This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.cer
File:                     A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.cer (raw, json)
Hash identifier:          h03qxKmBcpZtjL3vOODBbi8GZTo82slZ7GTeu1sEw30=
Subject key identifier:   A0:C8:F9:AB:C5:5A:6B:F1:28:36:EC:23:29:88:FD:9A:1A:C6:AE:FA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4899BC9783E7A08BEFD74390777A4FBFD0F1D4B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Jul 2025 14:44:02 +0000
Certificate not after:    Mon 27 Jul 2026 14:49:02 +0000
Subordinate resources:    AS: 270541
                          IP: 177.124.152.0/22
                          IP: 2804:6d90::/32
Validation:               Failed, certificate revoked on Tue 26 Aug 2025 00:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:99:bc:97:83:e7:a0:8b:ef:d7:43:90:77:7a:4f:bf:d0:f1:d4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 28 14:44:02 2025 GMT
            Not After : Jul 27 14:49:02 2026 GMT
        Subject: CN=A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:40:77:be:b7:17:3a:78:5e:8c:04:79:7e:
                    24:6c:40:3c:26:fa:15:c8:a8:9c:1d:73:1f:60:18:
                    2b:10:76:d4:a2:29:e6:cd:3c:c2:95:56:85:a7:04:
                    ad:77:f4:7f:8e:e7:6e:58:be:a0:8f:70:dd:e0:71:
                    b8:a8:51:f3:29:e1:ce:cb:ce:aa:7d:3f:67:f8:e0:
                    93:f4:28:91:96:98:6d:0b:62:54:f0:8a:df:25:72:
                    22:89:e0:22:4a:48:e6:4a:70:77:72:b1:a8:35:94:
                    43:a3:37:ba:8e:70:02:77:86:86:3f:bd:0a:c9:51:
                    ed:2f:3d:8f:70:47:ce:b6:59:cf:54:ff:f7:a1:66:
                    26:1a:5c:46:32:90:0a:14:87:87:d8:2f:0f:33:b5:
                    cf:85:18:79:eb:3f:fb:10:15:7d:c7:94:4d:37:05:
                    8d:2d:4c:f9:76:7b:04:e8:f6:e5:d6:bb:61:ed:5d:
                    bd:fc:b7:50:da:99:fa:41:78:26:85:f5:37:d7:79:
                    35:12:8f:10:1e:41:10:34:02:5b:44:0d:fb:17:27:
                    bf:1a:89:c4:e9:3c:6d:dc:e5:eb:7e:ed:a0:88:f6:
                    ce:9f:6a:a6:4b:81:80:36:e3:a8:18:3e:2f:48:cb:
                    de:e4:ba:24:05:40:98:84:f8:24:fd:d7:05:29:4b:
                    ed:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:C8:F9:AB:C5:5A:6B:F1:28:36:EC:23:29:88:FD:9A:1A:C6:AE:FA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.152.0/22
                IPv6:
                  2804:6d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270541

    Signature Algorithm: sha256WithRSAEncryption
         cc:0a:05:b3:bc:20:bf:30:05:1f:54:ec:0d:99:1e:2a:d6:d5:
         c5:f4:c4:a0:2d:c0:2a:14:f3:71:a0:75:66:73:4f:41:17:d1:
         83:e3:9f:2a:5b:41:26:1e:59:4e:d2:de:4e:ff:8b:c7:1b:17:
         7c:1d:c2:2b:f3:eb:68:78:fd:c0:f6:28:62:1a:5a:e2:91:36:
         98:a3:8c:c9:fa:ca:92:d0:1b:5e:b9:f4:1d:fb:5f:6d:97:62:
         ad:7a:de:ec:7f:88:c3:8f:26:2c:ac:ef:2a:d3:02:e1:52:78:
         c2:e1:36:af:93:cf:e6:4e:3e:e3:49:5c:9b:0a:ee:27:3b:29:
         c3:60:c5:5d:5a:92:37:a1:2e:c6:e1:70:0f:d1:42:47:ba:f6:
         76:92:81:2b:22:15:59:e7:92:e2:c7:98:32:d5:eb:ff:c8:84:
         3a:f6:1b:b3:2f:fc:6a:8d:62:fa:63:3f:80:cc:9f:dd:30:f1:
         6b:2b:c2:1c:75:2b:5a:17:2e:37:99:08:d7:d4:91:2b:a3:f6:
         89:e7:06:f5:dd:41:3f:a4:6c:f9:69:fe:66:f4:23:3d:9e:c9:
         39:17:4b:60:e5:bf:cb:54:16:ea:34:42:ba:2e:3f:75:28:65:
         7a:8e:eb:5f:7b:08:98:f5:b1:f0:e5:86:fc:6e:28:b9:f5:89:
         3c:05:bb:75
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUSJm8l4PnoIvv10OQd3pPv9Dx1LMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA3MjgxNDQ0MDJaFw0yNjA3MjcxNDQ5MDJaMDMxMTAvBgNV
BAMTKEEwQzhGOUFCQzU1QTZCRjEyODM2RUMyMzI5ODhGRDlBMUFDNkFFRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfOkB3vrcXOnhejAR5fiRsQDwm
+hXIqJwdcx9gGCsQdtSiKebNPMKVVoWnBK139H+O525YvqCPcN3gcbioUfMp4c7L
zqp9P2f44JP0KJGWmG0LYlTwit8lciKJ4CJKSOZKcHdysag1lEOjN7qOcAJ3hoY/
vQrJUe0vPY9wR862Wc9U//ehZiYaXEYykAoUh4fYLw8ztc+FGHnrP/sQFX3HlE03
BY0tTPl2ewTo9uXWu2HtXb38t1DamfpBeCaF9TfXeTUSjxAeQRA0AltEDfsXJ78a
icTpPG3c5et+7aCI9s6faqZLgYA246gYPi9Iy97kuiQFQJiE+CT91wUpS+2XAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgyPmrxVpr8Sg2
7CMpiP2aGsau+jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzFG
Vk1LQVY5eTlMWVREZG1aM2tiSDlvU2h4N3FSN2R0NmloOVRCNWpGOHcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0cx
RlZNS0FWOXk5TFlURGRtWjNrYkg5b1NoeDdxUjdkdDZpaDlUQjVqRjh3LzAvQTBD
OEY5QUJDNTVBNkJGMTI4MzZFQzIzMjk4OEZEOUExQUM2QUVGQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsXyYMA0EAgACMAcDBQAoBG2QMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgzTANBgkqhkiG9w0BAQsFAAOCAQEAzAoFs7wgvzAFH1Ts
DZkeKtbVxfTEoC3AKhTzcaB1ZnNPQRfRg+OfKltBJh5ZTtLeTv+LxxsXfB3CK/Pr
aHj9wPYoYhpa4pE2mKOMyfrKktAbXrn0HftfbZdirXre7H+Iw48mLKzvKtMC4VJ4
wuE2r5PP5k4+40lcmwruJzspw2DFXVqSN6EuxuFwD9FCR7r2dpKBKyIVWeeS4seY
MtXr/8iEOvYbsy/8ao1i+mM/gMyf3TDxayvCHHUrWhcuN5kI19SRK6P2iecG9d1B
P6Rs+Wn+ZvQjPZ7JORdLYOW/y1QW6jRCui4/dShleo7rX3sImPWx8OWG/G4oufWJ
PAW7dQ==
-----END CERTIFICATE-----