This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
File:                     23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer (raw, json)
Hash identifier:          +xDYPCXMO698pdxiUGYSO9KvQ9I+2rBLY/Vw70GXJvk=
Subject key identifier:   23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A7664F4E15B0C51CEF43A92A531B27DE01303B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Aug 2025 19:58:01 +0000
Certificate not after:    Fri 21 Aug 2026 20:03:01 +0000
Subordinate resources:    AS: 52700
                          IP: 177.73.84.0/22
                          IP: 191.240.160.0/22
                          IP: 2804:110c::/32
Validation:               Failed, certificate revoked on Fri 22 Aug 2025 20:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:76:64:f4:e1:5b:0c:51:ce:f4:3a:92:a5:31:b2:7d:e0:13:03:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 22 19:58:01 2025 GMT
            Not After : Aug 21 20:03:01 2026 GMT
        Subject: CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:99:ab:a8:3d:4c:da:87:18:52:fd:27:8e:
                    2d:5b:62:39:32:30:71:a0:44:19:da:05:07:6b:84:
                    ac:ee:c8:56:54:71:b7:7d:08:ee:64:49:34:fe:fb:
                    14:5a:54:3f:0e:b5:d8:28:96:b0:8e:61:d3:75:c7:
                    81:ff:ce:f9:97:c9:0c:3c:73:0e:6f:cd:65:a8:86:
                    df:7d:bc:b3:34:21:9a:37:85:d8:2f:d3:2d:5b:45:
                    73:44:6a:f2:f9:44:18:ca:03:ab:eb:8a:a8:2d:22:
                    61:4d:18:fa:c9:e1:ca:6d:02:83:64:57:aa:b1:4d:
                    f6:91:59:d0:38:6b:e9:cf:57:40:b2:eb:f7:c9:85:
                    7d:10:f0:0c:cc:6d:a9:eb:01:97:7c:44:a0:e0:67:
                    0d:dc:3c:fa:68:31:dc:9e:fd:67:a9:c9:ff:36:ab:
                    8b:8a:ef:9f:64:18:d1:d8:ff:02:7e:85:a9:fb:d4:
                    61:07:07:20:f7:9a:97:0b:0b:8d:06:bd:99:1f:0e:
                    9d:ca:6d:d0:cd:cb:da:10:a1:25:90:ba:9e:78:cb:
                    74:46:6b:87:be:59:23:78:26:52:4a:6a:6e:16:a7:
                    73:9c:95:2d:69:ed:a4:48:db:2a:a5:60:5c:67:87:
                    57:50:5a:8d:a6:00:18:fe:ac:8b:80:a7:82:ad:6a:
                    61:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.84.0/22
                  191.240.160.0/22
                IPv6:
                  2804:110c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52700

    Signature Algorithm: sha256WithRSAEncryption
         57:aa:9b:50:e3:c4:99:68:66:cb:ab:0a:7f:3a:64:2a:aa:9c:
         eb:dd:e0:86:46:fc:a6:53:78:90:07:b5:7a:da:20:29:22:84:
         b1:e2:db:30:72:fc:f2:50:e6:0a:83:b7:d0:e5:6f:3c:62:62:
         8d:1e:80:31:b1:d1:90:c1:ff:56:90:39:3e:a1:39:72:0c:e8:
         e0:78:e1:73:11:28:d5:8e:90:d3:43:4f:01:a5:18:2b:81:ce:
         1d:8c:51:ff:cc:88:2e:c3:e7:60:12:b4:b3:01:25:21:be:95:
         d9:b3:7c:72:bb:83:e4:1b:5c:89:a8:dc:ff:93:36:c0:80:e0:
         fd:72:4a:a7:2a:ba:fa:88:cf:26:bb:65:18:52:73:12:34:e7:
         17:48:fb:b4:97:c5:98:45:e2:66:6e:98:cb:71:c6:f9:11:79:
         bb:bf:04:70:5e:46:40:4d:17:66:06:54:ab:42:23:2a:83:8d:
         7b:c2:1f:bc:80:c4:86:98:8b:ef:49:a9:62:68:e7:79:10:26:
         d5:55:26:5a:72:67:6e:31:dd:dd:33:7c:64:09:90:a7:a4:7e:
         af:02:ae:a4:fd:43:9c:bb:03:42:3a:49:0b:ea:75:96:63:b9:
         9a:14:54:08:5f:09:b7:e6:3b:fa:3e:8b:9c:28:97:ed:63:46:
         20:67:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----