This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EB258E43B37369C45A1A85EEBA98325264F76352.cer
File:                     EB258E43B37369C45A1A85EEBA98325264F76352.cer (raw, json)
Hash identifier:          masSQuFLwX4uPKI+4D6iquhvcbYABkWmRkmCM3PprMM=
Subject key identifier:   EB:25:8E:43:B3:73:69:C4:5A:1A:85:EE:BA:98:32:52:64:F7:63:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       389F6281A4B0FC91E435611773F6C8C95B478DAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/EB258E43B37369C45A1A85EEBA98325264F76352.mft
caRepository:             rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Mar 2025 19:33:02 +0000
Certificate not after:    Wed 11 Mar 2026 19:38:02 +0000
Subordinate resources:    AS: 267503
                          IP: 192.141.252.0/22
                          IP: 2804:427c::/32
Validation:               Failed, certificate revoked on Sat 25 Oct 2025 03:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9f:62:81:a4:b0:fc:91:e4:35:61:17:73:f6:c8:c9:5b:47:8d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 12 19:33:02 2025 GMT
            Not After : Mar 11 19:38:02 2026 GMT
        Subject: CN=EB258E43B37369C45A1A85EEBA98325264F76352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:87:e1:f9:f3:f8:bd:de:a3:34:18:e2:35:bd:
                    ec:14:26:9a:58:34:6e:39:89:bc:b5:ca:bd:05:e2:
                    32:3d:f3:6f:d8:c7:b0:a5:30:49:de:b2:cc:55:bf:
                    4d:e7:30:f1:6b:80:3f:0c:86:72:d4:69:9b:e0:60:
                    08:3a:e0:c6:42:1e:ff:0f:cb:cd:ea:2a:17:ea:e0:
                    53:80:b6:04:f3:e4:05:43:8b:f6:77:00:27:6d:f5:
                    3b:b6:46:10:f9:f5:17:42:2b:9e:89:d5:d6:3e:38:
                    13:a8:a4:f8:ae:f2:42:f2:a4:a0:9f:d0:2f:68:9d:
                    14:ef:ff:e9:d0:e3:22:db:91:9d:f9:35:bf:28:9a:
                    3f:64:b2:ec:f0:3f:46:40:46:0c:83:5b:04:dc:9d:
                    a5:f2:ff:54:4d:15:cd:db:83:e0:0d:0a:8a:9b:fe:
                    1b:30:52:c8:5d:c7:d4:aa:0b:ea:49:e0:c6:6a:8d:
                    e3:cb:c5:eb:1d:d5:9e:5c:09:1c:41:c4:4c:71:0c:
                    0e:b6:e3:73:37:ed:f4:57:cd:e5:e2:e1:29:87:eb:
                    01:89:b9:bf:de:7a:82:81:a0:9a:c2:4b:a8:a9:61:
                    9b:32:72:a4:cd:36:76:30:ab:a5:4f:41:3f:f0:b6:
                    09:bb:49:55:8d:74:1e:0e:93:bc:9c:82:64:58:df:
                    f4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:25:8E:43:B3:73:69:C4:5A:1A:85:EE:BA:98:32:52:64:F7:63:52
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/EB258E43B37369C45A1A85EEBA98325264F76352.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.252.0/22
