This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
File:                     72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer (raw, json)
Hash identifier:          CRFYPNyvpS6RknRNKiYgqGn0gdkk6aLHD3SQoWL79nU=
Subject key identifier:   72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3125C7244C4DA03981E4768F2E8DFA8D4B4F663C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Apr 2025 11:28:14 +0000
Certificate not after:    Wed 22 Apr 2026 11:33:14 +0000
Subordinate resources:    AS: 53225
                          IP: 177.137.16.0/20
                          IP: 186.251.128.0/20
                          IP: 2804:644::/32
Validation:               Failed, certificate revoked on Mon 30 Jun 2025 12:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:25:c7:24:4c:4d:a0:39:81:e4:76:8f:2e:8d:fa:8d:4b:4f:66:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 23 11:28:14 2025 GMT
            Not After : Apr 22 11:33:14 2026 GMT
        Subject: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5e:f4:ea:33:f2:07:5d:a9:ce:8c:19:4c:be:
                    a9:e7:c6:38:cc:17:73:6c:bb:15:68:fb:3b:29:72:
                    1c:8d:82:3e:7d:dc:1c:7a:27:0d:12:18:e9:12:09:
                    1e:88:5f:51:d4:5e:b1:6e:c8:76:0b:14:2a:8a:26:
                    cd:35:e6:6d:fe:55:46:8c:83:d4:44:f5:9e:b3:d1:
                    04:74:9e:c2:e6:ae:82:df:96:47:ac:92:c9:39:52:
                    89:91:21:a4:4d:66:ba:49:43:6d:1e:bd:d7:6e:dd:
                    79:d1:27:7e:22:2f:b2:e1:cb:dc:0d:48:43:ea:3d:
                    16:fa:cb:8c:71:50:7a:0d:9c:ed:7c:40:de:fb:8c:
                    4f:f3:38:83:7d:20:44:9f:ca:9c:8c:5a:c1:95:92:
                    a0:fe:f8:7c:72:10:4b:03:68:2a:6d:3a:f5:06:86:
                    82:48:b7:9b:60:87:fa:e1:e8:a7:2f:3f:a3:37:2e:
                    8c:3e:0b:cc:cb:8d:13:8a:e8:02:fa:fb:6f:75:7e:
                    10:fb:4d:a5:2e:f9:3c:d7:c8:c1:8c:28:67:c6:91:
                    72:74:84:da:be:6f:60:9f:db:ca:93:7c:95:4b:cd:
                    8c:6f:61:50:8e:da:b2:1f:6c:ba:28:78:ac:15:aa:
                    6f:7f:43:06:0f:6d:68:6b:ee:4b:9b:58:bf:23:cf:
                    8d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.16.0/20
                  186.251.128.0/20
                IPv6:
                  2804:644::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53225

    Signature Algorithm: sha256WithRSAEncryption
         7b:9a:6b:24:20:89:24:5d:dc:83:ff:5f:fa:3d:83:1e:3d:de:
         85:cb:eb:4d:e0:13:12:85:b8:fe:5d:2f:33:71:91:a4:d2:f7:
         17:05:67:ce:bf:cf:d5:78:00:1c:b4:77:98:e4:69:7c:2b:95:
         0f:ca:80:44:f8:35:f4:ba:e0:f6:a3:c0:10:46:23:bf:55:ff:
         ae:db:8b:9a:70:70:67:d9:c1:92:ba:15:32:6a:4f:9e:ec:3d:
         13:6d:7f:59:d6:2e:32:bd:51:9d:97:4e:4b:f8:5b:a2:ad:60:
         98:12:d7:6f:9c:77:ca:ea:b8:42:7a:53:f6:23:02:45:a2:32:
         99:a2:b6:6a:96:6e:25:fe:b8:1d:77:8c:e7:c9:12:d3:18:20:
         4e:39:a4:36:d9:6e:44:de:d9:1f:84:67:bf:fe:13:1c:ca:19:
         70:e2:76:fe:4f:fc:22:50:21:ad:65:db:a3:56:fb:07:b3:ea:
         44:b5:1a:2b:42:12:33:50:58:e1:1d:e2:68:fb:26:19:1b:99:
         99:c3:d1:0e:2c:00:00:1d:34:63:ca:da:2a:d8:f2:d7:be:60:
         39:b6:bf:19:7f:c2:93:9b:48:16:bf:d6:91:ea:38:0f:19:db:
         2d:f1:9a:b0:a1:5b:b4:40:24:fb:03:9f:31:6c:f7:ce:74:55:
         44:30:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----