This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A037C9BB48DDED51CE622118CDF20B2F0F9F31EA.cer
File:                     A037C9BB48DDED51CE622118CDF20B2F0F9F31EA.cer (raw, json)
Hash identifier:          O6lXfS+6zoAtkYFg/6IQcEASMWnd4nS9S6PCzWhgv+s=
Subject key identifier:   A0:37:C9:BB:48:DD:ED:51:CE:62:21:18:CD:F2:0B:2F:0F:9F:31:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       70CA3EEC0A8FEBB80686C4904DBAADED0E640069
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/A037C9BB48DDED51CE622118CDF20B2F0F9F31EA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 31 Aug 2025 23:34:25 +0000
Certificate not after:    Sun 30 Aug 2026 23:39:25 +0000
Subordinate resources:    AS: 265482
                          IP: 168.197.140.0/22
                          IP: 2804:34d0::/32
Validation:               Failed, certificate revoked on Thu 18 Sep 2025 20:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ca:3e:ec:0a:8f:eb:b8:06:86:c4:90:4d:ba:ad:ed:0e:64:00:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 31 23:34:25 2025 GMT
            Not After : Aug 30 23:39:25 2026 GMT
        Subject: CN=A037C9BB48DDED51CE622118CDF20B2F0F9F31EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:61:13:d7:f9:17:05:f4:95:ca:93:4b:80:
                    14:37:5c:21:ad:40:7a:d0:71:d9:e3:41:5c:fa:d4:
                    09:99:e1:39:e5:07:36:84:81:1e:c4:09:ec:d3:f8:
                    00:d6:16:b3:25:87:19:96:16:6e:23:6f:2f:de:bd:
                    0b:6b:90:c3:45:6d:ba:d6:ba:b1:6f:a1:a5:a4:59:
                    64:11:bc:54:4c:db:a8:d8:57:0e:70:a7:a4:5f:d5:
                    8f:13:15:7f:f7:d4:b2:84:46:ac:c6:c6:b7:76:ae:
                    25:1b:7b:b3:fa:d6:1f:e8:d9:e4:1d:ce:c2:ca:70:
                    53:53:3b:48:26:20:90:e4:80:11:29:94:d0:98:75:
                    e6:21:d0:a6:5c:3a:ae:9b:b8:16:27:e3:4b:bc:7a:
                    2e:b1:a4:ff:de:9d:44:d8:1b:7b:9a:8e:d0:6e:4c:
                    67:fe:23:2d:de:e3:ed:9c:1a:13:d9:48:a7:7a:4b:
                    a1:45:1c:91:98:10:02:9d:11:92:59:82:ed:bd:fd:
                    fc:4d:c4:b0:61:30:6f:e8:c0:f7:c8:19:aa:96:e7:
                    00:c2:76:c7:13:e0:c6:36:5f:3b:5a:81:8c:e2:ba:
                    49:41:38:08:dd:aa:08:7a:8b:ca:5c:d2:f3:61:50:
                    a8:7c:17:8b:46:e7:c7:aa:ba:21:18:d9:aa:85:f2:
                    a5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:37:C9:BB:48:DD:ED:51:CE:62:21:18:CD:F2:0B:2F:0F:9F:31:EA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/A037C9BB48DDED51CE622118CDF20B2F0F9F31EA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.140.0/22
                IPv6:
                  2804:34d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265482

    Signature Algorithm: sha256WithRSAEncryption
         07:60:bc:f3:16:38:92:9a:47:53:f6:a6:ce:02:d6:63:a7:df:
         a6:4c:c1:88:e0:f4:60:af:f0:56:aa:81:9c:2f:d4:32:33:15:
         58:95:eb:c2:ee:e5:e2:28:98:13:08:85:87:9e:5b:72:29:62:
         c1:24:3d:4b:c3:25:7a:ef:14:8d:8b:33:c7:51:4c:4a:93:b1:
         bf:e1:92:b6:29:22:37:2e:8d:42:2b:73:69:de:32:aa:e0:f2:
         d7:63:03:53:4f:6e:73:5f:4f:05:42:6d:4b:41:ff:50:d6:9f:
         76:1a:72:3b:8b:e1:a1:f7:98:4c:78:df:a2:df:78:2a:bd:36:
         e9:c2:44:df:5e:b8:91:5c:43:a9:1b:f9:a1:b4:a9:ec:fb:31:
         f1:20:88:8e:02:6d:7a:29:c0:47:f2:c4:31:86:b2:d9:c8:e2:
         e0:ff:ba:b0:b5:df:44:48:5e:f8:9f:06:a0:fe:39:10:0b:39:
         52:16:97:a6:8b:8b:e6:40:92:ff:4d:0c:f9:3b:0b:c1:7b:29:
         03:8f:59:8f:d4:4f:fa:07:1c:9e:35:17:cc:59:08:8f:43:3a:
         5c:dc:d2:b1:8f:3a:4d:f7:c4:a2:ac:e6:52:37:3e:eb:56:ad:
         e4:df:1d:aa:da:ce:7a:89:e9:af:a9:8d:bd:50:ad:b0:95:05:
         9e:63:5c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----