This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.cer
File:                     A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.cer (raw, json)
Hash identifier:          eSV76K6QsHqJRRJxGyiCPpmTXxMCeMEFs3dpvScyYZw=
Subject key identifier:   A3:75:6B:DF:1D:16:A4:69:6D:DB:D8:78:85:37:C2:F8:FB:47:FA:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       49C49859F5B2C2C8B9308C6AE9E8DB0C603B5D47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.mft
caRepository:             rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Jun 2025 11:48:13 +0000
Certificate not after:    Thu 18 Jun 2026 11:53:13 +0000
Subordinate resources:    AS: 265394
                          IP: 168.194.192.0/22
                          IP: 2804:3368::/32
Validation:               Failed, certificate revoked on Thu 19 Jun 2025 12:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c4:98:59:f5:b2:c2:c8:b9:30:8c:6a:e9:e8:db:0c:60:3b:5d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 19 11:48:13 2025 GMT
            Not After : Jun 18 11:53:13 2026 GMT
        Subject: CN=A3756BDF1D16A4696DDBD8788537C2F8FB47FA72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:fd:a4:0d:a6:54:ec:63:81:21:96:d0:54:
                    52:73:ec:c9:6b:93:cd:2b:cd:4f:78:3b:82:28:66:
                    d3:b7:a4:f2:13:bf:65:0f:3a:80:21:7e:8c:78:a3:
                    96:6a:7d:87:1f:db:1a:42:f6:85:97:ee:9c:ce:b0:
                    ad:f4:85:26:19:20:2f:c0:12:d1:4b:51:8b:24:b9:
                    70:a2:07:3a:4d:fa:eb:c5:02:01:59:4c:01:e1:9e:
                    0f:db:60:ad:ad:a3:d7:e9:d1:6a:8d:4b:b3:4e:f6:
                    fe:cd:b7:65:13:8b:b5:bb:60:e1:2a:d2:57:83:44:
                    bd:6a:1e:5c:43:90:f8:ae:86:d6:1b:e0:24:d3:83:
                    72:b1:d0:76:af:1b:ba:10:b2:c9:17:f9:53:43:8f:
                    8b:48:92:6d:ec:62:a6:55:45:18:af:3b:19:ab:c7:
                    0e:b7:42:fe:83:e9:c1:d4:14:ab:73:68:6e:90:ad:
                    aa:e7:53:b7:41:ad:d8:54:56:65:c2:48:65:11:00:
                    95:c1:85:19:65:b3:ea:87:ff:a2:28:97:ae:85:58:
                    cd:8f:18:1a:1d:bd:24:0b:7e:f7:a6:50:e2:31:c9:
                    02:b6:d6:f8:c0:e7:58:bc:f9:bf:bd:27:a5:74:4f:
                    36:b4:11:89:f9:3c:66:7b:f3:c6:72:f9:48:98:c5:
                    c2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:75:6B:DF:1D:16:A4:69:6D:DB:D8:78:85:37:C2:F8:FB:47:FA:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.192.0/22
                IPv6:
                  2804:3368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265394

    Signature Algorithm: sha256WithRSAEncryption
         72:25:2b:73:70:00:22:cb:16:41:f7:78:9e:57:db:00:21:42:
         f1:94:61:d5:f8:d0:66:60:07:93:27:62:21:17:df:9d:e5:8b:
         8e:1e:a6:49:68:67:e7:0e:1d:73:94:4b:86:84:a4:d0:f7:36:
         21:79:44:fd:9f:c7:82:29:5b:f9:cc:6d:54:76:db:a4:02:4c:
         b1:7c:37:55:12:2b:67:62:1e:ce:07:15:eb:52:a0:d0:3a:3b:
         3b:b9:5d:7d:ad:4f:5d:fe:11:42:fc:01:9e:02:9b:d7:ac:c8:
         2b:eb:6e:d7:8f:88:86:a5:e1:4c:15:46:3c:7f:02:d5:ae:a2:
         f8:29:82:5b:04:88:34:bf:a0:f5:63:24:8e:9a:66:4f:81:d1:
         ce:08:26:e0:60:f7:1a:72:68:90:02:e6:3b:50:5b:50:3b:9c:
         ac:ad:36:5b:86:cd:15:89:ac:44:20:02:f6:53:98:e5:90:2b:
         35:87:dd:e8:b4:ab:8f:2c:22:f5:cb:af:20:54:49:ff:0e:ea:
         ad:4c:51:10:35:d2:f5:aa:97:cd:e4:9a:64:db:94:73:87:ef:
         06:38:cb:01:3d:7a:e6:df:ee:1c:34:3a:24:97:a3:c2:c4:4f:
         a0:29:ce:fc:5c:db:4a:7d:b0:41:63:e7:dc:a1:d7:7d:66:b8:
         01:f2:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----