This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/539EBD0106751619B3004BF315DFE05E3415919D.cer
File:                     539EBD0106751619B3004BF315DFE05E3415919D.cer (raw, json)
Hash identifier:          tXzlr1cc2bLBOdFE8y/7QlkunwoMaETgq2JRwWwjnHY=
Subject key identifier:   53:9E:BD:01:06:75:16:19:B3:00:4B:F3:15:DF:E0:5E:34:15:91:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       010A44E502EC96773483515BD9925D115F8144D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/539EBD0106751619B3004BF315DFE05E3415919D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Jun 2025 13:26:15 +0000
Certificate not after:    Mon 08 Jun 2026 13:31:15 +0000
Subordinate resources:    AS: 263878
                          IP: 138.204.20.0/22
                          IP: 2804:2720::/32
Validation:               Failed, certificate revoked on Fri 20 Jun 2025 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0a:44:e5:02:ec:96:77:34:83:51:5b:d9:92:5d:11:5f:81:44:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  9 13:26:15 2025 GMT
            Not After : Jun  8 13:31:15 2026 GMT
        Subject: CN=539EBD0106751619B3004BF315DFE05E3415919D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:d0:2a:5a:e6:e1:9f:a6:70:91:15:27:d4:
                    4f:b3:07:20:24:38:5a:a7:34:95:bc:86:05:92:f5:
                    fe:8d:44:e8:2e:7c:c6:67:d3:d3:5b:ff:42:3e:92:
                    01:a5:bf:5f:0b:f0:a0:ee:57:1c:68:5f:18:e0:f7:
                    5a:a6:ef:75:8a:1f:e7:10:8d:02:1f:d8:29:27:de:
                    17:35:0d:6f:0e:d0:d0:42:6f:3b:03:20:b6:91:89:
                    c5:d9:86:74:e2:72:4a:78:2f:f8:14:1b:01:a2:f2:
                    c7:23:e4:06:5b:9b:61:4b:bd:c4:29:b2:68:7b:85:
                    20:4a:05:16:4a:95:79:0e:2b:01:d2:6e:6f:b0:38:
                    a7:79:a9:4a:95:54:3f:34:ce:14:ee:bc:5d:6b:6d:
                    73:f4:8a:0f:58:3a:ad:9a:1c:77:f1:ea:b9:2f:7d:
                    b8:94:2f:d1:b5:99:65:77:fb:17:ef:5e:e6:69:9d:
                    2a:bc:15:a2:0b:a2:4d:01:53:e8:0e:ec:08:41:3b:
                    39:97:a2:a1:41:e0:1f:db:45:65:72:85:b2:4b:da:
                    52:b9:f8:f7:dc:9b:f0:6f:43:71:e9:38:1a:ce:26:
                    11:31:87:36:3a:f4:2a:a6:10:04:46:00:56:2f:1e:
                    e1:6c:e3:8c:d4:d9:53:de:81:e6:40:0b:0c:fb:c7:
                    dc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:9E:BD:01:06:75:16:19:B3:00:4B:F3:15:DF:E0:5E:34:15:91:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/539EBD0106751619B3004BF315DFE05E3415919D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.20.0/22
                IPv6:
                  2804:2720::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263878

    Signature Algorithm: sha256WithRSAEncryption
         a6:9e:33:ff:8a:3a:49:a5:f8:d7:ea:06:4b:83:2d:92:7b:ea:
         49:fc:00:d4:75:8c:83:1d:08:f7:8b:44:15:b5:78:d8:1d:ec:
         33:af:a1:2e:ae:8d:bd:56:2b:7c:a2:a4:de:00:3b:8c:fb:ac:
         58:3e:f8:59:df:d1:8b:55:ee:da:ed:e2:1b:46:3a:02:97:c7:
         85:2f:e3:8d:a6:57:4e:a8:44:f0:9a:0e:cb:78:c1:b1:53:c1:
         64:1f:77:f5:04:67:38:c7:ed:d3:0f:ff:9e:59:5f:9c:04:61:
         48:6c:09:6f:76:37:4b:82:e8:68:64:4e:85:04:aa:73:49:0d:
         ef:55:7b:23:4d:f2:4f:07:66:15:8e:4c:5f:f3:b1:1c:69:45:
         af:96:17:1b:5b:a4:4c:f6:1d:40:cc:ca:40:cd:0f:f4:39:c4:
         60:84:75:38:de:de:1b:c5:6f:1b:3f:e1:68:8b:52:fd:ff:ff:
         ac:54:e9:9a:e3:cc:39:b0:22:35:44:4f:37:02:99:4d:e3:27:
         52:79:a2:1a:c5:16:e2:52:eb:ed:1c:49:80:86:b4:37:55:9c:
         83:6f:42:66:dd:a1:28:d7:4d:c5:7e:ef:92:c0:7f:30:9d:2d:
         f3:e5:00:5d:98:ba:c9:c0:76:0a:1c:d4:51:61:8f:3c:3b:1d:
         fd:07:22:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----