This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E713E923F749B726D4F297C3D5A9D5A9B7C2378.cer
File:                     2E713E923F749B726D4F297C3D5A9D5A9B7C2378.cer (raw, json)
Hash identifier:          bulK45g7L+8pIS4PBlrck6J2SGshp/svVW1ZqBzTyR0=
Subject key identifier:   2E:71:3E:92:3F:74:9B:72:6D:4F:29:7C:3D:5A:9D:5A:9B:7C:23:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       26B501890241F4FE0F52EBCD4BEC2C4D3E33F05C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/2E713E923F749B726D4F297C3D5A9D5A9B7C2378.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Feb 2025 18:00:17 +0000
Certificate not after:    Tue 17 Feb 2026 18:05:17 +0000
Subordinate resources:    AS: 273479
                          IP: 2804:8f40::/32
Validation:               Failed, certificate revoked on Fri 15 Aug 2025 14:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b5:01:89:02:41:f4:fe:0f:52:eb:cd:4b:ec:2c:4d:3e:33:f0:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 18 18:00:17 2025 GMT
            Not After : Feb 17 18:05:17 2026 GMT
        Subject: CN=2E713E923F749B726D4F297C3D5A9D5A9B7C2378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:df:bd:34:0e:71:9c:73:e8:09:e7:70:e8:30:
                    70:3c:8d:f8:dd:7b:3c:ac:71:b9:b6:d8:d7:f0:5c:
                    ee:3f:17:3e:27:c3:17:42:25:fc:bf:a4:16:a1:b9:
                    07:2d:2c:3a:7d:fd:91:86:00:d6:6c:bc:2b:a4:eb:
                    21:39:4a:4b:4a:73:93:23:73:86:16:6e:92:57:1c:
                    94:fc:e0:88:34:0f:c9:d9:97:b9:44:f0:7f:46:3e:
                    1c:2b:c1:fb:6c:ae:00:dc:4b:88:d2:7a:25:7e:8e:
                    02:65:21:7b:51:91:0c:8f:1d:a8:5a:28:3f:fb:08:
                    cf:0c:64:39:22:09:db:dc:91:f3:bf:fa:eb:bf:9d:
                    76:f2:35:30:c6:46:5f:20:5e:f8:92:ab:6d:9f:fc:
                    b2:c1:43:c7:7d:c7:6d:4b:8f:e0:a8:3b:97:bd:69:
                    43:7f:bc:1a:b7:9b:d8:43:de:6f:d6:42:ab:2f:11:
                    f6:0e:92:f2:45:28:9a:09:ce:94:16:8e:c1:ab:49:
                    65:67:8d:57:c5:a4:7f:7a:2a:70:25:7d:96:b5:da:
                    01:ff:a8:49:91:14:0f:84:09:55:40:c2:0e:75:31:
                    20:b0:99:1e:49:61:85:91:7d:e5:88:eb:fc:1f:58:
                    c3:92:5a:76:55:2c:2e:4a:e8:41:77:d0:b7:84:25:
                    d4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:71:3E:92:3F:74:9B:72:6D:4F:29:7C:3D:5A:9D:5A:9B:7C:23:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/2E713E923F749B726D4F297C3D5A9D5A9B7C2378.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273479

    Signature Algorithm: sha256WithRSAEncryption
         26:fe:e0:78:3f:b7:ba:11:a2:18:e6:73:04:97:e7:fa:d1:f9:
         0c:7d:8f:c9:6f:80:07:20:b9:80:fd:75:5e:10:5f:1e:bc:4c:
         7b:f2:99:49:9b:e8:76:b9:d6:be:9a:9e:9a:e8:57:1a:8e:ca:
         3e:e1:2f:83:cb:e7:07:01:46:b3:03:6c:6d:59:c2:fe:31:a9:
         bb:c4:0a:f6:5b:b7:86:3b:3e:15:d1:d5:37:b8:2a:d0:ab:53:
         b7:f4:d0:3e:23:78:44:ec:7a:92:77:ff:db:d3:58:ef:03:73:
         37:24:d3:b1:52:62:ca:87:af:73:fa:3d:f7:82:0b:47:09:60:
         24:a9:13:38:33:3b:13:6f:59:0c:42:a0:a9:ac:8f:46:3c:dc:
         08:0e:86:12:59:14:6d:b6:48:76:1d:b6:64:17:12:89:32:e3:
         19:fa:56:44:fc:b0:b6:21:f1:45:4d:ca:3d:33:d7:74:fd:08:
         4a:94:11:35:29:d3:90:25:08:ab:b2:6f:e1:74:e6:50:4f:45:
         04:83:26:82:62:80:e5:15:1f:3f:ad:b1:c6:a2:4e:50:74:85:
         ed:e0:dc:a0:a0:96:a6:23:bd:56:da:94:78:5a:23:1e:0c:8b:
         fa:26:ab:8a:f1:cc:0f:14:3b:32:d6:e4:26:a1:43:e5:16:72:
         16:eb:27:34
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUJrUBiQJB9P4PUuvNS+wsTT4z8FwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMTgxODAwMTdaFw0yNjAyMTcxODA1MTdaMDMxMTAvBgNV
BAMTKDJFNzEzRTkyM0Y3NDlCNzI2RDRGMjk3QzNENUE5RDVBOUI3QzIzNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX3700DnGcc+gJ53DoMHA8jfjd
ezyscbm22NfwXO4/Fz4nwxdCJfy/pBahuQctLDp9/ZGGANZsvCuk6yE5SktKc5Mj
c4YWbpJXHJT84Ig0D8nZl7lE8H9GPhwrwftsrgDcS4jSeiV+jgJlIXtRkQyPHaha
KD/7CM8MZDkiCdvckfO/+uu/nXbyNTDGRl8gXviSq22f/LLBQ8d9x21Lj+CoO5e9
aUN/vBq3m9hD3m/WQqsvEfYOkvJFKJoJzpQWjsGrSWVnjVfFpH96KnAlfZa12gH/
qEmRFA+ECVVAwg51MSCwmR5JYYWRfeWI6/wfWMOSWnZVLC5K6EF30LeEJdTBAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQucT6SP3Sbcm1P
KXw9Wp1am3wjeDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1U0
SjUyTmhnUmt0d1lOMmFla25CSkVrYnZWaU5rS2ZaUHkzUUtvN2Y3aU0vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dV
NEo1Mk5oZ1JrdHdZTjJhZWtuQkpFa2J2VmlOa0tmWlB5M1FLbzdmN2lNLzAvMkU3
MTNFOTIzRjc0OUI3MjZENEYyOTdDM0Q1QTlENUE5QjdDMjM3OC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASPQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
LEcwDQYJKoZIhvcNAQELBQADggEBACb+4Hg/t7oRohjmcwSX5/rR+Qx9j8lvgAcg
uYD9dV4QXx68THvymUmb6Ha51r6anproVxqOyj7hL4PL5wcBRrMDbG1Zwv4xqbvE
CvZbt4Y7PhXR1Te4KtCrU7f00D4jeETsepJ3/9vTWO8Dczck07FSYsqHr3P6PfeC
C0cJYCSpEzgzOxNvWQxCoKmsj0Y83AgOhhJZFG22SHYdtmQXEoky4xn6VkT8sLYh
8UVNyj0z13T9CEqUETUp05AlCKuyb+F05lBPRQSDJoJigOUVHz+tscaiTlB0he3g
3KCglqYjvVbalHhaIx4Mi/omq4rxzA8UOzLW5CahQ+UWchbrJzQ=
-----END CERTIFICATE-----