This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
File:                     BED400A73F58C91A8818D8830C03AD69A939B9B0.cer (raw, json)
Hash identifier:          hnRzsZUdHMU1F0UHw4mTRRDiyBdwTgTW7vQZifsX2Xg=
Subject key identifier:   BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       69ECA7E42CC1F7628C3BD2610741FF105E4645FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Jul 2025 18:40:57 +0000
Certificate not after:    Fri 10 Jul 2026 18:45:57 +0000
Subordinate resources:    AS: 53156
                          IP: 186.211.0.0/20
                          IP: 2804:4a04::/32
Validation:               Failed, certificate revoked on Sat 12 Jul 2025 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ec:a7:e4:2c:c1:f7:62:8c:3b:d2:61:07:41:ff:10:5e:46:45:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 11 18:40:57 2025 GMT
            Not After : Jul 10 18:45:57 2026 GMT
        Subject: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ec:8c:d9:e8:17:ec:ef:6a:4b:98:02:84:dc:
                    59:47:2f:94:18:f1:7a:f6:83:9a:55:64:da:05:dd:
                    5d:f1:8a:f1:d4:82:8b:06:dd:8d:37:87:03:5d:22:
                    5f:6c:b2:4b:cd:c7:49:17:d7:0a:6b:b6:86:81:7a:
                    22:32:a6:16:33:16:ec:bc:7e:7f:db:0b:47:43:a5:
                    4d:db:7f:de:56:3c:7f:15:f0:08:6e:88:54:40:71:
                    d2:5d:af:d3:dd:8d:e8:f1:6b:15:4b:bb:1d:16:d6:
                    c7:c7:46:b0:28:a5:5c:65:66:fa:a0:9a:a1:82:a9:
                    43:46:86:c4:d2:9d:af:95:46:45:d1:d9:6e:79:8f:
                    12:c7:cb:98:0d:0c:8a:ab:e0:ae:1a:86:5d:c2:f9:
                    0d:38:c6:58:05:29:6b:9b:f2:f7:58:49:b7:10:e3:
                    fd:85:3e:c4:74:64:c0:3c:1b:cc:5d:8b:e7:d7:d1:
                    02:a2:39:2d:fe:0b:71:b8:32:4f:ab:94:37:c7:10:
                    62:59:62:09:f4:f1:73:c8:ce:f6:28:16:9d:df:02:
                    9e:96:52:38:30:df:b0:5d:02:93:09:cc:77:b0:b2:
                    b8:ce:c3:d4:5e:d5:29:33:f5:0b:ef:d2:9a:19:44:
                    50:b3:b3:0b:f6:fc:d8:c7:81:4a:1d:57:f3:a7:30:
                    61:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.0.0/20
                IPv6:
                  2804:4a04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53156

    Signature Algorithm: sha256WithRSAEncryption
         bf:85:93:ef:30:5d:9b:68:9d:70:83:db:d4:d9:ed:f5:b4:0b:
         1e:6e:48:61:c8:36:92:38:ed:04:da:a5:a0:52:7e:79:a9:93:
         ef:dd:be:da:b8:18:0d:10:96:18:2d:6a:fb:2f:40:ca:eb:91:
         83:4e:10:92:54:bf:da:57:a6:72:1e:8b:36:7b:ce:a5:b5:f0:
         a2:79:ab:7a:0b:b4:d2:7c:76:31:7e:3c:07:e2:80:d3:ca:1f:
         f1:73:6d:5f:4f:8f:ff:f2:6d:90:d6:b8:e0:84:5f:7d:ca:44:
         a3:77:33:3f:98:41:42:79:ec:cb:d3:40:3f:bf:02:3a:22:95:
         a8:6c:65:5a:c0:b5:c6:e5:0f:58:53:75:63:3d:03:83:aa:f9:
         70:03:36:8a:17:9d:63:e4:52:b4:7a:27:a9:83:6d:ad:3e:84:
         ab:e8:e8:b3:6e:88:17:25:0e:75:0d:76:cf:0f:a7:bc:92:5d:
         cc:53:b0:85:f4:c6:f3:a0:5b:6f:8f:5a:e0:ed:eb:ce:25:b7:
         68:c7:fa:52:db:b8:17:42:03:a9:dc:bb:7b:5c:b0:cb:ef:d8:
         03:5e:ea:bf:72:6f:aa:b6:ce:52:af:b5:97:66:69:fc:0b:88:
         c9:96:99:a9:71:64:48:38:d2:8a:7b:90:4c:af:e9:83:02:09:
         7a:b5:78:7a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUaeyn5CzB92KMO9JhB0H/EF5GRfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA3MTExODQwNTdaFw0yNjA3MTAxODQ1NTdaMDMxMTAvBgNV
BAMTKEJFRDQwMEE3M0Y1OEM5MUE4ODE4RDg4MzBDMDNBRDY5QTkzOUI5QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP7IzZ6Bfs72pLmAKE3FlHL5QY
8Xr2g5pVZNoF3V3xivHUgosG3Y03hwNdIl9sskvNx0kX1wprtoaBeiIyphYzFuy8
fn/bC0dDpU3bf95WPH8V8AhuiFRAcdJdr9PdjejxaxVLux0W1sfHRrAopVxlZvqg
mqGCqUNGhsTSna+VRkXR2W55jxLHy5gNDIqr4K4ahl3C+Q04xlgFKWub8vdYSbcQ
4/2FPsR0ZMA8G8xdi+fX0QKiOS3+C3G4Mk+rlDfHEGJZYgn08XPIzvYoFp3fAp6W
Ujgw37BdApMJzHewsrjOw9Re1Skz9Qvv0poZRFCzswv2/NjHgUodV/OnMGHHAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+1ACnP1jJGogY
2IMMA61pqTm5sDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0p0
d0hzQ3BmUUV6Rm5uRWpVaU5ROUM3N0J6UEVUOHU4Y2l5eHZKTnBCN28vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dK
dHdIc0NwZlFFekZubkVqVWlOUTlDNzdCelBFVDh1OGNpeXh2Sk5wQjdvLzAvQkVE
NDAwQTczRjU4QzkxQTg4MThEODgzMEMwM0FENjlBOTM5QjlCMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEutMAMA0EAgACMAcDBQAoBEoEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDPpDANBgkqhkiG9w0BAQsFAAOCAQEAv4WT7zBdm2idcIPb
1Nnt9bQLHm5IYcg2kjjtBNqloFJ+eamT792+2rgYDRCWGC1q+y9AyuuRg04QklS/
2lemch6LNnvOpbXwonmregu00nx2MX48B+KA08of8XNtX0+P//JtkNa44IRffcpE
o3czP5hBQnnsy9NAP78COiKVqGxlWsC1xuUPWFN1Yz0Dg6r5cAM2ihedY+RStHon
qYNtrT6Eq+jos26IFyUOdQ12zw+nvJJdzFOwhfTG86Bbb49a4O3rziW3aMf6Utu4
F0IDqdy7e1ywy+/YA17qv3JvqrbOUq+1l2Zp/AuIyZaZqXFkSDjSinuQTK/pgwIJ
erV4eg==
-----END CERTIFICATE-----