This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B9A9986BA89CEE19AAB67AD223738CF67B89A67C.cer
File:                     B9A9986BA89CEE19AAB67AD223738CF67B89A67C.cer (raw, json)
Hash identifier:          mkJwBopOVC3Eo77GJYHrf+/rMZODaQn+gv2Kexiimf0=
Subject key identifier:   B9:A9:98:6B:A8:9C:EE:19:AA:B6:7A:D2:23:73:8C:F6:7B:89:A6:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       21D17AB85E7960C5F608021C3508A386BD70DC9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/B9A9986BA89CEE19AAB67AD223738CF67B89A67C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 May 2025 17:59:09 +0000
Certificate not after:    Mon 04 May 2026 18:04:09 +0000
Subordinate resources:    AS: 263142
                          IP: 177.93.80.0/21
                          IP: 2804:1760::/32
Validation:               Failed, certificate revoked on Thu 23 Oct 2025 04:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d1:7a:b8:5e:79:60:c5:f6:08:02:1c:35:08:a3:86:bd:70:dc:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  5 17:59:09 2025 GMT
            Not After : May  4 18:04:09 2026 GMT
        Subject: CN=B9A9986BA89CEE19AAB67AD223738CF67B89A67C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:c4:5f:80:4a:d0:77:e2:f3:a2:d9:f4:16:
                    85:9e:5d:55:83:f8:d2:f8:79:6e:6d:0d:fd:09:9a:
                    85:31:ca:65:b8:e2:cd:15:e2:02:32:0a:02:a0:95:
                    60:2a:16:38:f2:3f:a0:49:75:8a:34:1b:cf:b1:18:
                    03:2e:59:d4:b2:2f:82:4d:47:38:d1:ef:73:9d:20:
                    e6:fb:f3:63:b8:37:f5:1c:d9:4e:e4:9a:0d:55:20:
                    b6:ef:c5:dd:89:9f:46:af:2c:45:51:51:db:48:e6:
                    0e:88:b3:2e:6c:a1:b2:7d:85:fb:b4:5b:fb:90:fc:
                    c2:b0:0f:4b:c6:98:5d:e9:91:73:cb:14:98:df:b3:
                    fe:b4:70:40:31:1d:8d:bb:81:4e:33:37:1e:16:fa:
                    fe:f1:72:8b:48:bc:e7:af:68:4a:88:ea:09:8a:c8:
                    58:65:cb:8d:14:57:0f:74:77:6e:06:e1:fe:c1:21:
                    4f:d3:b1:f5:40:21:d1:bd:1a:8c:44:e1:b5:ba:81:
                    ae:bf:eb:68:24:5f:ea:cb:c6:e8:58:c8:53:02:b0:
                    87:82:3f:c2:f1:b2:bb:c7:16:87:9c:1e:fb:2a:ef:
                    56:a1:f4:67:b0:5c:49:52:f0:02:01:d3:b3:63:dc:
                    d4:97:68:e4:64:d2:54:76:13:af:3c:42:38:06:b6:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:A9:98:6B:A8:9C:EE:19:AA:B6:7A:D2:23:73:8C:F6:7B:89:A6:7C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/B9A9986BA89CEE19AAB67AD223738CF67B89A67C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.80.0/21
                IPv6:
                  2804:1760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263142

    Signature Algorithm: sha256WithRSAEncryption
         af:92:f8:32:be:4b:c3:bf:c6:b7:3c:7a:e5:93:07:c9:71:db:
         a6:76:c6:77:68:63:ef:f2:7e:55:66:5b:0d:dd:e3:64:12:24:
         ba:57:9c:fb:2a:eb:be:ba:1f:94:58:35:f4:3a:32:86:56:ef:
         2f:40:28:50:cd:47:25:cd:05:e8:4c:9e:6d:f2:e4:fc:0a:c1:
         8a:3a:64:20:d7:f1:8c:d1:3a:d7:55:01:15:fe:b8:25:6c:4e:
         3c:0c:36:f4:d9:15:ac:a9:75:61:a7:43:a5:29:21:fa:d0:f5:
         22:37:a9:08:d9:61:d8:82:d5:bd:d3:a3:a9:0a:23:5c:4f:ce:
         e9:36:91:b9:13:1c:e1:b0:99:86:6c:b4:39:e1:c3:40:4f:a5:
         16:de:4d:9f:08:95:d0:c6:f1:1f:94:ce:ce:05:14:75:c5:cf:
         79:9b:d7:a1:33:8c:81:93:47:c0:76:a7:95:a3:07:f6:87:70:
         e4:cc:85:52:b8:01:b5:5c:a0:dd:75:4c:37:b4:9c:53:28:62:
         03:02:45:b7:e0:98:28:2d:a6:b1:bc:07:69:f4:c3:c8:22:05:
         03:a5:50:53:95:50:a8:0a:8b:c9:b4:16:ee:05:bf:62:c2:4d:
         47:eb:6f:e5:46:f0:f8:76:2c:7f:ba:0f:e2:42:02:c1:eb:1a:
         c6:30:1b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----