This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.cer
File:                     001AEAFAC3DB84DF8098F4CA1CA612C595E64631.cer (raw, json)
Hash identifier:          c8m89X4EY8bL6lC1Cva9NkGK5IWjZgcrWDV+9hMob6U=
Subject key identifier:   00:1A:EA:FA:C3:DB:84:DF:80:98:F4:CA:1C:A6:12:C5:95:E6:46:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6362D49D82B7E099147E450B4AADEF9805CFE5C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Aug 2025 17:56:36 +0000
Certificate not after:    Wed 26 Aug 2026 18:01:36 +0000
Subordinate resources:    AS: 270672
                          IP: 179.60.128.0/22
                          IP: 2804:6f9c::/32
Validation:               Failed, certificate revoked on Thu 11 Sep 2025 21:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:62:d4:9d:82:b7:e0:99:14:7e:45:0b:4a:ad:ef:98:05:cf:e5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 27 17:56:36 2025 GMT
            Not After : Aug 26 18:01:36 2026 GMT
        Subject: CN=001AEAFAC3DB84DF8098F4CA1CA612C595E64631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:12:60:00:7d:e7:ac:d7:d3:a9:19:cf:e3:
                    00:11:32:f6:ed:3c:55:ba:9a:f6:84:cb:94:39:5a:
                    f2:48:f1:d9:9e:c2:cd:2e:9d:77:0d:10:cd:1a:25:
                    6e:6f:82:32:fe:86:d2:f8:93:49:6e:4f:40:33:3d:
                    9a:7e:92:3d:28:7e:03:00:52:08:a6:86:a9:58:63:
                    1f:f6:6c:19:b4:f4:ed:9d:c7:ab:d4:b7:f6:ef:c9:
                    1b:c8:6e:e8:b3:5a:61:fe:7f:02:f6:2c:dd:21:ed:
                    2d:a3:88:38:8a:32:e4:d3:35:f1:57:2c:77:44:9f:
                    03:a1:5f:ad:2d:bf:e5:a1:c2:fb:1f:8e:0d:8c:86:
                    47:e3:ee:d4:ec:c0:e3:20:c9:af:ac:52:25:d5:b2:
                    5e:2b:12:38:b0:04:d2:75:10:70:11:78:66:64:d6:
                    64:e1:4c:f9:3a:7b:29:c4:af:86:93:39:9c:68:47:
                    16:c8:06:21:f0:1a:71:b9:03:e8:9d:f2:66:5c:ad:
                    16:6a:88:5b:d8:91:df:ef:bb:99:62:13:f5:ae:20:
                    eb:d0:74:df:36:36:8b:c1:53:5c:96:6f:b3:af:a0:
                    f7:f0:17:76:2a:bf:4a:46:9d:64:95:db:d1:df:c3:
                    f3:0b:84:6a:6e:f0:d0:11:cb:4e:61:6c:cf:4a:bb:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:1A:EA:FA:C3:DB:84:DF:80:98:F4:CA:1C:A6:12:C5:95:E6:46:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.128.0/22
                IPv6:
                  2804:6f9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270672

    Signature Algorithm: sha256WithRSAEncryption
         bd:f3:d7:c4:e7:b4:40:8c:d3:d2:01:e8:e5:10:c2:e3:e5:1d:
         88:2e:f9:64:80:9e:64:97:73:36:16:37:a5:c9:98:7e:c4:99:
         87:80:41:b0:d6:2a:83:7d:e3:40:03:73:5c:3f:e6:67:f2:b4:
         33:b6:f5:5d:52:20:a8:ec:78:c5:44:dd:19:1c:5c:4e:01:1e:
         b7:b0:2d:ec:1e:bb:14:04:f8:cd:33:1c:41:8a:0f:19:b1:38:
         89:85:7b:38:d2:bd:d9:39:fd:30:bd:8e:b8:15:63:83:5c:ef:
         62:5a:bb:a4:3b:db:fa:9c:da:e6:f3:df:fb:ca:9a:e7:98:b9:
         52:42:31:84:1a:11:8d:2c:a1:7d:fd:73:c2:7a:ef:80:17:20:
         9e:b2:f9:5c:5f:6c:c3:03:69:da:c6:8e:f1:59:8a:88:92:cc:
         5c:bb:ab:61:44:e7:81:e5:2e:49:a7:fa:2e:7e:da:39:a7:e9:
         52:78:de:6c:56:55:c3:1a:35:54:89:76:da:4e:a4:b2:d5:33:
         8f:e1:3a:ae:8e:e0:8b:db:42:19:33:63:3c:4d:1d:fc:c5:96:
         3c:e0:83:59:ec:30:04:2b:8c:73:28:a3:00:af:47:b9:cd:7e:
         22:14:df:4c:a8:18:47:03:01:be:58:6e:e8:d4:99:9c:bb:73:
         57:b3:14:67
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUY2LUnYK34JkUfkULSq3vmAXP5ccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA4MjcxNzU2MzZaFw0yNjA4MjYxODAxMzZaMDMxMTAvBgNV
BAMTKDAwMUFFQUZBQzNEQjg0REY4MDk4RjRDQTFDQTYxMkM1OTVFNjQ2MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NxJgAH3nrNfTqRnP4wARMvbt
PFW6mvaEy5Q5WvJI8dmews0unXcNEM0aJW5vgjL+htL4k0luT0AzPZp+kj0ofgMA
UgimhqlYYx/2bBm09O2dx6vUt/bvyRvIbuizWmH+fwL2LN0h7S2jiDiKMuTTNfFX
LHdEnwOhX60tv+Whwvsfjg2Mhkfj7tTswOMgya+sUiXVsl4rEjiwBNJ1EHAReGZk
1mThTPk6eynEr4aTOZxoRxbIBiHwGnG5A+id8mZcrRZqiFvYkd/vu5liE/WuIOvQ
dN82NovBU1yWb7OvoPfwF3Yqv0pGnWSV29Hfw/MLhGpu8NARy05hbM9Ku2rJAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQAGur6w9uE34CY
9MocphLFleZGMTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG1l
eVZ6OVBVbnpvVGl0SHBXOFlXbmVoellLTnZvZGN3SkN5b1NESnRRUzcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ht
ZXlWejlQVW56b1RpdEhwVzhZV25laHpZS052b2Rjd0pDeW9TREp0UVM3LzAvMDAx
QUVBRkFDM0RCODRERjgwOThGNENBMUNBNjEyQzU5NUU2NDYzMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCszyAMA0EAgACMAcDBQAoBG+cMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQhUDANBgkqhkiG9w0BAQsFAAOCAQEAvfPXxOe0QIzT0gHo
5RDC4+UdiC75ZICeZJdzNhY3pcmYfsSZh4BBsNYqg33jQANzXD/mZ/K0M7b1XVIg
qOx4xUTdGRxcTgEet7At7B67FAT4zTMcQYoPGbE4iYV7ONK92Tn9ML2OuBVjg1zv
Ylq7pDvb+pza5vPf+8qa55i5UkIxhBoRjSyhff1zwnrvgBcgnrL5XF9swwNp2saO
8VmKiJLMXLurYUTngeUuSaf6Ln7aOafpUnjebFZVwxo1VIl22k6kstUzj+E6ro7g
i9tCGTNjPE0d/MWWPOCDWewwBCuMcyijAK9Huc1+IhTfTKgYRwMBvlhu6NSZnLtz
V7MUZw==
-----END CERTIFICATE-----