                IPv6:
                  2804:427c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267503

    Signature Algorithm: sha256WithRSAEncryption
         6b:67:cc:2e:ef:49:ff:17:77:d3:ec:68:f9:2f:58:2f:7c:a4:
         c0:83:65:33:ca:1e:37:ab:6d:bb:fa:4e:47:c7:68:82:05:40:
         28:be:8f:19:e9:58:27:c2:64:ed:f6:b0:e6:9f:aa:98:79:a0:
         48:13:34:03:5d:1c:21:6d:a0:bb:42:aa:01:07:1b:50:4c:fb:
         40:ba:bd:ca:06:51:2d:e1:77:a5:f8:0b:30:c1:8a:e8:ea:cf:
         f3:f4:07:eb:d4:dd:2f:a2:ac:b7:c4:c1:1a:2e:18:38:27:ed:
         00:26:64:75:b0:f5:91:97:5e:2c:48:eb:71:51:6e:a6:21:60:
         ae:61:60:8f:83:9b:e2:b7:20:37:46:cc:b5:97:0d:1b:06:9c:
         7a:a6:1e:27:07:74:50:f1:f6:b5:dc:c2:e9:32:59:a9:6f:6b:
         2d:cf:ea:8c:c0:a6:60:14:ea:a9:58:65:90:ca:91:68:f7:bf:
         5e:fb:ba:18:93:c1:20:8f:28:59:eb:d0:3c:af:19:02:49:94:
         18:93:79:ae:48:cb:86:dc:48:e1:59:70:df:54:70:5b:71:43:
         64:33:f3:8b:23:13:12:92:e3:d6:44:4e:5b:52:c6:b6:b9:93:
         b3:2e:d6:c1:5e:a0:de:2c:8c:f4:de:cc:e5:1b:e6:49:7f:ff:
         86:ed:fa:ae
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUOJ9igaSw/JHkNWEXc/bIyVtHja8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMTIxOTMzMDJaFw0yNjAzMTExOTM4MDJaMDMxMTAvBgNV
BAMTKEVCMjU4RTQzQjM3MzY5QzQ1QTFBODVFRUJBOTgzMjUyNjRGNzYzNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1h+H58/i93qM0GOI1vewUJppY
NG45iby1yr0F4jI982/Yx7ClMEnessxVv03nMPFrgD8MhnLUaZvgYAg64MZCHv8P
y83qKhfq4FOAtgTz5AVDi/Z3ACdt9Tu2RhD59RdCK56J1dY+OBOopPiu8kLypKCf
0C9onRTv/+nQ4yLbkZ35Nb8omj9ksuzwP0ZARgyDWwTcnaXy/1RNFc3bg+ANCoqb
/hswUshdx9SqC+pJ4MZqjePLxesd1Z5cCRxBxExxDA6243M37fRXzeXi4SmH6wGJ
ub/eeoKBoJrCS6ipYZsycqTNNnYwq6VPQT/wtgm7SVWNdB4Ok7ycgmRY3/TlAgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTrJY5Ds3NpxFoa
he66mDJSZPdjUjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8veVhn
WmhWTUVOUUJxN3c1aVFIRGRCR0xqdUVoYzlzcnV4RDRCelFHZzJaMS8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8veVhn
WmhWTUVOUUJxN3c1aVFIRGRCR0xqdUVoYzlzcnV4RDRCelFHZzJaMS8wL0VCMjU4
RTQzQjM3MzY5QzQ1QTFBODVFRUJBOTgzMjUyNjRGNzYzNTIubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAsCN/DANBAIAAjAHAwUAKARCfDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEFO8wDQYJKoZIhvcNAQELBQADggEBAGtnzC7vSf8Xd9PsaPkv
WC98pMCDZTPKHjerbbv6TkfHaIIFQCi+jxnpWCfCZO32sOafqph5oEgTNANdHCFt
oLtCqgEHG1BM+0C6vcoGUS3hd6X4CzDBiujqz/P0B+vU3S+irLfEwRouGDgn7QAm
ZHWw9ZGXXixI63FRbqYhYK5hYI+Dm+K3IDdGzLWXDRsGnHqmHicHdFDx9rXcwuky
Walvay3P6ozApmAU6qlYZZDKkWj3v177uhiTwSCPKFnr0DyvGQJJlBiTea5Iy4bc
SOFZcN9UcFtxQ2Qz84sjExKS49ZETltSxra5k7Mu1sFeoN4sjPTezOUb5kl//4bt
+q4=
-----END CERTIFICATE-----