This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E1AA64F1F90D524070428F948C2D4929E70635C.cer
File:                     3E1AA64F1F90D524070428F948C2D4929E70635C.cer (raw, json)
Hash identifier:          flsUar6mt6YkwMVmpSkesaByszGxuALvkXYEH4Hb7pk=
Subject key identifier:   3E:1A:A6:4F:1F:90:D5:24:07:04:28:F9:48:C2:D4:92:9E:70:63:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       74339C2760419A3798268AEA10E237EC8CE525F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/3E1AA64F1F90D524070428F948C2D4929E70635C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Jul 2025 18:45:11 +0000
Certificate not after:    Mon 20 Jul 2026 18:50:11 +0000
Subordinate resources:    AS: 266972
                          IP: 45.225.208.0/22
                          IP: 2804:4628::/32
Validation:               Failed, certificate revoked on Sat 20 Sep 2025 22:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:33:9c:27:60:41:9a:37:98:26:8a:ea:10:e2:37:ec:8c:e5:25:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 21 18:45:11 2025 GMT
            Not After : Jul 20 18:50:11 2026 GMT
        Subject: CN=3E1AA64F1F90D524070428F948C2D4929E70635C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:c9:7b:0d:fc:d9:1e:9d:94:70:7b:da:96:
                    5c:36:9b:fd:d1:8b:18:13:3f:f1:3a:eb:1b:e2:85:
                    73:0c:31:6d:a3:0f:ff:71:f4:62:0f:98:ca:22:4b:
                    45:aa:ed:9d:73:01:b2:a4:9d:9d:cd:43:26:e8:a0:
                    ed:19:c3:cd:e4:a3:f1:36:85:d6:e5:e3:75:4c:49:
                    63:28:f6:74:b5:d5:a7:9f:87:a7:6f:3b:78:77:61:
                    84:48:f4:48:2c:5f:d2:8f:12:d1:84:88:62:79:50:
                    a2:73:84:84:9d:7b:b2:b2:f6:45:99:ed:12:a1:ca:
                    14:47:4b:aa:20:27:7d:4c:71:fc:8c:5e:4f:fc:a3:
                    de:a3:13:3a:c0:3f:f5:fc:5a:8f:7f:c7:dc:08:3c:
                    16:99:66:37:cc:4a:49:f8:20:3e:b8:ec:17:8e:ed:
                    66:31:ba:95:8e:69:2b:44:76:61:c6:0f:06:17:69:
                    81:40:72:5f:8b:55:9b:bb:ec:26:99:8f:fb:c1:78:
                    2a:70:a5:5c:a7:c9:43:e6:04:44:07:58:40:62:3d:
                    99:59:7a:7a:1d:f8:ae:9a:f6:c5:39:f2:2d:b1:7c:
                    65:a4:17:3d:89:e3:87:ef:73:f2:a9:92:1b:b2:3b:
                    64:c8:2f:0e:63:6c:cd:79:0f:2f:f0:3e:7c:ce:14:
                    ba:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:1A:A6:4F:1F:90:D5:24:07:04:28:F9:48:C2:D4:92:9E:70:63:5C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/3E1AA64F1F90D524070428F948C2D4929E70635C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.208.0/22
                IPv6:
                  2804:4628::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266972

    Signature Algorithm: sha256WithRSAEncryption
         7a:18:8d:50:3b:8e:7f:0b:3a:c7:bf:ba:84:f0:d0:fe:98:b7:
         39:0d:96:37:99:41:6e:91:5a:65:9d:28:71:1a:29:b2:82:98:
         2d:80:10:4d:05:e3:6a:57:1c:72:86:9d:7a:a1:67:61:e8:0b:
         14:2e:4d:71:20:cd:0b:e3:55:2e:f5:3e:f3:22:db:60:cd:0d:
         97:b6:81:91:9e:a3:a8:05:91:ab:5d:8a:d5:b8:e8:8b:68:99:
         22:df:1f:19:c8:e3:e1:df:2b:b3:cc:21:41:e5:12:45:4c:90:
         e9:94:f7:ee:25:0b:96:ae:66:27:4d:be:aa:bd:26:4f:53:bf:
         29:e5:3c:16:af:be:b7:fb:88:1a:15:e5:4b:f6:a2:d5:6f:fd:
         49:99:0f:80:9a:de:36:f9:d7:eb:9b:1a:49:5d:6f:6f:55:55:
         45:0b:94:8e:cb:12:e4:5c:77:e5:24:a0:ee:f1:ed:4b:df:d4:
         09:a7:2b:d4:10:25:d2:bd:27:1d:ef:18:cb:17:8b:22:42:e7:
         55:52:53:1f:80:8a:7f:de:77:64:52:c5:64:30:a0:58:12:10:
         e1:0a:88:35:5f:39:ae:a7:be:e1:8d:43:56:64:32:f0:2f:c0:
         e3:a9:ce:c8:00:18:5b:6f:7e:bd:f1:5d:be:11:ca:d6:85:55:
         cc:65:af:f2
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUdDOcJ2BBmjeYJorqEOI37IzlJfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA3MjExODQ1MTFaFw0yNjA3MjAxODUwMTFaMDMxMTAvBgNV
BAMTKDNFMUFBNjRGMUY5MEQ1MjQwNzA0MjhGOTQ4QzJENDkyOUU3MDYzNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkksl7DfzZHp2UcHvallw2m/3R
ixgTP/E66xvihXMMMW2jD/9x9GIPmMoiS0Wq7Z1zAbKknZ3NQybooO0Zw83ko/E2
hdbl43VMSWMo9nS11aefh6dvO3h3YYRI9EgsX9KPEtGEiGJ5UKJzhISde7Ky9kWZ
7RKhyhRHS6ogJ31McfyMXk/8o96jEzrAP/X8Wo9/x9wIPBaZZjfMSkn4ID647BeO
7WYxupWOaStEdmHGDwYXaYFAcl+LVZu77CaZj/vBeCpwpVynyUPmBEQHWEBiPZlZ
enod+K6a9sU58i2xfGWkFz2J44fvc/KpkhuyO2TILw5jbM15Dy/wPnzOFLrXAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+GqZPH5DVJAcE
KPlIwtSSnnBjXDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNENS
WTk0N25RaUNYVkJUUTJ3RXF6b3dXeXhtUGp1TW50cEZlSFZYYUdKVXgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRD
Ulk5NDduUWlDWFZCVFEyd0Vxem93V3l4bVBqdU1udHBGZUhWWGFHSlV4LzAvM0Ux
QUE2NEYxRjkwRDUyNDA3MDQyOEY5NDhDMkQ0OTI5RTcwNjM1Qy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeHQMA0EAgACMAcDBQAoBEYoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQS3DANBgkqhkiG9w0BAQsFAAOCAQEAehiNUDuOfws6x7+6
hPDQ/pi3OQ2WN5lBbpFaZZ0ocRopsoKYLYAQTQXjalcccoadeqFnYegLFC5NcSDN
C+NVLvU+8yLbYM0Nl7aBkZ6jqAWRq12K1bjoi2iZIt8fGcjj4d8rs8whQeUSRUyQ
6ZT37iULlq5mJ02+qr0mT1O/KeU8Fq++t/uIGhXlS/ai1W/9SZkPgJreNvnX65sa
SV1vb1VVRQuUjssS5Fx35SSg7vHtS9/UCacr1BAl0r0nHe8YyxeLIkLnVVJTH4CK
f953ZFLFZDCgWBIQ4QqINV85rqe+4Y1DVmQy8C/A46nOyAAYW29+vfFdvhHK1oVV
zGWv8g==
-----END CERTIFICATE-----