This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer
File:                     140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer (raw, json)
Hash identifier:          mKe0mBCheyjv6Se0r6lFa5ld//X4TehrzfLKa/IPcN0=
Subject key identifier:   14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57BFDD5C9A1D84C5FA595B39715587C33BE16786
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 15 Jul 2025 20:35:50 +0000
Certificate not after:    Tue 14 Jul 2026 20:40:50 +0000
Subordinate resources:    AS: 270439
                          IP: 200.11.120.0/22
                          IP: 2804:6c00::/32
Validation:               Failed, certificate revoked on Tue 15 Jul 2025 20:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:bf:dd:5c:9a:1d:84:c5:fa:59:5b:39:71:55:87:c3:3b:e1:67:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 15 20:35:50 2025 GMT
            Not After : Jul 14 20:40:50 2026 GMT
        Subject: CN=140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fb:3c:a7:fd:58:28:1d:b3:4f:9b:00:56:95:
                    57:e1:4e:3a:37:df:06:07:31:99:95:e5:1c:de:ad:
                    75:f3:4e:bf:1f:82:56:03:b8:b6:42:d1:ad:26:cb:
                    a1:7a:f3:cc:40:5c:b2:47:51:9a:8b:aa:90:bb:25:
                    df:c1:ee:83:85:b8:5b:a8:18:00:7b:a2:8b:7a:8c:
                    eb:39:64:0f:3b:82:a0:96:57:ec:69:32:cb:d1:7d:
                    05:ea:bc:50:26:34:b7:7f:95:31:92:e2:23:26:36:
                    18:cf:3b:1e:64:0f:24:72:89:5f:20:e8:26:21:4f:
                    a1:e1:b7:75:40:eb:02:62:6a:27:ec:19:89:05:a2:
                    d8:6c:0c:bb:24:41:f5:8b:a1:56:8d:d8:4d:93:7f:
                    5b:7d:07:dc:b3:22:27:11:ee:94:69:de:f3:9d:c5:
                    b9:a0:e0:9c:31:34:0d:42:25:9b:76:4a:50:00:50:
                    6d:28:d6:ea:4d:36:4e:05:27:53:bc:bd:f2:5d:a0:
                    b6:18:cf:90:2c:06:f8:e1:68:9d:8d:c3:43:6e:33:
                    f7:aa:97:6e:c5:af:41:5e:37:3b:1e:21:ad:34:49:
                    50:e8:2f:82:f7:36:71:24:58:58:f9:35:91:9a:88:
                    34:25:a9:12:c9:ca:be:6b:a8:36:d3:00:7d:4e:ee:
                    88:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.120.0/22
                IPv6:
                  2804:6c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270439

    Signature Algorithm: sha256WithRSAEncryption
         28:47:c7:a5:ee:f1:37:7f:cc:67:57:a2:c6:da:60:c1:1e:5d:
         90:56:c6:0c:0d:0c:12:85:8c:cd:26:8a:ad:fd:98:aa:00:9d:
         fe:3e:2f:a8:cd:19:5e:5e:af:9f:1e:7c:4e:65:57:7c:9c:b1:
         c1:e8:22:68:60:b2:89:ae:65:e2:1e:a3:b6:08:ea:e1:48:c7:
         50:89:48:aa:cf:fe:c3:c0:35:18:dd:88:5a:0d:9b:ec:cf:e7:
         5c:49:a6:73:56:16:1b:3f:80:9b:64:7b:27:21:77:37:ee:b3:
         ba:c6:20:ac:25:4b:39:a0:43:c2:09:76:8e:85:0f:d7:c0:3e:
         c7:c3:9f:a7:c4:fe:b8:ae:67:e6:f2:cc:54:37:46:f0:6f:a2:
         d2:cd:16:84:b2:33:48:8c:e5:d5:e5:01:7d:85:3c:f3:77:0c:
         55:8d:9c:93:49:01:60:44:52:f4:13:04:43:24:6c:4a:db:84:
         1e:e8:d6:ad:4d:b1:d7:2c:0c:ba:09:23:cc:49:ea:ae:89:b9:
         79:90:d4:2c:ab:8a:86:fc:f4:e1:fd:72:a7:3a:32:fe:cb:26:
         52:85:ae:ea:9c:54:f9:cf:45:e1:5c:67:70:f1:23:77:14:7d:
         f6:8c:4e:c7:10:67:31:0a:19:85:8a:81:e6:62:cd:85:29:a8:
         b7:00:a5:ef
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUV7/dXJodhMX6WVs5cVWHwzvhZ4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA3MTUyMDM1NTBaFw0yNjA3MTQyMDQwNTBaMDMxMTAvBgNV
BAMTKDE0MDM1MEY5RDNDNEEwNUJBOTBDOUZDRjlBNUM2RDBGRTJEQzk4QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf+zyn/VgoHbNPmwBWlVfhTjo3
3wYHMZmV5RzerXXzTr8fglYDuLZC0a0my6F688xAXLJHUZqLqpC7Jd/B7oOFuFuo
GAB7oot6jOs5ZA87gqCWV+xpMsvRfQXqvFAmNLd/lTGS4iMmNhjPOx5kDyRyiV8g
6CYhT6Hht3VA6wJiaifsGYkFothsDLskQfWLoVaN2E2Tf1t9B9yzIicR7pRp3vOd
xbmg4JwxNA1CJZt2SlAAUG0o1upNNk4FJ1O8vfJdoLYYz5AsBvjhaJ2Nw0NuM/eq
l27Fr0FeNzseIa00SVDoL4L3NnEkWFj5NZGaiDQlqRLJyr5rqDbTAH1O7oirAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUA1D508SgW6kM
n8+aXG0P4tyYvDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkZ1
MW9TdXhGYnBXTmVidXRyd2sxcko1c3RjeXQ0WlJmZFNLdHRlazd5RWIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZG
dTFvU3V4RmJwV05lYnV0cndrMXJKNXN0Y3l0NFpSZmRTS3R0ZWs3eUViLzAvMTQw
MzUwRjlEM0M0QTA1QkE5MEM5RkNGOUE1QzZEMEZFMkRDOThCQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyAt4MA0EAgACMAcDBQAoBGwAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgZzANBgkqhkiG9w0BAQsFAAOCAQEAKEfHpe7xN3/MZ1ei
xtpgwR5dkFbGDA0MEoWMzSaKrf2YqgCd/j4vqM0ZXl6vnx58TmVXfJyxwegiaGCy
ia5l4h6jtgjq4UjHUIlIqs/+w8A1GN2IWg2b7M/nXEmmc1YWGz+Am2R7JyF3N+6z
usYgrCVLOaBDwgl2joUP18A+x8Ofp8T+uK5n5vLMVDdG8G+i0s0WhLIzSIzl1eUB
fYU883cMVY2ck0kBYERS9BMEQyRsStuEHujWrU2x1ywMugkjzEnqrom5eZDULKuK
hvz04f1ypzoy/ssmUoWu6pxU+c9F4VxncPEjdxR99oxOxxBnMQoZhYqB5mLNhSmo
twCl7w==
-----END CERTIFICATE-----