This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6.cer
File:                     1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6.cer (raw, json)
Hash identifier:          OLSqf9bzLhGPHGAIQCJGG0Z6LrTl81RD1Uta3/BCTL4=
Subject key identifier:   1E:2A:6F:FD:6B:B1:63:D9:B8:C4:84:35:DD:B8:EE:59:92:3D:58:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       731346B3FD8167B01E9E41B53005FCF747DD8560
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Aug 2025 01:52:35 +0000
Certificate not after:    Thu 20 Aug 2026 01:57:35 +0000
Subordinate resources:    AS: 268837
                          IP: 45.174.32.0/22
                          IP: 2804:5b5c::/32
Validation:               Failed, certificate revoked on Mon 27 Oct 2025 08:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:13:46:b3:fd:81:67:b0:1e:9e:41:b5:30:05:fc:f7:47:dd:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 21 01:52:35 2025 GMT
            Not After : Aug 20 01:57:35 2026 GMT
        Subject: CN=1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:e2:d9:ff:21:e9:f9:71:3f:c2:d8:15:40:
                    bc:4e:26:39:90:b0:a8:ae:06:3e:e8:81:e5:54:7c:
                    ac:52:9c:7c:3d:82:2d:9d:e2:73:60:3c:dd:6a:5d:
                    7a:41:84:95:be:f9:cb:10:eb:7b:be:2e:9d:61:78:
                    d8:85:9c:ec:80:9d:69:6c:5f:a9:fb:87:a8:ce:d0:
                    15:05:6b:15:72:fa:62:df:05:20:fc:7d:14:43:7b:
                    cc:87:50:7b:77:4e:34:61:f4:c1:c2:59:2f:a3:1c:
                    b5:bf:d5:40:2b:a7:65:0e:98:6b:71:98:33:39:4c:
                    7a:7a:8d:b4:6d:79:38:06:f6:0f:0d:fe:01:a8:76:
                    c9:93:b3:a8:3f:ce:19:a5:74:53:f0:77:f9:97:08:
                    8f:f4:8f:ad:0a:7b:ae:21:93:30:c4:5d:ec:92:44:
                    41:e8:3c:f5:a9:14:2d:9f:4d:98:fa:08:67:77:05:
                    72:65:27:99:6a:07:e8:1a:f3:f1:b3:53:36:76:9c:
                    29:ef:31:00:71:68:be:1e:8f:fe:79:9a:25:97:79:
                    5c:11:99:65:0a:23:1c:89:b2:5a:97:c5:cb:70:df:
                    c2:38:10:d5:c2:92:4a:f8:94:01:1f:a8:99:22:2b:
                    92:16:2f:11:c3:4c:2d:1a:52:0f:dd:96:90:58:25:
                    28:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:2A:6F:FD:6B:B1:63:D9:B8:C4:84:35:DD:B8:EE:59:92:3D:58:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.32.0/22
                IPv6:
                  2804:5b5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268837

    Signature Algorithm: sha256WithRSAEncryption
         3e:8a:77:48:33:a9:67:60:ed:be:ec:5c:5e:76:f1:14:1a:f4:
         80:5c:72:1d:61:74:9b:30:ae:ac:54:03:9e:90:b1:ca:c3:52:
         b8:51:fa:2a:28:89:93:ed:e8:3f:0e:c6:7c:0c:93:48:28:89:
         66:8f:b2:2c:cc:9c:84:77:aa:24:ab:98:9b:17:4f:f1:66:f3:
         c9:f1:e3:b5:d7:7c:2f:90:b2:20:dd:9d:be:ef:20:9b:c2:38:
         a6:cc:60:b9:ed:7c:dc:41:59:0e:b0:82:a5:e1:a1:6a:cc:cd:
         20:30:a2:b9:01:30:cb:5b:f0:2f:b9:c0:ae:68:94:69:ad:15:
         a2:4a:ec:2b:ab:ef:d8:8c:26:74:1c:ba:fc:4b:cf:b0:51:de:
         44:3a:dd:0d:fa:c3:41:7b:08:20:53:78:f1:6c:51:e2:aa:0f:
         6e:44:24:29:7c:12:ce:27:2e:c9:bd:8c:2c:f9:f4:65:8b:90:
         e5:a7:a4:2e:e7:06:aa:f9:f9:e8:aa:6a:01:6c:7d:1e:8d:e9:
         f1:42:18:42:ad:97:b7:82:36:eb:78:ed:80:ad:ee:73:59:14:
         8f:18:8e:36:96:33:e1:cd:24:f8:9e:99:14:f9:e3:d4:f7:3b:
         f5:34:54:52:23:f3:f3:ff:17:06:02:a4:31:c5:af:86:36:9f:
         c9:87:23:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----