This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/16CB8773EACB65F30777ECC795BCEC32A0DA9198.cer
File:                     16CB8773EACB65F30777ECC795BCEC32A0DA9198.cer (raw, json)
Hash identifier:          KHBt+4//CFkaNt3z3CHfBSkJjLyoafev5eWH6zsYan4=
Subject key identifier:   16:CB:87:73:EA:CB:65:F3:07:77:EC:C7:95:BC:EC:32:A0:DA:91:98
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2AFC624BB8BC8A0F46B5CE2AC914C60F168246F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/16CB8773EACB65F30777ECC795BCEC32A0DA9198.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 May 2025 18:20:29 +0000
Certificate not after:    Thu 28 May 2026 18:25:29 +0000
Subordinate resources:    AS: 268850
                          IP: 45.174.128.0/24
                          IP: 2801:80:3540::/48
Validation:               Failed, certificate revoked on Mon 09 Jun 2025 17:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fc:62:4b:b8:bc:8a:0f:46:b5:ce:2a:c9:14:c6:0f:16:82:46:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 29 18:20:29 2025 GMT
            Not After : May 28 18:25:29 2026 GMT
        Subject: CN=16CB8773EACB65F30777ECC795BCEC32A0DA9198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:81:ff:07:09:21:f8:c5:90:ae:3a:51:05:4e:
                    db:e7:79:3f:cf:03:ef:19:d3:70:c7:b4:ac:40:4e:
                    43:52:19:3e:cf:92:73:be:e6:f9:0a:a5:6f:7b:62:
                    12:69:06:99:16:79:5b:d8:d6:aa:ec:dd:41:9e:54:
                    9c:55:2f:6b:6d:da:56:8e:93:a3:23:d9:f7:71:6b:
                    ce:1d:f5:89:15:07:9d:8c:f3:5b:2d:2f:80:f4:24:
                    66:92:b1:cf:45:5d:22:d6:08:9b:69:4e:86:4c:9d:
                    7b:f2:0c:0f:7e:37:06:f2:cb:e3:4a:b6:bf:e0:df:
                    fe:48:97:ce:06:27:2a:aa:ed:77:3f:af:9c:11:3c:
                    e5:7a:18:db:08:58:93:b3:a9:4e:cf:be:af:85:19:
                    1f:cb:6e:86:d8:33:4e:29:f5:7a:1d:ad:47:11:19:
                    9f:b3:68:a8:74:b7:b4:72:19:31:e2:df:de:d3:27:
                    0f:2a:a3:86:9a:5d:92:5d:fb:4f:49:c0:a3:3e:58:
                    1e:7c:ed:ae:c0:e2:d2:13:9d:1f:af:7d:1f:14:be:
                    68:25:29:33:bd:ba:7d:93:d8:1e:cb:5f:b2:d1:56:
                    a1:f0:94:ac:8c:eb:bf:45:a5:ca:07:48:bc:8f:b0:
                    d8:6f:c0:d6:39:77:3b:ca:df:2e:a2:a2:c3:89:65:
                    8d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:CB:87:73:EA:CB:65:F3:07:77:EC:C7:95:BC:EC:32:A0:DA:91:98
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/16CB8773EACB65F30777ECC795BCEC32A0DA9198.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.128.0/24
                IPv6:
                  2801:80:3540::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268850

    Signature Algorithm: sha256WithRSAEncryption
         87:35:b1:39:4d:e1:ff:ee:b8:95:10:ff:57:ad:e1:b6:11:27:
         5c:55:60:e7:87:73:6c:1b:05:8e:45:d3:eb:6a:7f:66:a1:d9:
         b5:0f:5b:52:24:ac:31:1b:00:3b:ff:6b:0c:55:cc:ae:8c:9a:
         c2:1c:11:a3:f5:b4:52:75:d6:c4:26:8e:9f:8a:2c:dd:40:23:
         d8:fa:d4:9d:07:a2:17:b1:62:b9:57:20:7d:e2:98:ef:43:52:
         bd:98:2e:ed:a4:a1:b1:f9:1e:1b:7f:bd:88:f3:20:b9:fb:4a:
         81:bc:7d:b2:42:62:3a:7c:89:5f:22:18:b6:30:ef:4a:8f:73:
         d7:95:1c:2d:c4:aa:ce:74:aa:31:5f:dc:cf:39:85:f4:bd:1e:
         48:1a:3c:01:d2:1d:ac:56:16:9c:3c:21:04:b4:87:ea:62:69:
         6f:ee:bb:fa:bf:e8:71:ce:9f:e4:68:58:8b:cd:72:86:2b:f3:
         ed:84:6d:8f:be:e2:16:0a:d6:50:f8:8b:49:8d:db:31:f7:b8:
         98:42:36:57:af:02:76:e1:a3:9b:dc:8b:cd:a7:4a:de:fa:7a:
         b5:88:17:74:d6:a1:02:4d:41:f1:5e:fc:b9:e9:6d:6c:88:b3:
         37:f3:af:f6:07:b3:b4:4e:10:87:13:d2:dc:e0:81:ec:b4:b2:
         f5:a4:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----