This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
File:                     2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer (raw, json)
Hash identifier:          7TJRA0A4Q7pZH1/XSN7doublVGSivjJiEzDVUn8otqA=
Subject key identifier:   2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3197DA0D18633293C8CAF6D1BC5F6AB6F1DAA034
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Aug 2025 20:19:47 +0000
Certificate not after:    Tue 25 Aug 2026 20:24:47 +0000
Subordinate resources:    AS: 28186
                          IP: 138.117.176.0/22
                          IP: 177.8.224.0/20
                          IP: 177.21.0.0/19
                          IP: 177.23.80.0/21
                          IP: 177.136.112.0/20
                          IP: 187.44.128.0/17
                          IP: 189.89.128.0/18
                          IP: 201.55.192.0/22
                          IP: 2804:204::/32
                          IP: 2804:24dc::/32
Validation:               Failed, certificate revoked on Wed 27 Aug 2025 18:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:97:da:0d:18:63:32:93:c8:ca:f6:d1:bc:5f:6a:b6:f1:da:a0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 26 20:19:47 2025 GMT
            Not After : Aug 25 20:24:47 2026 GMT
        Subject: CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e8:40:47:26:6d:7f:2c:85:40:23:1b:1d:45:
                    f1:a1:80:6f:fb:80:fe:c1:a0:d7:a8:96:46:42:f4:
                    9c:27:6a:a0:8e:3d:57:1b:80:ef:67:76:67:bf:e2:
                    c7:74:fe:d5:5c:3d:e1:3c:ab:7a:ac:36:59:b0:db:
                    55:3e:7e:b5:81:02:0d:36:86:be:28:9b:81:81:48:
                    c0:6f:5d:36:5d:63:9f:b3:47:54:34:36:8e:2a:11:
                    a5:7c:39:3c:e5:eb:5e:ae:6b:b6:d6:33:2f:65:ab:
                    ab:8e:32:49:d8:dc:66:b7:73:76:9d:e7:d0:a1:de:
                    8d:0c:07:3e:47:42:f6:48:b1:d9:e3:2e:9a:1a:bb:
                    1e:9b:50:c0:5c:11:b8:0c:cc:b2:02:64:49:d0:71:
                    47:e9:ae:96:8a:7f:42:ef:02:81:25:8e:03:a6:e6:
                    4e:4b:2a:d9:ef:67:ff:21:c1:de:3f:60:64:8b:b0:
                    14:89:2b:1b:dc:f5:b7:95:53:97:2c:df:d6:98:af:
                    90:0c:77:b3:1f:5f:3e:f8:48:b7:90:32:81:25:8f:
                    7e:a0:2d:16:3c:2a:10:8c:09:6a:f5:81:72:8c:ec:
                    9b:97:66:4a:c8:71:10:bc:b0:18:35:2f:35:f6:c6:
                    4a:9d:d6:dc:d6:a3:5a:32:12:85:22:ef:61:67:1d:
                    1d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.176.0/22
                  177.8.224.0/20
                  177.21.0.0/19
                  177.23.80.0/21
                  177.136.112.0/20
                  187.44.128.0/17
                  189.89.128.0/18
                  201.55.192.0/22
                IPv6:
                  2804:204::/32
                  2804:24dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28186

    Signature Algorithm: sha256WithRSAEncryption
         65:28:aa:69:11:39:01:eb:6e:ee:37:d2:b9:d0:86:1d:6a:72:
         03:94:60:75:02:54:00:63:02:35:94:3e:92:4d:db:89:ff:bd:
         1e:29:8d:b5:e4:4f:55:0e:d5:33:ad:cb:11:26:fa:1c:fa:b9:
         34:9a:a5:b5:5d:9b:9e:e5:ed:e8:09:45:e0:01:6c:8f:d8:d4:
         2c:06:eb:56:83:79:0b:a7:a0:23:25:c2:11:6d:c1:13:2e:4a:
         d8:c8:b6:8f:2e:3c:6e:d2:71:f4:c4:00:79:18:70:60:90:8d:
         af:b3:e8:70:03:4e:5c:58:d2:44:1f:96:7c:ad:47:59:02:16:
         77:70:87:b2:54:bf:e4:bd:43:6d:6c:b1:e9:84:01:79:4b:9d:
         44:67:90:68:b8:ae:3f:81:0c:4e:3e:16:1f:5a:e2:69:3b:62:
         0e:e4:5f:db:9f:7f:3f:0f:4d:a5:8f:96:17:a0:4b:2f:ac:2e:
         63:cb:6f:80:46:40:50:dd:18:70:0c:41:cf:ce:c2:89:09:72:
         a4:e1:c2:81:14:49:2f:c7:72:3f:30:7e:14:6d:13:8c:56:cb:
         1b:b1:b6:2b:46:08:da:7c:19:c6:aa:d7:0c:44:1d:2a:bf:92:
         04:83:48:99:66:f5:b8:56:07:d6:80:6c:70:e5:fa:7a:82:86:
         60:50:71:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 10:34:30 2025 by rpki-client