This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F1E13650D7B8043C2436680094FF724460A5D4C.cer
File:                     2F1E13650D7B8043C2436680094FF724460A5D4C.cer (raw, json)
Hash identifier:          f1y9lJ/3UIl7N05rQ+ItdLcBPt0BHjX4xVofmB+J9c8=
Subject key identifier:   2F:1E:13:65:0D:7B:80:43:C2:43:66:80:09:4F:F7:24:46:0A:5D:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       12C07CD2A2E7D86A4EFAD0BB6D3B79A67EDFFB04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/0/2F1E13650D7B8043C2436680094FF724460A5D4C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Apr 2025 20:20:21 +0000
Certificate not after:    Tue 21 Apr 2026 20:25:21 +0000
Subordinate resources:    AS: 28144
                          IP: 187.49.112.0/20
                          IP: 2804:10c::/32
Validation:               Failed, certificate revoked on Thu 18 Sep 2025 18:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c0:7c:d2:a2:e7:d8:6a:4e:fa:d0:bb:6d:3b:79:a6:7e:df:fb:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 22 20:20:21 2025 GMT
            Not After : Apr 21 20:25:21 2026 GMT
        Subject: CN=2F1E13650D7B8043C2436680094FF724460A5D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:83:f5:21:c1:69:e5:a7:5e:4d:a2:fa:bf:64:
                    d2:c1:b6:83:8f:fe:72:79:fd:2f:17:9b:38:ab:86:
                    a8:b9:69:16:09:7d:2d:41:c2:e7:22:8e:35:4f:76:
                    52:ff:f6:fd:14:77:74:f6:8a:34:d7:6f:f1:bb:6a:
                    5c:f1:10:5a:fb:f2:3a:e9:12:20:b4:49:d2:9d:de:
                    73:82:a6:14:47:10:7c:e7:ed:88:0a:9e:a6:c3:3c:
                    60:7a:92:43:43:76:0d:d4:8a:55:78:8b:47:09:e9:
                    97:02:92:9c:63:f1:cb:a9:13:02:a4:db:39:78:ff:
                    79:49:eb:09:42:a5:1c:f0:d6:73:3f:68:d9:15:ef:
                    65:4d:aa:95:99:2b:c3:2e:54:a4:8c:2b:6c:e3:79:
                    db:67:1d:2e:e6:b1:51:a2:e2:d0:1c:33:f6:be:19:
                    71:fd:50:7e:84:9b:e8:2a:d8:ad:c5:2a:f0:b0:69:
                    58:dc:59:6c:bb:10:33:46:a5:c2:ff:e5:6f:18:36:
                    80:33:8a:a7:8e:29:f8:18:a9:0d:ab:bd:22:01:01:
                    93:5b:52:6d:e5:4d:88:5b:e6:2b:10:06:28:ad:d3:
                    22:dc:bf:52:5d:c3:cb:f0:58:c5:4d:5a:9f:50:3e:
                    2d:19:f8:a9:cc:f3:f2:fe:a8:32:36:9a:d2:80:a6:
                    a6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:1E:13:65:0D:7B:80:43:C2:43:66:80:09:4F:F7:24:46:0A:5D:4C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/0/2F1E13650D7B8043C2436680094FF724460A5D4C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.112.0/20
