This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9C7F75A4B29AA7ECE436A69A356827489DE646F7.cer
File:                     9C7F75A4B29AA7ECE436A69A356827489DE646F7.cer (raw, json)
Hash identifier:          uWPoi9Jo5Je+fGD366tqpAuZA8g70BejMX1/spx2JTA=
Subject key identifier:   9C:7F:75:A4:B2:9A:A7:EC:E4:36:A6:9A:35:68:27:48:9D:E6:46:F7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       098BD9F457CDF3DE02AEA3070AA644C51B69C86E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/9C7F75A4B29AA7ECE436A69A356827489DE646F7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Mar 2025 20:52:56 +0000
Certificate not after:    Mon 16 Mar 2026 20:57:56 +0000
Subordinate resources:    AS: 263948
                          IP: 138.219.236.0/22
                          IP: 177.67.36.0/24
                          IP: 177.67.38.0/24
                          IP: 2804:2838::/32
Validation:               Failed, certificate revoked on Fri 26 Sep 2025 19:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8b:d9:f4:57:cd:f3:de:02:ae:a3:07:0a:a6:44:c5:1b:69:c8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 17 20:52:56 2025 GMT
            Not After : Mar 16 20:57:56 2026 GMT
        Subject: CN=9C7F75A4B29AA7ECE436A69A356827489DE646F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:d6:1f:68:28:e2:f6:28:24:6f:e3:e2:a2:
                    33:c8:4b:36:83:2d:e4:88:d5:bc:d9:18:2e:6c:4f:
                    43:0c:bd:f2:9c:c0:e6:a3:3a:52:e9:e9:8a:6b:b2:
                    67:86:6b:2e:38:32:a1:ca:3e:26:5b:b3:24:e8:ea:
                    3d:87:3e:f6:e8:be:ee:23:5c:1a:e2:7d:06:80:98:
                    f8:62:da:ed:f3:f2:03:47:3e:5c:61:dd:32:4f:3b:
                    1d:ee:9c:c4:22:96:72:ae:c1:2b:6b:83:f5:b9:0c:
                    76:1e:d7:e8:5d:9e:6b:db:d2:3b:e4:d6:a1:0d:a5:
                    20:96:1a:e0:a3:2d:6c:78:c4:17:7e:23:18:a0:78:
                    95:92:1a:0c:09:93:0c:ee:f6:5d:2b:c5:07:57:ff:
                    4f:2f:6f:a9:f7:64:8c:24:c1:b1:54:27:de:1d:38:
                    19:c9:55:fe:6b:ca:b2:f2:29:34:e9:df:40:36:16:
                    36:b6:15:56:b0:50:e6:f8:cc:a4:c0:0b:74:12:72:
                    62:ed:cd:cf:b2:d9:c8:60:55:0a:0b:64:52:6a:e0:
                    13:a6:23:58:de:a4:52:0c:50:10:2b:06:54:b6:7b:
                    fc:e8:82:9a:9e:d3:25:38:e7:bf:4b:d9:22:2e:f0:
                    0c:b5:e0:67:78:eb:84:92:23:88:b9:4d:81:ad:65:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:7F:75:A4:B2:9A:A7:EC:E4:36:A6:9A:35:68:27:48:9D:E6:46:F7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/9C7F75A4B29AA7ECE436A69A356827489DE646F7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.236.0/22
                  177.67.36.0/24
                  177.67.38.0/24
                IPv6:
                  2804:2838::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263948

    Signature Algorithm: sha256WithRSAEncryption
         01:7c:e9:02:8d:ef:16:b1:26:fb:46:e7:af:22:4d:64:7d:85:
         dd:53:a0:cf:86:2b:9e:9a:ce:1d:85:72:a7:fb:60:a8:40:fc:
         18:b9:63:1d:9d:60:9f:25:7f:92:dc:9c:5a:bf:62:c2:a3:d9:
         e7:30:c1:b8:c6:d6:78:22:aa:12:a4:a0:7b:e8:06:9f:cf:d7:
         52:c2:4a:30:a6:80:b2:6b:8a:77:e0:6d:3f:ee:ab:f8:13:d9:
         9a:19:00:4b:a7:12:31:4e:68:87:a4:2c:9c:fc:3b:30:fe:0e:
         40:78:c7:55:da:de:03:b2:d5:70:31:19:e0:b1:73:2b:fc:7f:
         2a:b2:da:50:a7:b7:42:30:62:81:b6:81:de:6a:78:c4:f3:9b:
         8e:81:fa:22:a3:4a:db:9a:ae:98:28:f0:5d:d3:f3:60:6c:07:
         8b:ae:97:c6:c7:d3:4b:ae:39:d8:b6:1f:88:2c:d3:d5:b2:b5:
         3e:b1:40:98:c5:58:06:02:b6:dd:21:5c:3c:7c:b6:01:5b:50:
         90:a4:98:45:be:9c:04:da:2e:42:1c:fa:4d:64:9d:15:bb:3e:
         a6:01:e5:95:81:2f:93:9f:40:82:2b:e7:09:83:46:31:d5:06:
         cf:92:f3:88:a8:2f:8e:95:7c:dc:a6:07:02:41:85:64:ce:c9:
         0f:6c:59:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----