This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4280F26A98E865073FE5F6E4DBB52E60A4F5952A.cer
File:                     4280F26A98E865073FE5F6E4DBB52E60A4F5952A.cer (raw, json)
Hash identifier:          Vu/Rssd+V4xExQjSR/KUqkZXv+cYQ7hvno8DdX2z9l4=
Subject key identifier:   42:80:F2:6A:98:E8:65:07:3F:E5:F6:E4:DB:B5:2E:60:A4:F5:95:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0E58198D2741A9A9506FFDF5792B346CAA5FB8B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/4280F26A98E865073FE5F6E4DBB52E60A4F5952A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Jul 2025 16:45:24 +0000
Certificate not after:    Mon 27 Jul 2026 16:50:24 +0000
Subordinate resources:    AS: 28246
                          IP: 187.1.32.0/20
Validation:               Failed, certificate revoked on Mon 04 Aug 2025 06:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:58:19:8d:27:41:a9:a9:50:6f:fd:f5:79:2b:34:6c:aa:5f:b8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 28 16:45:24 2025 GMT
            Not After : Jul 27 16:50:24 2026 GMT
        Subject: CN=4280F26A98E865073FE5F6E4DBB52E60A4F5952A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:92:b1:8b:a7:f3:ec:f8:cf:1a:cf:84:5e:77:
                    0e:a6:1b:f1:c9:a0:38:2c:13:af:b5:ce:0a:5f:92:
                    d8:07:f5:cd:a7:45:25:69:4e:a3:20:b5:ed:93:34:
                    8c:bf:cd:96:51:7c:fc:fe:d8:16:f5:45:ab:f0:2d:
                    b6:8c:f3:1d:e8:64:4f:41:08:a1:1c:e5:66:2a:d1:
                    82:bd:f3:02:9b:20:8a:c0:d6:07:d0:17:87:f0:dd:
                    5b:7d:e0:23:a3:c2:ef:7e:b0:d0:3a:f4:69:23:56:
                    03:40:ca:d1:f1:bc:82:cd:6a:0a:0b:7d:f6:3c:7a:
                    57:69:b3:a9:3e:b2:8f:f3:fd:4c:ad:35:f0:8d:3e:
                    9b:1c:07:38:cb:08:2c:23:fd:1d:63:e9:ff:0b:13:
                    a9:62:96:21:ed:86:c5:3d:89:ed:90:5d:00:a5:05:
                    16:86:59:7d:9b:4d:70:1a:e1:b2:43:5f:7c:7f:08:
                    62:99:cb:f9:1e:19:d7:5d:69:13:78:26:f1:e9:81:
                    6e:c0:ce:0e:24:fd:0c:83:d2:d1:35:73:10:c0:28:
                    f4:3d:8f:97:04:58:0a:29:15:71:e9:dd:1c:88:8e:
                    a9:a0:9a:78:c3:4c:ab:62:55:3f:c4:9b:41:a6:61:
                    48:56:10:cf:bf:45:b3:ad:63:16:85:d2:aa:a3:68:
                    92:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:80:F2:6A:98:E8:65:07:3F:E5:F6:E4:DB:B5:2E:60:A4:F5:95:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/4280F26A98E865073FE5F6E4DBB52E60A4F5952A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.32.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28246

    Signature Algorithm: sha256WithRSAEncryption
         06:64:74:82:25:87:89:9b:63:8d:03:bb:63:8a:cf:08:fb:69:
         a0:fa:f1:22:47:36:9f:c2:39:9d:c1:28:a6:f0:58:0a:9a:fd:
         45:dd:7b:86:c9:20:fe:fc:be:b7:ae:f8:c2:81:e7:74:15:c1:
         8e:4c:f9:50:45:84:8c:f9:a8:df:ec:92:3c:2d:43:3d:17:72:
         cb:f3:e9:0b:7b:65:36:3e:a9:39:d4:12:39:16:ec:80:fe:36:
         ac:12:46:78:8a:d3:5c:9d:e6:9a:ab:73:5b:8f:ba:c9:ea:aa:
         5a:e6:c8:4d:0f:fa:80:a4:44:1c:3c:d3:af:29:ab:a2:cb:11:
         c2:67:98:d4:1f:26:72:ef:b6:ee:ee:ab:02:4f:a5:65:47:3f:
         f3:a5:11:10:df:f6:7c:14:88:3a:54:b1:f5:a7:fd:fa:9b:f6:
         03:3c:36:66:7e:4c:1a:5f:a9:ce:45:bf:9b:9e:cd:52:4b:a1:
         39:80:07:a3:51:df:e2:f7:f6:75:ad:c7:a4:b3:99:57:ba:c6:
         9d:13:42:9b:d9:cd:32:c9:a3:36:96:7f:cf:97:cd:77:52:84:
         52:f1:ca:68:bf:e9:bb:a7:3a:24:1f:97:47:60:f7:0f:30:26:
         83:fc:19:0e:63:f6:79:ba:9b:03:c6:1d:c1:a4:f7:30:1a:18:
         a4:b7:4c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----