This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.cer
File:                     7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.cer (raw, json)
Hash identifier:          RjXLhTTc6r5DJo4YVHg7Y7pxvTqIGuUNKQG9feqhXBs=
Subject key identifier:   7C:FB:4C:B8:D8:AD:64:B7:57:F3:3E:83:AD:9B:3C:20:B7:4A:3B:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B82C350E3D34DD00DA5EECE1925AA6A6820D639
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Sep 2025 09:20:12 +0000
Certificate not after:    Fri 18 Sep 2026 09:25:12 +0000
Subordinate resources:    AS: 268847
                          IP: 45.173.254.0/23
                          IP: 2804:5b78::/32
Validation:               Failed, certificate revoked on Tue 07 Oct 2025 13:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:82:c3:50:e3:d3:4d:d0:0d:a5:ee:ce:19:25:aa:6a:68:20:d6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 19 09:20:12 2025 GMT
            Not After : Sep 18 09:25:12 2026 GMT
        Subject: CN=7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:79:53:03:20:b6:63:a0:a4:07:b7:62:de:
                    10:06:90:4f:06:11:65:1f:94:be:00:f1:af:02:90:
                    b4:ec:19:02:d0:1d:6e:88:27:39:ae:0d:02:db:35:
                    49:88:9b:c4:95:bb:06:de:b9:60:28:00:b7:c1:c0:
                    88:91:d7:4b:f9:cf:fa:22:59:c1:f6:50:14:e3:23:
                    bd:c4:c7:f8:98:a3:bd:cb:39:fa:82:76:2e:43:df:
                    78:fa:dc:50:60:29:cf:9f:fa:b1:02:b0:2d:8a:3f:
                    8d:69:df:48:84:35:52:33:5e:1e:7b:8e:ea:74:c9:
                    d6:d1:9d:ad:28:e5:3c:ca:80:10:3c:8e:00:e9:85:
                    0e:55:77:15:e7:29:ba:1d:d5:6f:13:95:4a:78:c4:
                    5b:59:4e:a6:64:da:38:d7:d2:d9:54:8b:69:05:74:
                    30:38:6f:52:dc:72:5b:50:d8:11:30:ec:86:a9:a8:
                    3f:12:b8:20:dc:92:09:c8:f4:da:6a:cd:d0:a9:c1:
                    63:02:2e:99:cf:47:6d:a8:4a:fa:93:6b:7f:4e:e2:
                    e4:f2:9b:dd:01:30:4d:36:dc:66:ba:b2:eb:27:1c:
                    03:91:dd:c7:3b:7f:b7:21:ca:0e:45:71:f9:f2:d4:
                    ca:3c:71:30:9b:28:9d:99:6f:98:48:dc:5c:ef:9f:
                    7e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:FB:4C:B8:D8:AD:64:B7:57:F3:3E:83:AD:9B:3C:20:B7:4A:3B:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.254.0/23
                IPv6:
                  2804:5b78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268847

    Signature Algorithm: sha256WithRSAEncryption
         81:8e:85:18:22:68:73:c8:c8:99:72:f5:3a:f4:63:db:94:37:
         bc:6d:fb:11:e1:c4:38:dc:ad:86:dd:25:8e:b2:be:41:06:6b:
         ad:9e:4b:ac:12:4a:c6:3a:71:94:09:28:fd:f2:a4:48:40:b1:
         1b:8a:3f:7b:4e:c7:f0:4c:82:d5:25:e9:73:1c:48:0e:26:06:
         89:15:b7:0f:b0:be:cc:d0:5c:c7:b6:c6:dc:69:5e:83:16:21:
         8b:09:de:55:13:29:ac:66:de:c3:31:2b:4b:62:24:e7:f6:14:
         6c:2e:07:ed:4f:08:f7:38:b7:a0:b0:c3:f8:09:61:2d:ea:3b:
         ef:62:dd:c6:b9:44:b8:2a:77:88:65:ba:7c:45:26:c1:8e:cd:
         82:3f:bc:70:b2:6c:bb:8c:d4:9b:8c:c7:36:c9:39:ed:9b:a4:
         39:53:ce:67:52:48:25:d0:87:0d:a0:28:a8:1b:96:b8:60:ac:
         72:17:4e:fc:c2:c3:47:fb:10:92:93:ee:05:77:50:4f:c2:33:
         94:be:f2:ee:22:81:92:ab:c1:b6:48:85:3e:74:07:9b:87:75:
         19:cc:11:d3:ea:23:22:92:f2:6f:59:20:81:06:d0:72:fa:52:
         83:4e:6c:4f:cc:04:a8:b9:92:66:ca:41:88:f4:d0:7e:a1:b0:
         43:8f:21:6d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUC4LDUOPTTdANpe7OGSWqamgg1jkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA5MTkwOTIwMTJaFw0yNjA5MTgwOTI1MTJaMDMxMTAvBgNV
BAMTKDdDRkI0Q0I4RDhBRDY0Qjc1N0YzM0U4M0FEOUIzQzIwQjc0QTNCMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw5nlTAyC2Y6CkB7di3hAGkE8G
EWUflL4A8a8CkLTsGQLQHW6IJzmuDQLbNUmIm8SVuwbeuWAoALfBwIiR10v5z/oi
WcH2UBTjI73Ex/iYo73LOfqCdi5D33j63FBgKc+f+rECsC2KP41p30iENVIzXh57
jup0ydbRna0o5TzKgBA8jgDphQ5VdxXnKbod1W8TlUp4xFtZTqZk2jjX0tlUi2kF
dDA4b1LccltQ2BEw7IapqD8SuCDckgnI9NpqzdCpwWMCLpnPR22oSvqTa39O4uTy
m90BME023Ga6susnHAOR3cc7f7chyg5Fcfny1Mo8cTCbKJ2Zb5hI3Fzvn36PAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8+0y42K1kt1fz
PoOtmzwgt0o7FjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0JV
S3E0bVdSd0VHWlo5NDNqeUFOdUozNUhReURtUnJjYkxVY1Nud2NndUwvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NC
VUtxNG1XUndFR1paOTQzanlBTnVKMzVIUXlEbVJyY2JMVWNTbndjZ3VMLzEvN0NG
QjRDQjhEOEFENjRCNzU3RjMzRTgzQUQ5QjNDMjBCNzRBM0IxNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQBLa3+MA0EAgACMAcDBQAoBFt4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQaLzANBgkqhkiG9w0BAQsFAAOCAQEAgY6FGCJoc8jImXL1
OvRj25Q3vG37EeHEONytht0ljrK+QQZrrZ5LrBJKxjpxlAko/fKkSECxG4o/e07H
8EyC1SXpcxxIDiYGiRW3D7C+zNBcx7bG3GlegxYhiwneVRMprGbewzErS2Ik5/YU
bC4H7U8I9zi3oLDD+AlhLeo772LdxrlEuCp3iGW6fEUmwY7Ngj+8cLJsu4zUm4zH
Nsk57ZukOVPOZ1JIJdCHDaAoqBuWuGCschdO/MLDR/sQkpPuBXdQT8IzlL7y7iKB
kqvBtkiFPnQHm4d1GcwR0+ojIpLyb1kggQbQcvpSg05sT8wEqLmSZspBiPTQfqGw
Q48hbQ==
-----END CERTIFICATE-----