This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer
File:                     B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer (raw, json)
Hash identifier:          3w05TN0kqGRG1JKV8O1hpzXl6tAdjJM161CmVSR11BQ=
Subject key identifier:   B0:C3:C6:B9:83:74:7F:87:1B:B1:AE:8C:E9:92:EA:C7:76:B7:6A:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       412D93BD58F3E9A6FFAB997C775274A37E36EF6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 May 2025 22:34:06 +0000
Certificate not after:    Fri 15 May 2026 22:39:06 +0000
Subordinate resources:    AS: 269704
                          IP: 45.189.160.0/22
                          IP: 45.191.104.0/22
                          IP: 2804:689c::/32
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 15:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2d:93:bd:58:f3:e9:a6:ff:ab:99:7c:77:52:74:a3:7e:36:ef:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 22:34:06 2025 GMT
            Not After : May 15 22:39:06 2026 GMT
        Subject: CN=B0C3C6B983747F871BB1AE8CE992EAC776B76AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ef:23:bb:ab:8f:3e:4c:8a:78:85:12:53:67:
                    ad:93:0f:aa:fb:01:74:f7:03:6f:bb:c0:0f:33:88:
                    e5:82:c2:ee:14:d1:cd:05:12:15:73:b1:f2:11:9f:
                    7f:1d:d9:21:9d:a9:1c:09:d2:a2:21:ba:d0:f1:cd:
                    d3:6e:0d:0e:10:61:84:15:2e:01:33:16:33:65:8b:
                    9f:4e:c4:84:2e:87:93:0f:e2:bd:4b:d7:7c:14:97:
                    5f:68:c9:39:47:fa:b8:eb:3d:2d:4a:be:3c:01:9e:
                    76:f7:92:8b:c2:ab:0f:74:da:2a:c0:7f:6d:49:50:
                    a5:7b:ee:f3:a6:52:2f:9a:38:87:d1:73:cd:ea:a8:
                    3a:0a:bf:61:be:c9:b6:89:a9:11:9b:bf:b8:ab:d1:
                    d2:3e:30:75:cb:ad:7e:7b:12:2d:d8:a2:ab:de:21:
                    44:35:66:10:8a:0c:8e:0f:49:87:9f:44:10:4c:5f:
                    5a:ce:92:ac:e8:a2:df:e2:6b:d1:7e:f5:8f:30:07:
                    fc:bf:6b:c5:bf:5c:8e:38:9a:86:5b:88:a2:6c:5e:
                    7a:54:17:01:de:f1:bb:6f:6f:9d:cf:20:c4:ce:49:
                    60:6d:a9:0e:60:5b:7d:d5:d4:34:aa:df:49:d5:22:
                    c2:09:39:1b:39:45:75:b5:ff:8c:b5:e0:e0:ee:bc:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:C3:C6:B9:83:74:7F:87:1B:B1:AE:8C:E9:92:EA:C7:76:B7:6A:B3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.160.0/22
                  45.191.104.0/22
                IPv6:
                  2804:689c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269704

    Signature Algorithm: sha256WithRSAEncryption
         66:74:b7:03:d5:db:eb:99:56:4b:1d:e4:b7:1a:98:96:5b:58:
         8e:07:95:16:64:67:22:ad:d3:af:12:13:7a:9a:69:48:77:31:
         20:56:c1:2f:f4:b0:d5:93:a3:51:b4:4e:7b:b4:36:7e:82:66:
         84:55:dd:ae:24:68:4c:14:fc:eb:3f:8a:59:e5:ae:d7:f4:19:
         97:f6:b9:af:ed:a1:9e:a2:3c:14:f9:0a:b9:e1:f7:ae:9c:ff:
         1b:e3:52:b3:95:bf:01:f9:df:8d:5b:67:21:88:8d:fc:cd:c5:
         15:56:df:fa:24:d8:01:21:0c:6b:25:27:a0:a4:1c:1e:dd:bc:
         e1:8b:92:2c:49:50:4c:47:32:32:3c:36:57:b7:90:10:58:c2:
         15:6c:32:a8:0d:35:72:6e:fb:a5:d5:b7:b9:14:c9:b6:6c:65:
         6b:33:5a:d8:b4:fe:1c:08:18:1e:d4:81:38:34:56:24:b8:18:
         6b:18:42:42:03:c3:92:72:55:67:d2:7e:79:48:97:c4:36:67:
         85:b0:7c:38:0f:59:b9:71:b6:46:62:0a:5e:8c:9a:ee:5b:c1:
         00:76:82:22:c8:25:dc:6e:61:ad:87:c7:83:7f:eb:97:2d:39:
         0d:23:2b:10:40:2d:9c:79:81:26:87:4a:97:26:76:5c:60:ee:
         95:c6:12:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----