This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.cer
File: 31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.cer (raw, json)
Hash identifier: 9EsPEwSZXWcFwMp2zAz5SHgctYsV4iRQvaTUsCgllCU=
Subject key identifier: 31:59:9B:69:A8:4A:AB:92:38:C2:CE:F9:5E:C8:B6:E6:CF:9E:5C:37
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 794D46A9E12F77177C84B822655EAFF8AF8B005E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.mft
caRepository: rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 06 May 2025 16:01:00 +0000
Certificate not after: Tue 05 May 2026 16:06:00 +0000
Subordinate resources: AS: 263421
IP: 168.121.156.0/22
IP: 168.195.220.0/22
IP: 179.191.240.0/20
IP: 2804:1600::/32
Validation: Failed, certificate revoked on Fri 17 Oct 2025 14:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:4d:46:a9:e1:2f:77:17:7c:84:b8:22:65:5e:af:f8:af:8b:00:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 6 16:01:00 2025 GMT
Not After : May 5 16:06:00 2026 GMT
Subject: CN=31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:74:d8:37:c8:4d:30:7e:77:25:f8:6e:47:97:
6b:1b:68:b2:f8:52:b5:6c:df:f9:fd:67:8b:ab:9c:
88:85:83:1e:5b:83:8b:22:b5:ba:39:56:2f:d8:ce:
c9:89:2c:19:fe:08:46:a9:d9:83:71:da:63:b5:24:
c5:8b:bc:26:f1:5f:64:92:e7:cc:07:66:a1:7b:05:
76:09:1b:91:f4:fd:65:15:25:b8:f3:a6:48:8d:e2:
06:a8:35:d2:2d:51:cb:10:f9:97:82:d1:6b:94:39:
51:e5:ab:64:3d:46:3c:4f:e8:5a:14:19:d0:b7:81:
79:51:f1:89:00:94:89:a6:1e:03:87:f1:a9:32:99:
27:31:13:a7:b6:60:46:46:34:5b:93:b0:e0:bd:2e:
85:b9:a5:b6:86:12:d6:e0:52:2f:8a:d9:5e:fc:88:
66:05:37:3d:52:b7:78:14:43:b7:6c:a1:89:d4:3f:
1a:a0:d4:f9:fe:c7:fd:a7:e7:21:9f:8e:14:8b:55:
65:b1:41:76:7a:05:5d:91:7c:e6:16:b2:53:64:5e:
96:55:3e:b6:9e:50:86:41:a0:da:18:41:09:9e:6c:
00:ae:62:fb:db:3d:6b:af:19:39:ec:23:51:a3:81:
81:d2:c4:cf:6d:39:3b:78:34:64:59:2e:3c:05:3a:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
31:59:9B:69:A8:4A:AB:92:38:C2:CE:F9:5E:C8:B6:E6:CF:9E:5C:37
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.156.0/22
168.195.220.0/22
179.191.240.0/20
IPv6:
2804:1600::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263421
Signature Algorithm: sha256WithRSAEncryption
b3:ac:1e:b9:a8:e0:4d:06:27:9e:11:aa:d8:53:5a:f3:d8:5f:
9c:70:68:e9:4a:15:66:1d:31:d6:fb:ad:dd:62:d5:87:4f:e4:
76:52:67:92:a6:ab:16:6a:8a:96:23:24:57:ce:bf:69:2b:65:
85:7e:b1:46:3c:e5:ad:60:89:ce:1e:2e:6f:2e:a8:cb:ff:c7:
5e:c1:08:b6:68:c2:c8:bb:e8:7c:57:2e:e4:3c:59:4c:12:4b:
66:c9:50:8f:fb:71:38:a1:bd:f5:27:a6:9a:bb:df:6e:07:a1:
66:d2:3c:3f:b4:e9:a1:94:00:87:93:98:7e:bd:e8:78:b9:cf:
4b:aa:fa:25:44:c5:60:57:88:4d:21:82:c4:89:f4:4b:a3:9b:
84:b2:4a:ed:30:55:4d:44:90:fd:a9:9b:14:97:86:ef:db:1d:
2f:2e:9a:f5:5b:74:e7:cb:93:eb:2c:83:49:fd:4e:f8:c0:bf:
c6:ce:4e:37:47:f7:6f:7f:d8:b6:1f:84:f8:ff:64:91:4f:c1:
47:c6:50:68:aa:42:4c:00:74:5d:fd:68:20:5c:a9:88:d9:36:
86:52:27:93:f6:46:bc:e4:d5:2d:f0:7b:37:8d:aa:8a:a0:98:
71:18:f8:67:bd:9e:ba:57:ff:e3:cc:41:28:27:cc:d0:f6:c0:
ee:83:32:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:14:24 2025 by rpki-client