This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E581B73DC1057A71A7F61DC9118F0E077FEFF09D.cer
File:                     E581B73DC1057A71A7F61DC9118F0E077FEFF09D.cer (raw, json)
Hash identifier:          Hi1n4PSjyEtIhOhXfqwWgqTj1co6RVAMQaV10VOdgNo=
Subject key identifier:   E5:81:B7:3D:C1:05:7A:71:A7:F6:1D:C9:11:8F:0E:07:7F:EF:F0:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       304FC01151E6957317C6D55E2D8F0157D37EDF0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/E581B73DC1057A71A7F61DC9118F0E077FEFF09D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 18 Jul 2025 01:59:43 +0000
Certificate not after:    Fri 17 Jul 2026 02:04:43 +0000
Subordinate resources:    AS: 266272
                          IP: 170.78.148.0/22
                          IP: 2804:3528::/32
Validation:               Failed, certificate revoked on Fri 18 Jul 2025 02:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4f:c0:11:51:e6:95:73:17:c6:d5:5e:2d:8f:01:57:d3:7e:df:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 18 01:59:43 2025 GMT
            Not After : Jul 17 02:04:43 2026 GMT
        Subject: CN=E581B73DC1057A71A7F61DC9118F0E077FEFF09D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:1b:cc:a4:e7:e1:9d:80:93:13:a3:5a:f1:
                    e5:25:8a:69:29:83:93:53:3c:4d:11:46:2a:29:5a:
                    a4:8b:76:9b:ad:85:ce:79:a9:06:ee:fe:24:1d:00:
                    6f:32:ef:61:b5:7e:2f:3d:1b:c5:d0:77:38:db:a5:
                    2a:cc:6e:55:af:8e:37:77:f8:92:ac:4f:c3:fd:c3:
                    ae:4b:cc:6a:11:9b:cf:a2:6e:47:ee:e9:5d:6c:0a:
                    ff:2e:60:71:55:ed:6b:fb:ec:4c:7f:6a:14:7c:0c:
                    25:9c:7c:3c:5d:14:f2:c1:4c:f9:36:6a:12:0b:83:
                    55:18:8a:57:54:17:0c:fe:bf:e6:54:58:9c:f5:78:
                    8e:48:1a:fb:cb:92:7c:4c:c8:aa:0b:da:e5:a7:b0:
                    ae:3a:2c:d5:f0:9a:21:7a:37:bd:08:fa:9e:25:85:
                    2b:2a:fc:a5:81:e8:7f:8c:79:a1:65:55:02:32:e3:
                    7a:0e:cd:a5:fb:67:2a:e4:92:b9:b6:90:6d:e6:cc:
                    50:a2:02:7f:e5:42:61:d4:ce:40:f8:8f:a8:8c:2f:
                    9f:f0:4b:1c:b9:35:8f:46:18:6b:fd:16:2b:ff:62:
                    fc:b2:6b:3a:af:64:02:3c:e6:4a:73:a9:5c:53:0f:
                    af:3f:ba:b8:b9:60:f9:31:ad:71:f2:c0:a2:ad:84:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:81:B7:3D:C1:05:7A:71:A7:F6:1D:C9:11:8F:0E:07:7F:EF:F0:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/E581B73DC1057A71A7F61DC9118F0E077FEFF09D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.148.0/22
                IPv6:
                  2804:3528::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266272

    Signature Algorithm: sha256WithRSAEncryption
         4a:f7:54:34:75:a2:72:2f:ed:40:4a:37:f0:b2:10:2f:56:6d:
         ea:1f:88:5b:61:c7:35:42:d7:70:d0:17:c5:e7:27:c2:ea:78:
         a3:17:05:86:3d:63:0e:d2:cc:f2:0a:72:65:5a:0d:0e:34:bc:
         2a:ec:8b:19:7b:ca:8d:a2:49:ff:58:a5:30:3f:20:6c:ae:e1:
         17:c0:b1:11:e4:07:89:71:6a:d2:a7:9c:3e:cc:0f:97:c4:2f:
         3b:41:7b:7d:27:82:ff:e1:74:66:55:28:12:db:ae:bb:1b:9b:
         db:da:a8:e4:0d:16:e2:cd:db:90:6c:5c:99:28:c2:cd:9a:01:
         ca:9a:ec:4d:a6:57:ab:1d:ad:0c:aa:fa:b1:a7:f7:83:c8:db:
         d9:d8:54:f0:e0:cf:e3:5f:84:eb:a4:d8:3b:3f:bb:3a:04:62:
         06:57:74:41:52:4d:4b:01:50:c4:f7:f2:b8:d4:fd:85:3e:fc:
         e3:4e:eb:75:18:6d:cf:79:80:40:e1:da:78:58:e0:28:a4:51:
         2e:2d:90:a1:53:b4:df:4a:03:83:ab:c3:51:3a:32:dc:77:7b:
         ab:70:1f:66:28:3b:ea:af:f6:ef:b4:5e:00:51:ff:f4:3c:74:
         5d:3e:64:87:dd:14:b3:a8:34:d7:02:fe:75:3f:f1:49:b7:d7:
         72:e2:7a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:22:27 2025 by rpki-client