This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.cer File: 28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.cer (raw, json) Hash identifier: ZKbX4XnPnXiwIxeQdVJiKwn9TpMGY713gboYp7ekeuE= Subject key identifier: 28:A1:4F:B4:8D:8F:61:99:B0:F3:C2:B5:E7:98:05:C2:8F:7C:FB:C7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 29C29FF5838DD3A9793793A3E5001ADDAD40B11E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.mft caRepository: rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 07 Aug 2025 15:10:15 +0000 Certificate not after: Thu 06 Aug 2026 15:15:15 +0000 Subordinate resources: AS: 262278 IP: 45.190.220.0/22 IP: 177.11.40.0/21 IP: 2804:1ec4::/32 Validation: Failed, certificate revoked on Mon 29 Sep 2025 21:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c2:9f:f5:83:8d:d3:a9:79:37:93:a3:e5:00:1a:dd:ad:40:b1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 7 15:10:15 2025 GMT Not After : Aug 6 15:15:15 2026 GMT Subject: CN=28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:be:f0:83:ea:10:c0:db:ff:ff:7e:d1:60: 36:58:dc:24:42:0a:a9:c1:8b:18:e9:18:33:27:76: e1:f3:d2:03:41:b1:ea:63:fe:7e:a2:ce:b4:6d:4d: 67:b0:1e:68:62:f7:cd:9d:7a:5d:6d:ae:e0:48:86: 88:53:76:ad:6e:50:3e:63:0b:70:94:f3:04:a5:83: 19:f6:51:45:24:16:7b:cb:83:1a:1e:58:d8:fd:1c: 11:0f:36:0c:ff:c8:74:e4:e7:8a:1e:28:ab:3e:aa: a8:62:91:24:67:05:09:b3:d0:9e:8b:d9:41:30:82: cf:e7:1e:24:0f:ec:a9:25:df:03:18:ea:31:81:bc: 9a:b3:83:e0:6f:a1:de:e0:e5:b9:8a:30:fe:91:f9: d5:09:81:2d:ae:15:1c:81:6a:b3:6d:52:b4:27:9d: 99:0c:3a:e5:cd:31:6d:dc:48:4b:06:b7:4f:dc:86: 84:44:72:a2:cc:08:7c:e0:9a:66:ef:76:31:52:f7: 95:1b:ed:7a:16:6a:03:da:91:61:7e:9c:08:59:2e: b4:74:29:3a:7f:e5:ae:26:ba:cf:c6:52:9b:3b:99: 87:aa:b3:c3:61:40:0b:75:b2:08:c1:fc:a5:4f:e0: 3f:e9:25:94:65:fd:fb:9a:c5:7e:eb:97:0d:a6:e6: 18:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:A1:4F:B4:8D:8F:61:99:B0:F3:C2:B5:E7:98:05:C2:8F:7C:FB:C7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.190.220.0/22 177.11.40.0/21 IPv6: 2804:1ec4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262278 Signature Algorithm: sha256WithRSAEncryption b7:0a:09:f5:8e:3f:20:dc:45:c2:c5:b8:e8:78:df:88:52:ef: 5a:9e:83:89:00:f2:44:0c:2e:d6:15:be:98:aa:6f:b3:d0:96: 93:d8:db:ac:cb:4f:28:28:a8:ec:92:bf:32:68:20:f8:1b:5d: e9:cb:bd:6d:91:31:19:60:20:f2:fb:61:f2:c3:28:c2:e2:a1: 92:05:8b:98:2a:b6:60:85:3a:b8:56:ee:8f:29:4c:73:0e:18: 5d:63:8b:57:58:09:45:bb:22:8b:3b:ff:0d:8b:a3:8d:ac:ad: 33:45:39:bb:96:22:67:ab:82:05:16:04:0c:18:6b:cb:4f:eb: 5f:e7:5e:2e:c7:14:5b:7a:be:17:14:f8:8e:4c:9f:2b:cc:ac: 05:80:58:7c:e5:48:d7:77:60:5c:04:92:57:67:b2:a2:54:3b: f5:4e:66:11:ad:a1:36:a4:e2:b4:b1:6d:84:90:04:23:64:df: 61:7c:11:1b:09:09:47:24:ff:4b:f9:f8:2a:57:38:4b:d0:4e: b2:3a:40:5a:46:36:7d:5b:2b:26:b2:4e:70:38:52:d0:bc:f3: 93:6e:c2:23:d0:42:18:78:0b:68:7b:ea:5d:8c:39:a4:df:63: c3:e6:46:b7:a3:8b:37:98:62:28:d2:c2:93:ad:82:3e:29:7d: 0c:23:91:51 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUKcKf9YON06l5N5Oj5QAa3a1AsR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MDcxNTEwMTVaFw0yNjA4MDYxNTE1MTVaMDMxMTAvBgNV BAMTKDI4QTE0RkI0OEQ4RjYxOTlCMEYzQzJCNUU3OTgwNUMyOEY3Q0ZCQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Pb7wg+oQwNv//37RYDZY3CRC CqnBixjpGDMnduHz0gNBsepj/n6izrRtTWewHmhi982del1truBIhohTdq1uUD5j C3CU8wSlgxn2UUUkFnvLgxoeWNj9HBEPNgz/yHTk54oeKKs+qqhikSRnBQmz0J6L 2UEwgs/nHiQP7Kkl3wMY6jGBvJqzg+Bvod7g5bmKMP6R+dUJgS2uFRyBarNtUrQn nZkMOuXNMW3cSEsGt0/choREcqLMCHzgmmbvdjFS95Ub7XoWagPakWF+nAhZLrR0 KTp/5a4mus/GUps7mYeqs8NhQAt1sgjB/KVP4D/pJZRl/fuaxX7rlw2m5hjbAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQooU+0jY9hmbDz wrXnmAXCj3z7xzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmdQ RFlqTURTVjR6Z3k1Y21MVHlrRFJ6eGJ2b2dMZHlvNUs2SGRyVHM3REYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZn UERZak1EU1Y0emd5NWNtTFR5a0RSenhidm9nTGR5bzVLNkhkclRzN0RGLzAvMjhB MTRGQjQ4RDhGNjE5OUIwRjNDMkI1RTc5ODA1QzI4RjdDRkJDNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLb7cAwQDsQsoMA0EAgACMAcDBQAoBB7EMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQAhjANBgkqhkiG9w0BAQsFAAOCAQEAtwoJ9Y4/ INxFwsW46HjfiFLvWp6DiQDyRAwu1hW+mKpvs9CWk9jbrMtPKCio7JK/Mmgg+Btd 6cu9bZExGWAg8vth8sMowuKhkgWLmCq2YIU6uFbujylMcw4YXWOLV1gJRbsiizv/ DYujjaytM0U5u5YiZ6uCBRYEDBhry0/rX+deLscUW3q+FxT4jkyfK8ysBYBYfOVI 13dgXASSV2eyolQ79U5mEa2hNqTitLFthJAEI2TfYXwRGwkJRyT/S/n4Klc4S9BO sjpAWkY2fVsrJrJOcDhS0Lzzk27CI9BCGHgLaHvqXYw5pN9jw+ZGt6OLN5hiKNLC k62CPil9DCORUQ== -----END CERTIFICATE-----Generated at Thu Dec 25 11:24:39 2025 by rpki-client