This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.cer
File:                     20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.cer (raw, json)
Hash identifier:          K9kVVR6fCqSltGfHBcThfcwBZNoybd/ZV4VPUrUEF2c=
Subject key identifier:   20:BB:C4:8E:7B:60:C3:E5:05:5C:CB:F4:CC:72:A7:6B:D7:84:0A:6D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1D654D6E498926A379D29A67D68CE5DF5FA39CE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 31 Mar 2025 18:55:27 +0000
Certificate not after:    Mon 30 Mar 2026 19:00:27 +0000
Subordinate resources:    AS: 268817
                          IP: 45.173.164.0/22
                          IP: 2804:5b14::/32
Validation:               Failed, certificate revoked on Mon 06 Oct 2025 04:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:65:4d:6e:49:89:26:a3:79:d2:9a:67:d6:8c:e5:df:5f:a3:9c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 31 18:55:27 2025 GMT
            Not After : Mar 30 19:00:27 2026 GMT
        Subject: CN=20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:c9:0d:f0:5d:3f:26:16:51:29:e8:4c:1e:
                    47:8c:49:df:a1:84:3d:3c:7e:20:36:f1:78:83:6a:
                    0e:cc:0c:bb:92:c0:23:cd:9b:15:2a:e3:0d:fd:85:
                    12:02:54:06:d3:2d:5f:4a:8a:a2:bf:37:d0:6d:c4:
                    73:49:db:60:92:5f:57:f8:0c:bd:3b:89:ab:4d:c6:
                    b9:2c:3b:ac:09:d5:71:ec:a6:64:bb:7b:37:3b:46:
                    a7:ed:d8:f8:38:e5:e8:d4:8a:c9:ab:48:6c:c2:09:
                    5a:ee:46:71:77:09:ad:67:12:0d:16:b9:9a:bf:92:
                    d4:cd:9c:75:7b:6d:a6:b1:19:4a:bc:af:df:3a:87:
                    e3:e2:35:9f:e9:ac:c1:ad:45:78:91:cf:b2:83:ee:
                    80:d4:87:82:cb:bc:75:08:ec:76:53:5a:d4:cd:52:
                    93:5c:d2:a2:fd:4b:36:22:d2:88:28:b6:36:a0:4b:
                    d8:f6:6b:59:a3:9b:32:66:e9:c7:a3:0c:6e:37:a4:
                    9a:67:9a:a9:9a:dc:ae:81:a4:24:8b:a7:41:ec:36:
                    3b:5a:ec:b6:ab:0e:a9:c5:e7:5e:6a:af:82:8a:6c:
                    96:13:4f:29:af:26:03:0a:13:a2:56:85:2e:36:46:
                    9b:3b:43:96:a7:09:96:4d:28:d7:68:ab:6f:98:5b:
                    5b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:BB:C4:8E:7B:60:C3:E5:05:5C:CB:F4:CC:72:A7:6B:D7:84:0A:6D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.164.0/22
                IPv6:
                  2804:5b14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268817

    Signature Algorithm: sha256WithRSAEncryption
         af:2c:79:23:58:67:6d:cf:a6:be:b6:76:e4:ca:43:e9:42:71:
         c2:5b:c6:b7:c2:77:da:c5:8a:ab:a8:8c:c3:3b:95:47:d7:81:
         36:ca:70:cf:8e:74:05:ce:b0:4c:75:8b:9a:43:7a:10:76:24:
         94:58:2a:ef:41:09:ce:03:fc:e5:21:28:2c:fa:60:0b:45:d8:
         67:dc:f9:2d:80:d0:6b:d9:d9:5b:55:fa:eb:b3:4c:d4:22:d8:
         fb:b8:3d:fc:f9:6a:5f:bd:6c:1f:6f:d1:61:14:47:5b:cd:f5:
         cc:cb:39:50:a8:fd:03:b8:38:a6:2c:be:27:fa:db:73:4b:e0:
         34:c5:40:81:13:0c:75:ac:5d:37:a2:b8:9e:8d:f7:6d:d6:c0:
         6e:ee:c8:c4:36:12:31:1f:03:14:d6:b3:94:04:5c:9b:d0:4a:
         7a:5c:57:c1:c7:5f:c2:6c:7b:fc:af:e8:44:a0:1c:db:b6:06:
         4d:b4:0b:7f:d2:3c:05:6f:7a:04:89:36:26:91:d0:3b:93:43:
         ed:3e:73:e5:41:2b:ec:9a:53:6d:2b:13:4a:67:85:ff:e7:60:
         62:23:a3:ea:95:dd:62:0a:fa:9c:91:b4:01:95:f3:fe:7a:81:
         a8:c7:f6:b1:5a:26:98:23:dc:2e:9c:99:07:3c:17:54:94:9e:
         5e:62:8c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----