This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7090EAB1A08216F934538653EBAD5DA08C323A4.cer
File:                     B7090EAB1A08216F934538653EBAD5DA08C323A4.cer (raw, json)
Hash identifier:          TxalGZ15KdtpofzCZSvCvnM3luSFdlo+6Bgg8rgzlZk=
Subject key identifier:   B7:09:0E:AB:1A:08:21:6F:93:45:38:65:3E:BA:D5:DA:08:C3:23:A4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       65BEF2D04BADE2143DA3E1ABCE97F4454E825D23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/1/B7090EAB1A08216F934538653EBAD5DA08C323A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 15:14:09 +0000
Certificate not after:    Fri 06 Mar 2026 15:19:09 +0000
Subordinate resources:    AS: 269396
                          IP: 45.184.112.0/22
                          IP: 2804:63fc::/32
Validation:               Failed, certificate revoked on Wed 15 Oct 2025 04:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:be:f2:d0:4b:ad:e2:14:3d:a3:e1:ab:ce:97:f4:45:4e:82:5d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 15:14:09 2025 GMT
            Not After : Mar  6 15:19:09 2026 GMT
        Subject: CN=B7090EAB1A08216F934538653EBAD5DA08C323A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:c2:2a:ec:0e:37:79:b7:02:91:b1:f2:52:
                    96:fc:e3:7b:ed:84:f1:91:f5:2d:90:05:ee:28:ef:
                    ce:01:e4:8f:fa:cd:27:ef:47:f3:5c:58:ae:5e:9b:
                    2a:fa:f8:56:55:fd:60:20:bc:55:67:3d:43:97:fb:
                    2e:90:0f:de:88:58:da:71:f4:8a:5a:6c:75:b0:49:
                    83:a2:d2:74:41:e9:2f:fe:09:2f:3f:57:78:98:99:
                    e7:df:8d:eb:d1:14:a3:cb:03:5d:b7:e3:9b:c2:fc:
                    04:62:4a:a7:c1:7c:a4:3a:93:54:c9:b1:81:d0:98:
                    b4:57:b8:69:63:fe:c7:6b:f7:b2:f4:d6:f7:70:5d:
                    4a:36:79:96:f3:76:f4:f6:f8:88:ad:64:da:29:e4:
                    1f:e2:a3:a0:42:fe:9a:a1:7d:23:5a:59:ed:98:b6:
                    6d:4e:1f:8d:8d:ad:96:a8:07:33:c0:95:8a:1c:87:
                    b3:66:d1:fa:0b:97:d5:a5:06:21:f9:bd:4d:09:46:
                    b5:d4:55:90:41:bb:0a:c8:8a:2a:bc:a7:d1:67:93:
                    01:d6:70:42:7c:44:10:2a:34:df:87:47:bc:cd:23:
                    f4:04:71:ae:c9:cd:8a:00:94:34:68:f4:a9:64:b0:
                    18:f8:0a:1b:a1:63:44:08:c4:e7:bd:9c:ea:1d:cc:
                    92:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:09:0E:AB:1A:08:21:6F:93:45:38:65:3E:BA:D5:DA:08:C3:23:A4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/1/B7090EAB1A08216F934538653EBAD5DA08C323A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.112.0/22
                IPv6:
                  2804:63fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269396

    Signature Algorithm: sha256WithRSAEncryption
         81:15:ac:47:0a:38:c4:70:11:ec:9d:2d:3c:0a:22:99:0c:18:
         e6:6d:21:dd:43:80:a8:fb:18:43:13:1f:c0:e2:74:ee:38:48:
         cc:38:63:17:bd:d9:6e:d0:c0:88:1e:24:16:d5:71:5e:3d:e0:
         2f:ff:b8:24:94:d1:6d:6e:e5:dc:3f:19:8a:32:a1:b0:e0:94:
         eb:60:34:5e:8b:bb:64:47:4e:8f:f3:35:30:6d:e0:f2:9a:54:
         92:b9:12:00:4d:0d:da:2b:80:56:67:4d:e0:37:67:ef:b9:e3:
         fa:ad:59:c0:0d:d6:2f:58:ed:45:ff:d7:c7:08:0d:fa:65:72:
         54:3b:ad:20:86:42:60:20:6b:3e:4f:ba:cd:a0:ea:2c:f1:ba:
         f6:01:62:f7:e5:ef:49:3f:4c:cd:b6:ac:dd:0d:0f:33:d4:cd:
         41:c0:92:02:b3:38:d8:cc:bb:00:29:f2:ec:0b:fa:3d:9c:cf:
         8d:9f:e1:d8:c9:dc:30:67:a3:96:18:e2:82:1b:72:6a:3b:99:
         a0:6d:a0:87:c1:b5:c3:09:fb:f8:2a:7e:f4:94:56:6d:5d:38:
         c6:72:ea:0b:16:b7:7c:91:fa:92:67:2d:ad:4e:9f:7f:5e:51:
         90:54:5e:ca:cc:8e:5a:c8:b6:db:d3:aa:11:92:0d:fa:52:34:
         b4:7c:13:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----