This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer
File:                     9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer (raw, json)
Hash identifier:          5DqoOq08OCkrs5nwO+hYyfLj1UyPhjsmxXaMHpLUgk8=
Subject key identifier:   92:32:ED:E3:02:5B:8A:F5:6A:C9:4A:C5:A4:DD:34:BC:00:DB:91:CB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1E50B6D9EF92DA05E70645D61FF5F4EAF36E3E53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 26 Apr 2025 17:46:38 +0000
Certificate not after:    Sat 25 Apr 2026 17:51:38 +0000
Subordinate resources:    AS: 267211
                          IP: 45.231.120.0/22
                          IP: 2804:49f8::/32
Validation:               Failed, certificate revoked on Thu 02 Oct 2025 19:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:50:b6:d9:ef:92:da:05:e7:06:45:d6:1f:f5:f4:ea:f3:6e:3e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 26 17:46:38 2025 GMT
            Not After : Apr 25 17:51:38 2026 GMT
        Subject: CN=9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:40:7f:6e:50:2b:a3:af:22:ea:bc:1f:ab:
                    94:5f:70:d8:2b:37:57:00:73:37:b3:31:1d:e0:b2:
                    1c:64:f9:82:4a:66:65:93:6e:4d:57:d0:58:24:0b:
                    9f:95:00:48:a5:6d:4b:54:27:e0:91:ef:30:da:cb:
                    07:a6:ad:b8:5f:06:66:87:0d:ad:85:4e:54:83:e7:
                    2f:d3:14:3c:2c:ac:0b:42:1e:91:b7:12:93:5a:25:
                    10:58:16:f6:98:35:49:5c:d4:71:dd:2a:dc:9c:67:
                    3d:26:62:a1:a1:1e:72:30:49:c1:92:60:8b:ba:36:
                    2c:6e:72:03:63:82:0e:4d:51:bc:a7:4b:38:94:22:
                    58:35:e3:12:40:96:a3:98:32:b4:5d:49:20:77:dc:
                    a6:a3:30:ee:24:d0:eb:6b:87:15:ed:0b:b4:e0:1c:
                    17:6f:b5:18:0c:e2:a0:34:f6:3e:5c:b0:20:02:46:
                    0f:22:d9:ec:9e:ed:ae:11:ab:79:1d:80:f7:df:a7:
                    0b:86:db:dc:02:88:bb:90:e1:4f:ae:72:e7:dd:66:
                    22:e3:e5:40:32:c3:fb:4c:35:85:55:30:4b:0d:6f:
                    3d:c1:f5:0c:8a:84:39:ff:21:cc:8d:93:f9:00:a8:
                    82:cb:59:32:5a:75:3f:a5:a2:bd:0d:7b:d2:a2:85:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:32:ED:E3:02:5B:8A:F5:6A:C9:4A:C5:A4:DD:34:BC:00:DB:91:CB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.120.0/22
                IPv6:
                  2804:49f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267211

    Signature Algorithm: sha256WithRSAEncryption
         51:0f:fa:38:b5:b7:85:f9:38:fe:e9:5d:57:4d:4f:b3:c4:35:
         32:dd:b6:80:ab:15:64:4e:68:f9:08:cb:08:cb:9a:cb:27:a1:
         ea:ae:0a:56:67:ca:f6:e9:19:21:1e:8d:47:6d:f4:6c:7c:88:
         f2:2d:7a:8a:ab:a5:eb:46:7c:ba:ee:a5:0e:fa:ef:95:21:3f:
         3c:ac:ff:66:dc:51:c3:42:c3:2f:8d:ec:91:10:2d:da:54:97:
         21:b7:a8:2c:5b:92:b9:51:5f:79:0d:db:a8:22:ef:c1:ba:61:
         81:d8:44:e4:01:94:31:f6:5f:33:9b:bc:44:56:95:34:69:c0:
         fa:42:02:72:ba:5c:94:f0:1c:63:dc:14:5c:3a:0f:60:55:c4:
         2e:3b:df:3f:21:56:5c:2b:96:cd:54:39:69:b8:d8:c9:f6:6e:
         27:f9:13:f0:b2:b0:e4:53:61:89:b0:83:10:1f:2c:c4:5c:9f:
         c0:af:2a:c7:93:61:37:29:b9:eb:ca:ce:bd:3d:b0:12:9b:6c:
         14:ef:fb:23:62:f8:ad:ec:5e:33:9d:ce:3b:3b:62:6e:0d:bf:
         74:5b:07:a5:7b:37:ca:76:99:84:7e:69:dc:e7:46:24:b2:e3:
         b2:7b:1d:70:46:b6:38:72:00:08:fe:2f:e6:52:65:05:5d:a9:
         54:cc:62:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----