This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.cer
File:                     A24962CC4C921C7064CF78BB8DF4A9C8638402C7.cer (raw, json)
Hash identifier:          IEIB3T4A1w+pfm6CL/InTh+5v30vxmqQ7Qx1oZz2D8g=
Subject key identifier:   A2:49:62:CC:4C:92:1C:70:64:CF:78:BB:8D:F4:A9:C8:63:84:02:C7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2986E6FE68DED166CA98F0ACFB2953A5727765C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Mar 2025 12:28:08 +0000
Certificate not after:    Thu 19 Mar 2026 12:33:08 +0000
Subordinate resources:    AS: 272252
                          IP: 2804:844c::/32
Validation:               Failed, certificate revoked on Thu 07 Aug 2025 02:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:86:e6:fe:68:de:d1:66:ca:98:f0:ac:fb:29:53:a5:72:77:65:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 20 12:28:08 2025 GMT
            Not After : Mar 19 12:33:08 2026 GMT
        Subject: CN=A24962CC4C921C7064CF78BB8DF4A9C8638402C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fe:c8:86:64:20:f0:3e:af:96:a9:4c:34:59:
                    83:57:5d:99:40:c3:c5:4a:c5:2a:f7:69:95:54:75:
                    ea:76:14:65:4b:48:a4:bc:a4:eb:60:9a:18:79:ff:
                    f6:04:d0:f1:f3:f5:c7:fb:b5:36:8d:ab:b5:e3:0a:
                    2c:57:fe:be:fa:67:de:a2:a4:b7:85:f9:a2:9d:dd:
                    5b:9b:59:70:aa:16:27:c9:3f:e2:b4:52:07:29:7b:
                    1e:81:be:26:f0:4c:f1:38:c3:6e:e8:6d:da:e5:cd:
                    a4:f5:bb:8e:df:7b:b0:84:ed:42:01:5e:7a:28:89:
                    16:51:2b:6d:bc:02:f0:a8:26:61:55:85:48:69:49:
                    0e:5b:ad:7c:10:c6:93:5e:aa:9f:6c:e3:a1:68:bc:
                    ff:55:b6:3d:eb:f3:c7:e1:9e:b4:0b:7c:d4:d7:e7:
                    1e:87:19:ba:f5:97:d7:73:e4:74:d8:92:7c:87:7a:
                    0f:01:95:5b:69:e7:a5:dd:9b:a0:bb:84:c3:bd:bf:
                    b3:db:37:a0:ea:02:c7:f0:a2:a3:51:42:ed:d2:03:
                    d2:09:7d:4f:14:7d:f9:7e:e5:0a:f1:98:40:fd:98:
                    1a:dc:dd:84:9c:63:6d:30:b5:0f:19:0d:a1:8b:0b:
                    22:64:07:bd:74:e6:ee:82:c5:38:d9:d8:85:0d:fe:
                    36:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:49:62:CC:4C:92:1C:70:64:CF:78:BB:8D:F4:A9:C8:63:84:02:C7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:844c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272252

    Signature Algorithm: sha256WithRSAEncryption
         4f:e6:ea:8a:83:43:b5:a5:14:3d:1a:f7:0a:88:39:4d:69:f6:
         bf:2d:43:e3:0b:ea:01:94:65:72:42:46:cf:9d:af:b2:7d:5e:
         3f:f1:85:dd:ed:81:25:20:5c:17:c6:a9:8b:a6:b0:db:0f:e3:
         60:3a:e2:2d:d6:14:65:fc:e5:7e:18:2f:ad:7f:d3:5a:c3:19:
         da:c0:aa:c2:fd:cb:45:09:64:60:f9:f8:88:f5:5c:63:50:69:
         87:f2:5e:2e:ea:8c:69:4f:f4:18:28:92:a1:b8:85:57:22:66:
         89:7c:4c:81:fe:26:3b:24:e0:9c:dc:ea:02:d6:6f:11:7a:22:
         48:e8:a1:7d:da:fe:ad:02:a5:fc:02:58:51:88:77:df:73:2d:
         1d:53:3c:a7:81:bb:f9:25:81:90:14:64:86:d8:ed:04:89:a4:
         b8:80:79:dd:cb:1a:7a:30:3e:63:d9:d6:b7:86:08:38:57:90:
         84:97:1c:d0:87:f7:0c:f4:cf:c7:68:57:0b:d1:ed:29:7d:85:
         a0:97:8d:4e:e7:40:3b:e9:84:ee:b4:76:b1:25:47:d8:a2:62:
         bd:c4:8d:99:14:e4:34:b0:55:06:29:be:2d:b0:9f:97:c5:54:
         6b:9c:06:06:92:ef:91:74:b7:5a:13:d8:82:ce:cb:c1:22:92:
         fb:ad:15:d8
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUKYbm/mje0WbKmPCs+ylTpXJ3ZcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMjAxMjI4MDhaFw0yNjAzMTkxMjMzMDhaMDMxMTAvBgNV
BAMTKEEyNDk2MkNDNEM5MjFDNzA2NENGNzhCQjhERjRBOUM4NjM4NDAyQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV/siGZCDwPq+WqUw0WYNXXZlA
w8VKxSr3aZVUdep2FGVLSKS8pOtgmhh5//YE0PHz9cf7tTaNq7XjCixX/r76Z96i
pLeF+aKd3VubWXCqFifJP+K0Ugcpex6BvibwTPE4w27obdrlzaT1u47fe7CE7UIB
XnooiRZRK228AvCoJmFVhUhpSQ5brXwQxpNeqp9s46FovP9Vtj3r88fhnrQLfNTX
5x6HGbr1l9dz5HTYknyHeg8BlVtp56Xdm6C7hMO9v7PbN6DqAsfwoqNRQu3SA9IJ
fU8Uffl+5QrxmED9mBrc3YScY20wtQ8ZDaGLCyJkB7105u6CxTjZ2IUN/jb3AgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSiSWLMTJIccGTP
eLuN9KnIY4QCxzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTFN
WkZKTXM3U3Q4Q1pqM2JKa1c2NmdZcWZ0eFJKM1ZrRkdzMWM3ZVM3NkMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUx
TVpGSk1zN1N0OENaajNiSmtXNjZnWXFmdHhSSjNWa0ZHczFjN2VTNzZDLzAvQTI0
OTYyQ0M0QzkyMUM3MDY0Q0Y3OEJCOERGNEE5Qzg2Mzg0MDJDNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASETDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
J3wwDQYJKoZIhvcNAQELBQADggEBAE/m6oqDQ7WlFD0a9wqIOU1p9r8tQ+ML6gGU
ZXJCRs+dr7J9Xj/xhd3tgSUgXBfGqYumsNsP42A64i3WFGX85X4YL61/01rDGdrA
qsL9y0UJZGD5+Ij1XGNQaYfyXi7qjGlP9BgokqG4hVciZol8TIH+Jjsk4Jzc6gLW
bxF6IkjooX3a/q0CpfwCWFGId99zLR1TPKeBu/klgZAUZIbY7QSJpLiAed3LGnow
PmPZ1reGCDhXkISXHNCH9wz0z8doVwvR7Sl9haCXjU7nQDvphO60drElR9iiYr3E
jZkU5DSwVQYpvi2wn5fFVGucBgaS75F0t1oT2ILOy8EikvutFdg=
-----END CERTIFICATE-----