This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A4D4DF8346980B7F15E3DE6E744C0DD2A7FBEC80.cer
File:                     A4D4DF8346980B7F15E3DE6E744C0DD2A7FBEC80.cer (raw, json)
Hash identifier:          yTXGDdaR9b66RL/hnucYZD6+5JluTWvw4Wx0t4h1eFE=
Subject key identifier:   A4:D4:DF:83:46:98:0B:7F:15:E3:DE:6E:74:4C:0D:D2:A7:FB:EC:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       741342EF094CC9100C947DD1FF3F30FEEBD2B2CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BxBF6xMpFrymb7KWFpobAa3MZFJR6q82xSedSFEeeZ1K/0/A4D4DF8346980B7F15E3DE6E744C0DD2A7FBEC80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BxBF6xMpFrymb7KWFpobAa3MZFJR6q82xSedSFEeeZ1K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 26 Apr 2025 11:56:52 +0000
Certificate not after:    Sat 25 Apr 2026 12:01:52 +0000
Subordinate resources:    AS: 273503
                          IP: 2804:8fa4::/32
Validation:               Failed, certificate revoked on Thu 23 Oct 2025 01:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:13:42:ef:09:4c:c9:10:0c:94:7d:d1:ff:3f:30:fe:eb:d2:b2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 26 11:56:52 2025 GMT
            Not After : Apr 25 12:01:52 2026 GMT
        Subject: CN=A4D4DF8346980B7F15E3DE6E744C0DD2A7FBEC80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:fa:a4:26:70:3d:54:b8:d4:5e:b9:22:8d:
                    62:3e:d3:0c:2d:e7:0a:28:5c:4a:60:45:2e:b2:c8:
                    fd:e1:cb:92:6b:bb:3f:52:08:2b:85:a1:3d:43:e7:
                    79:9c:4f:e8:4d:b7:00:91:ec:22:b4:cb:2a:81:a4:
                    a2:1b:0d:c3:b4:71:cd:76:f1:4f:d3:ed:3e:51:33:
                    fe:f0:46:6e:67:c6:89:e0:f5:26:f3:84:94:0a:0a:
                    67:b2:f0:46:92:ca:76:42:0c:32:6f:55:65:b9:7f:
                    4e:70:b5:ca:df:6d:e0:4a:93:a8:2f:69:09:dc:78:
                    ec:23:0c:5d:ef:a8:3d:1b:ef:52:aa:5c:d0:91:ff:
                    94:e7:aa:8e:13:79:12:7b:7d:88:42:c6:4a:e9:16:
                    9a:be:f6:98:9a:00:fe:4d:08:86:e9:e2:3e:8b:76:
                    c9:79:b6:8d:2f:ab:48:5b:0d:c3:fa:0d:01:99:04:
                    91:f6:64:38:ee:f9:30:35:58:2f:6e:0e:0a:f6:c6:
                    66:c3:3f:0a:c6:94:88:2a:b7:82:e1:bd:f2:69:12:
                    d5:8d:ef:1e:ec:c9:43:9a:94:c9:ce:e5:b2:55:60:
                    20:24:34:ad:57:7e:cf:68:01:5f:49:60:0b:bb:31:
                    c1:7c:67:3b:4f:72:c8:97:d3:af:1e:0c:1b:30:d9:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:D4:DF:83:46:98:0B:7F:15:E3:DE:6E:74:4C:0D:D2:A7:FB:EC:80
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BxBF6xMpFrymb7KWFpobAa3MZFJR6q82xSedSFEeeZ1K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BxBF6xMpFrymb7KWFpobAa3MZFJR6q82xSedSFEeeZ1K/0/A4D4DF8346980B7F15E3DE6E744C0DD2A7FBEC80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273503

    Signature Algorithm: sha256WithRSAEncryption
         0a:b2:04:20:ab:70:a7:4e:3b:36:c9:6b:59:b0:d2:c2:b3:87:
         48:cf:b0:51:54:87:94:ae:93:60:85:48:70:ce:cf:20:33:99:
         32:4d:83:b6:ec:f1:d4:48:8d:e6:82:f5:db:ba:95:a5:b6:6a:
         87:f8:75:94:05:f0:8a:37:a0:f5:96:d1:f9:93:b5:da:97:35:
         05:30:e0:68:bf:c5:66:f7:4b:f0:0d:b3:77:94:ca:3e:da:ce:
         ca:80:ac:f7:d3:2c:b2:e2:d6:a6:3f:1a:80:0c:a4:71:14:0b:
         97:21:a9:c8:2b:6d:ba:64:db:64:97:5c:82:f3:23:ee:7c:64:
         8e:a0:66:d3:8b:d7:d8:1f:d0:8b:21:49:df:3f:e9:29:74:5a:
         9d:de:e3:db:69:77:ae:e8:ac:7a:69:ac:17:70:7a:8c:d0:e3:
         e1:82:a5:67:4f:54:4e:8c:ac:36:1d:9c:6c:a4:97:38:6e:a1:
         ae:52:a6:4a:59:2b:c3:ce:71:35:14:b3:cc:f9:4a:ea:40:a1:
         1e:e2:8d:52:52:86:08:3d:fc:1f:9b:45:e0:0e:2b:6b:b0:52:
         dd:35:10:24:71:1d:37:09:dd:b0:de:7a:0b:2a:7e:fb:20:bd:
         23:75:94:61:c6:18:e0:4d:3b:a8:50:e0:d5:f8:2b:22:2a:fc:
         09:cb:a9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----