This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6A491773A546297AE0A6F4300C76B7D21766A14F.cer
File:                     6A491773A546297AE0A6F4300C76B7D21766A14F.cer (raw, json)
Hash identifier:          V3F0hJJTXMkoyYk8ykaAZ3JD+LVIC4mQLf9cmpasXPE=
Subject key identifier:   6A:49:17:73:A5:46:29:7A:E0:A6:F4:30:0C:76:B7:D2:17:66:A1:4F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D01DE998A24F9823DD4020A3B5A7A2D5154B7EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/1/6A491773A546297AE0A6F4300C76B7D21766A14F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Jul 2025 13:43:04 +0000
Certificate not after:    Fri 10 Jul 2026 13:48:04 +0000
Subordinate resources:    AS: 268481
                          IP: 45.161.192.0/22
                          IP: 2804:51dc::/32
Validation:               Failed, certificate revoked on Fri 11 Jul 2025 14:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:01:de:99:8a:24:f9:82:3d:d4:02:0a:3b:5a:7a:2d:51:54:b7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 11 13:43:04 2025 GMT
            Not After : Jul 10 13:48:04 2026 GMT
        Subject: CN=6A491773A546297AE0A6F4300C76B7D21766A14F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:8a:0c:64:36:2a:53:57:ff:9a:9a:11:35:
                    6d:9c:91:c7:b5:9a:21:8d:54:25:8e:80:a2:67:d9:
                    9e:c1:a5:36:d2:d9:b4:5c:00:a4:1b:81:8e:04:9e:
                    15:93:a9:e7:4b:5d:fc:93:13:50:a8:93:f8:47:f7:
                    94:bd:bb:bb:a7:50:fc:67:bf:d4:a4:78:2f:03:e0:
                    65:63:f3:42:d4:45:61:41:24:87:28:e6:96:39:b6:
                    5a:6a:cc:f5:d0:63:20:9a:fb:43:a1:8a:a5:a9:a6:
                    31:93:f0:26:83:ec:9f:f7:63:57:6b:85:da:ff:5a:
                    ba:d0:bd:b4:fc:1a:57:e6:4a:2a:00:29:35:e0:f4:
                    88:8c:7d:7d:6f:be:9b:d6:f1:34:e9:25:ef:49:07:
                    e8:13:d1:c7:92:a1:c9:63:31:75:52:61:d4:5f:2f:
                    f3:d0:96:5c:7d:82:ab:2c:db:8c:0a:bd:62:fe:60:
                    b6:d1:fb:36:db:ca:6a:8e:b2:1d:e1:dd:cb:83:a1:
                    a3:8c:f4:98:61:0c:5a:83:fa:0e:10:b9:0f:23:8c:
                    72:de:c0:e1:16:74:e1:d4:24:1e:be:5d:04:75:70:
                    25:d4:56:32:cc:5a:c7:11:9c:32:90:1f:60:a0:eb:
                    45:10:ee:62:e9:e0:00:0e:95:29:4a:f9:60:7a:4d:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:49:17:73:A5:46:29:7A:E0:A6:F4:30:0C:76:B7:D2:17:66:A1:4F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/1/6A491773A546297AE0A6F4300C76B7D21766A14F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.192.0/22
                IPv6:
                  2804:51dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268481

    Signature Algorithm: sha256WithRSAEncryption
         b7:79:2f:f4:0e:d7:52:ec:41:18:08:ab:bf:06:e7:65:58:a5:
         90:b2:d6:51:80:6e:80:5f:a4:1f:d5:c8:2d:d0:86:74:52:6b:
         8b:bd:6e:28:35:06:7d:30:86:dc:da:73:56:ef:77:61:81:f3:
         9a:0e:01:2d:d8:7b:0c:4f:a2:06:1e:29:ce:ab:aa:da:9e:8c:
         b8:a4:57:b2:18:bc:e7:af:e7:a9:26:2b:10:3c:50:25:d5:a6:
         e6:f6:cf:6e:a4:c5:14:86:76:e3:04:2a:43:69:d5:4b:59:af:
         58:16:ff:11:3f:bd:a2:24:72:85:78:fa:ef:39:ba:ce:fc:51:
         79:cc:55:0f:28:10:01:37:bc:9b:41:a1:c7:3b:4b:23:03:dd:
         01:61:81:b5:ed:8d:a3:a6:8f:82:4f:b5:eb:31:34:f1:68:e2:
         7d:ef:8d:e7:d6:c4:a0:90:76:05:f9:cd:61:ec:88:96:a6:4c:
         27:ec:86:dd:8b:34:53:d1:80:68:18:3b:02:79:95:3a:9e:e3:
         9e:3e:2a:1b:bf:36:bf:6b:34:9f:27:e6:96:8e:2e:e5:73:a5:
         dc:19:16:43:cc:cc:a2:4f:1d:5a:d7:63:64:43:6d:4d:25:97:
         9d:e3:44:bd:98:54:47:e0:5d:48:9f:9b:46:07:c5:a8:71:84:
         93:a6:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----