                IPv6:
                  2804:10c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28144

    Signature Algorithm: sha256WithRSAEncryption
         ca:24:58:b6:ef:cd:f7:cc:9c:35:58:b8:46:89:fd:55:00:bb:
         2e:07:83:80:d7:9d:49:8e:45:73:21:b2:92:f2:16:f7:80:7b:
         3c:00:ad:ee:24:2c:a2:c0:ad:59:b7:a7:9c:2f:72:f5:22:5f:
         13:5a:e5:a4:eb:70:47:4b:f2:88:a1:06:4f:f7:4f:6b:e6:e3:
         b2:b4:80:24:df:4e:42:d3:b9:f4:fd:28:88:50:85:d1:53:80:
         6c:17:f5:d9:54:1d:ad:65:9a:da:61:29:59:67:f3:a2:1f:6f:
         cc:dc:c5:65:7d:06:f6:96:49:02:bf:6a:b5:e0:ee:88:82:21:
         fd:a1:51:51:09:c1:f2:3f:f6:75:6e:d9:c1:77:f4:33:70:61:
         0a:ba:d3:d0:ab:86:0b:84:36:f5:7b:f6:29:14:98:a7:9b:66:
         8b:d4:67:09:2e:21:10:2f:4b:00:f8:ab:b3:fd:d2:56:2f:55:
         68:43:07:dd:43:0f:dd:30:e1:87:f0:dd:90:c4:33:3b:ef:cd:
         41:43:a9:43:ea:e6:33:d8:d3:cd:38:74:55:79:70:b4:d9:e8:
         13:a9:35:63:ee:88:c1:41:d2:91:44:e9:86:fe:da:df:f9:74:
         ee:c6:6a:11:48:2c:07:b5:56:16:d2:15:b9:15:73:18:d1:e1:
         5a:73:45:08
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUEsB80qLn2GpO+tC7bTt5pn7f+wQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MjIyMDIwMjFaFw0yNjA0MjEyMDI1MjFaMDMxMTAvBgNV
BAMTKDJGMUUxMzY1MEQ3QjgwNDNDMjQzNjY4MDA5NEZGNzI0NDYwQTVENEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRg/UhwWnlp15Novq/ZNLBtoOP
/nJ5/S8Xmzirhqi5aRYJfS1BwucijjVPdlL/9v0Ud3T2ijTXb/G7alzxEFr78jrp
EiC0SdKd3nOCphRHEHzn7YgKnqbDPGB6kkNDdg3UilV4i0cJ6ZcCkpxj8cupEwKk
2zl4/3lJ6wlCpRzw1nM/aNkV72VNqpWZK8MuVKSMK2zjedtnHS7msVGi4tAcM/a+
GXH9UH6Em+gq2K3FKvCwaVjcWWy7EDNGpcL/5W8YNoAziqeOKfgYqQ2rvSIBAZNb
Um3lTYhb5isQBiit0yLcv1Jdw8vwWMVNWp9QPi0Z+KnM8/L+qDI2mtKApqbtAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvHhNlDXuAQ8JD
ZoAJT/ckRgpdTDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUd4
M05iUWM2TXBKV3BBZFR6MUQ5SHo4NUtGUGVFbmRvN2JZdkRyeUNRTHUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FH
eDNOYlFjNk1wSldwQWRUejFEOUh6ODVLRlBlRW5kbzdiWXZEcnlDUUx1LzAvMkYx
RTEzNjUwRDdCODA0M0MyNDM2NjgwMDk0RkY3MjQ0NjBBNUQ0Qy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEuzFwMA0EAgACMAcDBQAoBAEMMBkGCCsGAQUFBwEI
AQH/BAowCKAGMAQCAm3wMA0GCSqGSIb3DQEBCwUAA4IBAQDKJFi27833zJw1WLhG
if1VALsuB4OA151JjkVzIbKS8hb3gHs8AK3uJCyiwK1Zt6ecL3L1Il8TWuWk63BH
S/KIoQZP909r5uOytIAk305C07n0/SiIUIXRU4BsF/XZVB2tZZraYSlZZ/OiH2/M
3MVlfQb2lkkCv2q14O6IgiH9oVFRCcHyP/Z1btnBd/QzcGEKutPQq4YLhDb1e/Yp
FJinm2aL1GcJLiEQL0sA+Kuz/dJWL1VoQwfdQw/dMOGH8N2QxDM7781BQ6lD6uYz
2NPNOHRVeXC02egTqTVj7ojBQdKRROmG/trf+XTuxmoRSCwHtVYW0hW5FXMY0eFa
c0UI
-----END CERTIFICATE-----