This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/671CC9252D332CBB1069671F5CE20DE74F7153B4.cer
File:                     671CC9252D332CBB1069671F5CE20DE74F7153B4.cer (raw, json)
Hash identifier:          OSdXWbdxOvZzMa2m8sFkJwLllemHKbnMAb4OGUoIxYo=
Subject key identifier:   67:1C:C9:25:2D:33:2C:BB:10:69:67:1F:5C:E2:0D:E7:4F:71:53:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B44A435F6CBDE34B4ACA8608A53EE47268CFED7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/671CC9252D332CBB1069671F5CE20DE74F7153B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Nov 2025 14:24:19 +0000
Certificate not after:    Mon 09 Nov 2026 14:29:19 +0000
Subordinate resources:    AS: 268518
                          IP: 45.162.128.0/22
                          IP: 2804:5270::/32
Validation:               Failed, certificate revoked on Fri 28 Nov 2025 08:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:44:a4:35:f6:cb:de:34:b4:ac:a8:60:8a:53:ee:47:26:8c:fe:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 10 14:24:19 2025 GMT
            Not After : Nov  9 14:29:19 2026 GMT
        Subject: CN=671CC9252D332CBB1069671F5CE20DE74F7153B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:1c:1a:f9:56:22:d0:a0:07:cd:ab:7f:84:
                    a7:f9:9b:55:bf:87:8b:ef:22:13:d7:59:97:52:f4:
                    21:94:4a:bc:aa:fe:c1:03:2d:a4:b8:5e:03:b3:4e:
                    52:94:4a:6f:74:9c:60:20:55:28:0b:23:f2:85:59:
                    ab:2c:cb:e4:a1:75:71:5a:c4:7a:da:b1:1a:70:d0:
                    09:25:37:19:0e:a7:56:35:d6:14:d7:39:e1:5a:fb:
                    1e:b7:c7:28:08:58:37:6f:66:c2:26:e1:5d:9e:b2:
                    05:61:d8:cf:a1:9b:e4:f5:d8:08:91:84:23:15:2d:
                    7a:54:f6:5c:47:18:61:d8:3b:ab:75:46:06:e6:82:
                    ac:0a:ae:e1:71:27:07:cc:92:98:ec:8c:4e:5f:b6:
                    23:f3:b0:70:38:9d:bb:1f:38:b6:62:d6:d3:c1:78:
                    3a:dc:90:2c:e7:ab:6f:f4:b5:85:a5:d5:17:82:be:
                    48:41:8b:e3:1c:13:60:5d:e4:76:3f:43:cd:3b:93:
                    b6:7f:22:c4:10:8b:59:bf:1d:3c:f1:d8:ef:49:8b:
                    09:5c:a2:ec:ef:d3:8a:e2:44:e1:6d:12:ac:3a:b5:
                    b5:35:e1:8d:e0:4f:f3:67:c0:20:b1:47:3e:91:84:
                    d3:50:24:d8:2c:8e:5d:00:67:c3:be:3d:ca:a1:ad:
                    93:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:1C:C9:25:2D:33:2C:BB:10:69:67:1F:5C:E2:0D:E7:4F:71:53:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/671CC9252D332CBB1069671F5CE20DE74F7153B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.128.0/22
                IPv6:
                  2804:5270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268518

    Signature Algorithm: sha256WithRSAEncryption
         1c:09:a6:1c:4a:b0:07:38:85:da:cd:c5:31:81:21:71:4c:09:
         c8:77:01:03:8d:2f:15:d1:90:1c:04:d3:c5:d4:91:d3:47:e0:
         aa:38:44:18:0d:be:c9:7c:a0:89:a1:63:80:2c:4a:b5:b6:3b:
         9a:82:18:48:5f:ea:58:95:58:ea:cf:3c:b8:cc:bd:2a:bc:00:
         a5:01:35:fe:eb:9b:97:08:33:b7:ec:dd:69:ac:16:1c:fc:8a:
         52:49:ec:fe:60:d6:cf:bf:65:7c:cb:e6:dd:9f:18:a6:34:f4:
         41:77:2e:d7:f1:2c:1f:f6:82:ce:4f:1b:73:e5:5d:de:f8:f9:
         df:2d:8a:30:2b:39:0b:b3:50:8a:55:a2:35:ed:4b:14:d9:65:
         b5:cb:ab:36:c8:12:6d:6d:a0:4a:ea:4e:e2:c2:9a:9f:89:fd:
         74:d8:f6:09:27:db:aa:de:dc:13:a0:7e:48:f3:a7:5d:12:5e:
         48:52:97:03:3f:6d:13:6e:cb:fb:80:43:07:18:6f:65:8d:b7:
         fe:18:d5:83:61:27:cf:4f:c6:7f:93:24:b9:fe:35:88:f8:97:
         95:5c:a0:62:ac:6e:77:21:74:08:c5:d4:6e:94:82:1f:f4:09:
         2f:a5:74:db:e4:8e:52:c6:2d:f7:11:09:83:fc:72:e0:65:15:
         ad:cb:26:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----