1f:
         73:0d:e2:b0:7c:65:53:3b:20:ed:52:1a:1e:dc:f6:61:cd:46:
         fb:77:18:f0:63:71:ed:eb:6e:45:1e:e1:81:87:9c:01:37:48:
         73:d1:13:0c:97:3d:52:d3:e5:e0:75:66:0f:80:17:45:66:0c:
         64:8c:3e:77:ce:3b:fd:24:85:ac:75:f0:79:e0:61:d7:39:48:
         da:a5:a2:1e:b6:e0:ed:db:18:1b:f5:45:90:9b:43:73:bb:41:
         d8:41:05:ef:19:eb:22:6f:ce:fe:56:bd:6e:7c:b0:7c:5a:70:
         67:60:b2:1e:11:d3:48:9d:82:2d:8a:af:2a:54:e5:4f:d0:06:
         66:cc:3d:b4:93:ed:ad:85:99:b5:6d:ff:fe:ca:97:3f:67:ef:
         b4:3d:8d:68:60:4f:d6:79:b2:c7:9b:e5:02:3f:34:b3:b5:a8:
         a9:c9:79:5b:b2:da:9a:09:48:5c:f4:ee:81:eb:91:e4:d3:b6:
         5c:20:05:63:16:28:ca:47:92:8f:c2:28:3b:fd:69:bc:5c:6e:
         2c:c0:2c:f0
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUP/uLJcRrxaqGihyksTwNu49m/LEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA1MDIxMzE0MDNaFw0yNjA1MDExMzE5MDNaMDMxMTAvBgNV
BAMTKDU4MDU0MjZERTcxMTcyNjI1N0I2RjZGNDc4RDNBM0U3RjkzMkY3QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx7acMfb22GVepfNBDNawS3PAH
PqQuq9JjsspoCF48S/CAycOESfPP4GlX4QWNrMKlq0NKQGa7hW9sEku1HN/dPinm
+wCXWyEDvVYEiLFIBg+SXcrBehXbAd/VBkAnDx2lXNRuW5jz3vf/SgMBo1xQMC3f
6zUv/VOsWuD4VQQGRyX88ZdFWw67BnvqooCmvLSYSTC6rp4mLPBpy0vBDbZNqBU8
K7zpudhq2SfuZ2QeukYjCN/XH4ddwaIbTwoqogy4m33SewggpuwraiOlwFwSIXh8
EU8PFiFlQCDhocLjOEV3ECowQ2pD7cV/mhWBorney7ZZfWyl0EA02BNnlffdAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRYBUJt5xFyYle2
9vR406Pn+TL3xDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXl4
QUxOWjhYd05QbjU0Z3pEeEZKcEN3aDIyRUtVRUdlY0doZjZ1UkR6Y1kvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F5
eEFMTlo4WHdOUG41NGd6RHhGSnBDd2gyMkVLVUVHZWNHaGY2dVJEemNZLzAvNTgw
NTQyNkRFNzExNzI2MjU3QjZGNkY0NzhEM0EzRTdGOTMyRjdDNC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLa1UMA0EAgACMAcDBQAoBFukMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQaPDANBgkqhkiG9w0BAQsFAAOCAQEAdvFPrmfFU262CjOx
Zco9ix83yqb0tb5WYsspwxJb1Ny0XrodfWXU70Ff/i4aXvOxPgWlbz4fcw3isHxl
Uzsg7VIaHtz2Yc1G+3cY8GNx7etuRR7hgYecATdIc9ETDJc9UtPl4HVmD4AXRWYM
ZIw+d847/SSFrHXweeBh1zlI2qWiHrbg7dsYG/VFkJtDc7tB2EEF7xnrIm/O/la9
bnywfFpwZ2CyHhHTSJ2CLYqvKlTlT9AGZsw9tJPtrYWZtW3//sqXP2fvtD2NaGBP
1nmyx5vlAj80s7Woqcl5W7LamglIXPTugeuR5NO2XCAFYxYoykeSj8IoO/1pvFxu
LMAs8A==
-----END CERTIFICATE-----