This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer
File:                     BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer (raw, json)
Hash identifier:          lmcX3kQYaHJyNxATOzcxenWxaShMt4gfKLvg/ERXowM=
Subject key identifier:   BC:D8:4C:FF:DA:05:33:E6:58:70:50:A9:43:12:3B:0F:88:58:F5:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       65A5775B753F1A06621787F1A2C7BAEC89C557A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:01:45 +0000
Certificate not after:    Fri 06 Mar 2026 14:06:45 +0000
Subordinate resources:    AS: 268020
                          IP: 45.167.8.0/22
                          IP: 2804:56bc::/32
Validation:               Failed, certificate revoked on Tue 26 Aug 2025 23:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a5:77:5b:75:3f:1a:06:62:17:87:f1:a2:c7:ba:ec:89:c5:57:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:01:45 2025 GMT
            Not After : Mar  6 14:06:45 2026 GMT
        Subject: CN=BCD84CFFDA0533E6587050A943123B0F8858F5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:98:58:db:e4:a2:03:36:d1:c3:80:8d:34:
                    45:d8:04:15:54:83:f4:be:4e:75:41:5c:ee:a9:9c:
                    20:c3:28:b3:e3:0d:70:29:6f:2f:90:c2:ea:22:e4:
                    90:0a:d2:ae:f2:61:fa:38:1e:58:cb:f9:2b:e5:e1:
                    1b:cb:4c:c7:5a:cc:ff:1a:d4:05:27:4d:4c:f0:ed:
                    58:8d:64:89:7a:9a:6e:97:de:56:13:93:11:21:ec:
                    59:96:b3:27:db:f9:16:81:89:fc:53:52:38:4e:cd:
                    51:01:47:3c:05:87:3e:d4:7f:32:80:e7:9c:3d:b2:
                    db:72:66:2d:13:c6:43:cb:c3:63:2f:59:f3:9f:77:
                    f9:e4:6e:ab:8f:43:ae:3e:74:25:c0:ba:07:83:cb:
                    05:8a:45:c7:d6:60:7d:c4:f6:d8:d7:4a:a2:20:7c:
                    dc:8c:41:6a:72:cd:37:82:2a:a6:2f:3a:28:f1:56:
                    df:6c:e9:43:7b:0f:75:f7:62:01:72:e0:c2:8e:a2:
                    4a:ff:0f:e6:b7:38:69:39:03:b8:cb:22:e9:0d:44:
                    fb:76:46:13:04:75:a2:42:3a:30:c4:2b:be:21:ae:
                    fe:46:d9:d3:41:ce:c1:e0:13:65:c1:fd:34:f8:b2:
                    70:d9:bc:92:7e:b7:84:7b:f6:b0:2c:37:db:44:1f:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:D8:4C:FF:DA:05:33:E6:58:70:50:A9:43:12:3B:0F:88:58:F5:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.8.0/22
                IPv6:
                  2804:56bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268020

    Signature Algorithm: sha256WithRSAEncryption
         32:19:5c:9f:04:bd:43:16:ef:af:bb:97:37:c7:15:1c:09:49:
         24:a1:38:fa:41:ba:5f:e6:6e:95:a6:52:af:ba:f1:aa:d5:e8:
         24:2b:c6:49:4b:69:49:c3:88:61:45:9d:7b:90:a7:31:08:fa:
         79:71:3e:2e:eb:c4:e3:09:26:f1:b0:96:0e:57:08:8b:39:47:
         08:33:7b:3a:bd:75:45:af:25:a5:29:35:e3:44:88:40:b3:c8:
         2b:f4:f5:93:4d:66:e5:5c:11:aa:8f:b9:f7:a7:32:1f:2f:a8:
         2f:78:1f:12:67:77:96:60:05:2a:51:75:df:3f:41:ce:d5:36:
         80:05:cc:06:97:0c:4c:5f:af:ef:4d:43:ec:9d:63:a9:42:8d:
         0e:f4:b4:a6:5c:f0:c9:bc:24:53:e0:5d:b1:6b:14:13:e4:33:
         ae:4f:b0:57:15:7f:95:19:ff:86:cd:d0:fa:72:34:3e:23:55:
         3c:5e:b3:0a:aa:2a:0e:df:78:dd:3d:59:4d:d2:3a:59:d5:e5:
         b1:82:e3:55:78:f2:f8:7f:eb:fe:fb:f7:cb:3f:d5:bc:2b:5f:
         aa:ad:19:2a:1b:eb:92:e4:ea:14:8d:2c:fd:70:f4:6a:b6:dd:
         f1:c3:10:1f:43:41:26:1e:5f:b7:5d:7c:aa:04:f8:f5:0c:30:
         e6:30:d3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----