This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.cer
File:                     2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.cer (raw, json)
Hash identifier:          JYdLeyJnjsiHhfOg7ffJue1qlzs7DczWsEA3TucEIzA=
Subject key identifier:   2F:AC:CB:E6:F8:0A:4A:22:9F:1F:3D:5D:3A:EC:D6:01:39:54:9E:D5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3499383FBB8076F3074CE3E401D4F5092F085AFB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Jun 2025 18:30:32 +0000
Certificate not after:    Fri 12 Jun 2026 18:35:32 +0000
Subordinate resources:    AS: 271358
                          IP: 200.50.228.0/22
                          IP: 2804:7a40::/32
Validation:               Failed, certificate revoked on Sun 13 Jul 2025 01:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:99:38:3f:bb:80:76:f3:07:4c:e3:e4:01:d4:f5:09:2f:08:5a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 13 18:30:32 2025 GMT
            Not After : Jun 12 18:35:32 2026 GMT
        Subject: CN=2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:7d:ff:ed:ea:9c:ad:9b:7e:2a:61:4c:17:
                    a2:43:69:b3:ae:ba:14:d7:42:4a:93:f2:52:71:4e:
                    45:84:11:57:3a:ed:8b:e0:83:be:6a:bf:b2:24:97:
                    fe:81:e8:a7:98:ad:1d:7e:8c:3c:c3:c2:26:81:48:
                    0f:c5:91:58:91:07:ef:c7:f5:8a:c6:42:11:6e:14:
                    5b:54:47:2d:a5:9c:d3:47:c2:f1:7f:84:73:6b:ff:
                    da:91:6c:02:de:00:39:90:7b:9e:07:16:61:17:8a:
                    2f:0b:8f:6c:2f:4f:75:d9:3d:a4:a8:cc:44:2b:d3:
                    53:20:37:89:b0:30:dc:ff:15:c7:f9:f6:1a:2f:25:
                    7e:5b:d8:5f:e1:22:70:9e:17:79:00:0e:c0:a5:c2:
                    b6:a3:89:7b:89:c4:35:e8:53:0a:ee:9e:5e:d6:ab:
                    fe:99:b6:6f:f1:09:32:bb:da:77:f1:94:e4:b2:2f:
                    87:55:f9:94:d3:5c:8b:58:f9:6a:6c:18:91:b0:ab:
                    80:f6:1b:11:a2:15:cc:49:7d:6f:4a:21:3c:17:16:
                    a3:14:25:b5:83:74:95:f6:75:df:e1:bf:f1:fb:75:
                    23:b7:11:4a:46:c3:3a:68:33:56:58:9f:7b:02:df:
                    80:3a:d2:51:ec:1d:ae:83:fb:9f:a1:6e:d1:00:22:
                    11:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:AC:CB:E6:F8:0A:4A:22:9F:1F:3D:5D:3A:EC:D6:01:39:54:9E:D5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/2FACCBE6F80A4A229F1F3D5D3AECD60139549ED5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.228.0/22
                IPv6:
                  2804:7a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271358

    Signature Algorithm: sha256WithRSAEncryption
         ce:77:37:c1:2f:a2:51:82:b8:d5:54:f6:4b:76:6e:61:66:25:
         08:40:fe:58:3f:c3:b9:38:6d:83:8a:f9:8c:d0:91:22:6a:44:
         cf:8d:b0:42:3d:92:a9:58:e0:75:36:8e:00:15:f6:b6:02:c0:
         38:4c:19:73:9f:a5:c7:11:e6:a8:44:3c:4a:24:4b:c2:65:61:
         10:5e:35:ec:4d:2e:e9:fc:53:c6:00:22:9f:cf:63:d2:ca:25:
         3e:37:67:65:62:a8:b2:11:e0:e7:80:4e:8b:99:7c:c8:da:d7:
         83:04:d9:ac:3c:3c:a1:1d:4e:f3:d7:2d:7e:0b:75:d7:ef:c8:
         68:29:e9:b0:40:89:6d:da:0b:92:92:0d:71:68:df:4d:eb:ab:
         d6:ed:3f:40:a5:c4:09:8a:42:90:e4:42:89:44:17:88:c0:a6:
         0a:47:b8:6a:46:bd:bd:a2:6c:7e:33:a7:d7:14:e0:3f:a8:a8:
         0a:02:d3:10:97:1d:31:71:49:04:5d:4a:1c:12:21:6c:f2:16:
         6e:8f:18:a8:76:42:9a:ea:80:0f:67:d3:7b:7c:c4:0b:7d:28:
         d6:c3:13:7d:7c:ff:75:69:fb:9b:7e:05:f9:77:e5:f1:b9:cb:
         5a:e5:56:cb:da:6b:3f:5c:1a:55:ac:29:44:ad:a3:ea:b5:d1:
         e0:33:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----