This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.cer
File:                     BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.cer (raw, json)
Hash identifier:          I7iqKc3Pmxbq2/9QeKn9J4pdyvrHohYaYD6Pm2Nx87Q=
Subject key identifier:   BA:1C:1C:5A:5B:AB:63:95:B0:65:91:60:39:4C:AF:12:B4:D8:E9:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3BB4214C7AA956AA298B1814AAE4AFDCEA248DC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Jul 2025 11:17:36 +0000
Certificate not after:    Wed 15 Jul 2026 11:22:36 +0000
Subordinate resources:    AS: 262988
                          IP: 168.90.80.0/22
                          IP: 179.125.64.0/19
                          IP: 186.251.8.0/22
                          IP: 2804:1058::/32
Validation:               Failed, certificate revoked on Mon 21 Jul 2025 13:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b4:21:4c:7a:a9:56:aa:29:8b:18:14:aa:e4:af:dc:ea:24:8d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 16 11:17:36 2025 GMT
            Not After : Jul 15 11:22:36 2026 GMT
        Subject: CN=BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:01:0f:85:f9:9e:79:4e:9c:1a:1b:87:f4:
                    b0:80:b7:ee:01:f7:aa:ba:d1:90:e8:8c:55:8c:b8:
                    f4:5b:61:84:52:76:5e:24:96:96:67:1d:96:6b:8e:
                    2e:f3:26:89:90:58:42:52:50:94:6e:b0:18:3a:20:
                    ec:5c:e6:7a:14:15:83:e8:b7:02:04:be:b1:b0:62:
                    6f:28:a5:f8:9d:6e:f9:50:37:0a:b0:de:64:b3:87:
                    c2:9a:9c:89:e2:09:b2:d7:26:64:e3:b2:80:9d:db:
                    f9:d1:af:4c:0e:0c:f8:af:5b:3d:07:d9:df:35:b5:
                    71:91:41:5f:13:34:c6:bc:f2:1e:5c:be:64:a2:6c:
                    69:6a:ad:f9:82:30:fd:d4:5a:08:5b:b4:a6:e2:cd:
                    35:1a:a0:12:7b:95:16:d0:1d:41:61:3e:66:2f:c2:
                    15:a5:12:57:ab:94:b4:95:0a:73:ee:b5:7a:1b:ac:
                    90:8d:02:f9:e9:d5:14:85:0f:bb:62:ee:00:6d:86:
                    ba:35:30:55:60:1e:80:dc:e5:10:a4:99:5c:da:f6:
                    4a:17:d5:f0:a2:37:ba:4e:bf:b4:e5:de:06:f9:28:
                    62:f9:14:00:08:dd:63:ae:75:19:2a:df:c4:32:73:
                    38:47:9a:80:fa:24:b8:7b:9d:bb:1c:ac:0f:42:eb:
                    57:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:1C:1C:5A:5B:AB:63:95:B0:65:91:60:39:4C:AF:12:B4:D8:E9:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.80.0/22
                  179.125.64.0/19
                  186.251.8.0/22
                IPv6:
                  2804:1058::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262988

    Signature Algorithm: sha256WithRSAEncryption
         9a:da:07:9f:16:41:14:ec:fb:bf:38:7d:4a:fe:f3:32:07:14:
         ac:55:e8:19:9d:7a:ce:c2:fe:33:b4:23:82:db:d6:19:35:d2:
         4a:ea:35:8c:cc:ad:4c:4b:08:53:79:97:7c:d3:52:e0:64:5e:
         07:f9:33:46:7e:4d:d6:9e:e1:e2:0b:43:4a:df:08:a2:21:3c:
         0d:78:49:18:a2:c8:1b:b8:d3:2a:2f:67:c1:25:40:da:fb:bd:
         95:ef:5e:a9:76:fa:b5:f3:de:df:68:87:7b:59:7f:df:3a:e9:
         25:63:bf:2d:f9:99:30:94:0d:27:6e:ec:85:07:5b:94:7e:ae:
         16:84:18:61:dd:60:db:ba:67:d3:2a:02:54:84:ed:38:7c:20:
         ca:c3:92:27:45:80:c8:84:a5:e6:74:87:64:cd:08:2d:29:29:
         20:bf:5a:52:6e:b6:b1:96:21:a9:6e:85:99:b1:7b:86:65:57:
         56:7e:16:6f:9e:58:22:ba:1a:58:58:ec:9f:5f:43:1c:03:f2:
         f8:74:69:89:1d:d1:6a:57:c3:c3:ca:cf:53:49:d9:2f:01:4b:
         92:5c:12:e9:a5:77:2a:37:c0:28:d3:8d:62:a8:f7:79:e0:71:
         ec:e9:24:91:a9:ab:3f:93:08:fc:70:5b:7e:31:74:81:2e:ea:
         bc:89:33:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----