This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer
File:                     BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer (raw, json)
Hash identifier:          Pf7W6HlbgEbra6YNkbU9TzF0hG3AKfrbO6AUgW9FfDQ=
Subject key identifier:   BF:5F:73:26:7A:08:76:B9:F6:FD:A7:5E:24:67:70:4D:6B:FB:84:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       264FF8FB8511B67AC29B0F704929248363DDAE57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Apr 2025 16:59:10 +0000
Certificate not after:    Mon 27 Apr 2026 17:04:10 +0000
Subordinate resources:    AS: 265437
                          IP: 168.195.176.0/22
                          IP: 2804:3420::/32
Validation:               Failed, certificate revoked on Thu 21 Aug 2025 00:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4f:f8:fb:85:11:b6:7a:c2:9b:0f:70:49:29:24:83:63:dd:ae:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 28 16:59:10 2025 GMT
            Not After : Apr 27 17:04:10 2026 GMT
        Subject: CN=BF5F73267A0876B9F6FDA75E2467704D6BFB84D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:d2:1b:40:bc:fb:70:50:1c:b6:b9:50:da:
                    e4:5d:08:d0:59:b1:82:f3:cf:52:b5:9b:6f:b7:47:
                    e3:9e:fd:8c:7a:5d:9c:26:83:8f:75:b8:5d:86:7e:
                    03:01:66:3b:c4:9a:7a:b6:1b:9e:df:98:02:8e:89:
                    55:e3:6b:3b:9b:e4:b8:36:f8:9a:c1:09:e9:27:61:
                    f7:6c:d4:94:05:15:ef:4e:cd:62:e0:1e:66:55:7b:
                    34:8d:3a:06:f0:f1:b9:9d:cd:9b:e9:19:de:44:64:
                    0a:9e:5e:a1:0f:f4:c8:41:10:f0:6a:a5:b6:90:f5:
                    cb:c2:0f:92:1f:29:0b:c2:78:71:cb:e5:98:bf:39:
                    d7:a4:a2:33:d6:1a:fe:ce:b7:0d:d7:02:3c:9e:9b:
                    37:28:e3:42:f7:69:2e:80:0b:55:86:31:9e:5f:c0:
                    78:e2:51:bd:7b:71:b5:77:d7:0c:94:27:d6:43:b5:
                    5e:db:ae:99:3b:82:03:f4:04:85:50:c9:78:d8:a7:
                    05:fc:7a:be:25:8c:f9:8e:c6:cb:d1:fe:bc:4c:4e:
                    97:37:ac:56:ce:a6:6d:c2:f0:5c:e8:c3:88:87:93:
                    72:7c:12:20:5d:24:38:98:11:c1:22:e4:20:40:9e:
                    ed:81:34:1b:d7:42:cc:22:00:b9:8e:61:2f:eb:64:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:5F:73:26:7A:08:76:B9:F6:FD:A7:5E:24:67:70:4D:6B:FB:84:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.176.0/22
                IPv6:
                  2804:3420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265437

    Signature Algorithm: sha256WithRSAEncryption
         77:16:02:da:38:bc:48:5c:84:98:0c:3c:de:08:75:7d:1b:15:
         7e:fb:e2:ad:e1:52:47:42:28:0b:bd:a7:c4:49:84:a4:56:9f:
         37:6b:3d:2a:0e:da:f8:36:f5:94:0f:60:d9:9f:51:2f:81:25:
         d9:91:f4:bb:b6:fd:40:ee:78:ae:08:27:f5:c9:75:65:09:07:
         eb:30:66:d2:13:15:5e:a4:80:03:f5:d1:cb:cd:0c:4f:92:a0:
         d2:7f:8d:17:17:7a:ae:77:9c:5a:79:b2:a2:aa:19:21:bc:f9:
         5c:5d:3d:ad:8b:3a:73:be:52:21:c4:d4:ab:24:30:7c:71:72:
         3f:7d:ad:ba:a4:22:0f:56:99:cc:93:5c:f5:03:a4:a0:bb:e8:
         91:c8:75:00:1a:92:92:7f:95:8e:f8:14:d4:37:5a:6e:4d:ef:
         a2:f5:88:01:e9:e6:60:15:7b:40:29:fa:2e:66:3a:61:a4:e7:
         4a:7e:cb:bb:95:fd:5f:8b:2f:da:84:44:21:cd:37:8d:8b:f4:
         2d:24:70:5c:47:82:30:e6:d7:36:72:f8:69:e4:c7:e8:14:76:
         83:f0:9b:d4:7f:ea:51:57:82:76:90:6e:88:d1:20:36:e5:9b:
         28:4b:c3:be:81:7d:7b:ab:36:5e:28:cb:37:50:a8:1a:fe:07:
         1f:fe:2c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----