This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/021F0BE4E2DCC0866C9576C4E89E0871175DCA6D.cer
File:                     021F0BE4E2DCC0866C9576C4E89E0871175DCA6D.cer (raw, json)
Hash identifier:          uiY5Ahk/6PVjYmVW1fr0MWjDt0yo8i/PxInBi50A7q8=
Subject key identifier:   02:1F:0B:E4:E2:DC:C0:86:6C:95:76:C4:E8:9E:08:71:17:5D:CA:6D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       41616561F3636C62486F1501F38E9866B1F7BE2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/021F0BE4E2DCC0866C9576C4E89E0871175DCA6D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Apr 2025 15:12:25 +0000
Certificate not after:    Fri 24 Apr 2026 15:17:25 +0000
Subordinate resources:    AS: 268658
                          IP: 45.165.60.0/22
                          IP: 2804:5490::/32
Validation:               Failed, certificate revoked on Tue 05 Aug 2025 05:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:61:65:61:f3:63:6c:62:48:6f:15:01:f3:8e:98:66:b1:f7:be:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 25 15:12:25 2025 GMT
            Not After : Apr 24 15:17:25 2026 GMT
        Subject: CN=021F0BE4E2DCC0866C9576C4E89E0871175DCA6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:b0:55:a6:0a:ea:9f:2f:26:ff:ac:7a:99:
                    4b:64:e2:76:45:8c:96:8d:83:44:19:90:8b:8f:4e:
                    7c:d8:56:dd:73:fb:99:00:5c:c1:ff:2c:42:0e:86:
                    5f:af:05:12:2a:42:c7:28:7c:d7:da:72:46:ef:4b:
                    b7:f8:36:47:8b:ec:28:e2:4c:4a:5e:a9:ea:0e:cb:
                    60:16:2c:91:64:eb:61:06:ab:af:13:f4:77:01:3e:
                    d7:12:fb:f5:3c:8d:3d:af:36:92:08:73:6b:a5:45:
                    ab:a9:83:8d:16:c6:97:71:a1:02:20:bc:b4:fd:55:
                    bb:f6:05:13:df:d8:a2:55:5d:ad:2d:a6:27:17:6c:
                    30:28:ad:53:a8:7a:90:a2:9b:17:d0:3e:dd:59:6e:
                    d2:c2:93:0a:e4:8d:ef:42:31:cf:cb:3e:0b:a9:5e:
                    f9:93:ef:5e:7f:d3:96:f8:a9:cb:71:d6:ad:af:47:
                    c0:f2:fb:bc:90:71:22:0a:7c:72:62:09:41:e7:14:
                    d1:86:2d:cc:58:b1:d9:e5:f4:05:3a:59:06:bd:a4:
                    49:3d:1f:e0:3f:5c:4f:ac:13:92:13:86:4c:f2:df:
                    ac:b3:44:96:9c:29:3f:aa:7f:e8:86:4c:d9:b2:68:
                    11:e4:82:f3:fa:40:80:70:40:bb:63:20:ed:bf:08:
                    e9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:1F:0B:E4:E2:DC:C0:86:6C:95:76:C4:E8:9E:08:71:17:5D:CA:6D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/021F0BE4E2DCC0866C9576C4E89E0871175DCA6D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.60.0/22
                IPv6:
                  2804:5490::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268658

    Signature Algorithm: sha256WithRSAEncryption
         b8:2d:a6:d1:47:13:ec:45:52:19:8e:71:10:12:3e:f8:b7:db:
         55:73:be:b8:4e:86:a0:2d:fb:10:4f:b2:ab:5c:48:71:6c:02:
         a3:a7:ae:2c:39:af:c9:67:44:48:dd:32:73:b1:7d:c9:07:39:
         09:85:bc:93:31:17:56:3d:c6:9a:ae:72:a6:fa:e2:99:fd:16:
         40:66:b6:e2:a1:6a:ba:67:ff:d5:6f:b0:92:05:54:7f:b1:0e:
         42:37:17:1f:02:77:95:d6:1b:b4:9b:83:9a:d9:64:05:17:aa:
         db:09:e0:00:7b:eb:ca:8e:cf:8d:47:9d:17:88:51:f4:8b:52:
         fb:ce:20:f6:47:5f:b6:66:41:ea:72:64:01:31:8e:13:41:49:
         db:1d:97:ee:80:ad:14:96:81:25:49:27:f2:73:b2:d1:d7:83:
         ee:9a:4c:4d:fd:dc:0b:55:93:4d:22:7e:40:80:b9:93:5e:85:
         6c:f8:28:8f:dd:88:1e:f0:6f:a2:5b:a0:2d:ca:36:7e:ee:6d:
         6f:2c:c6:f4:7e:a4:87:3f:36:97:02:f5:93:f9:8b:06:fc:f4:
         65:02:25:52:03:a7:8d:b4:2e:85:53:82:e7:24:ba:3b:42:0a:
         90:25:2b:f1:9a:89:c5:32:d9:12:4f:06:64:7a:e3:0f:c5:f7:
         10:62:f7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----