This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer
File:                     61B932CD849CE672D7ADF5C35F76FC83A060268C.cer (raw, json)
Hash identifier:          gLcdd5QzgekiWiYL6fjd1ZWEcKlVs2wK+bV4DBG+d+I=
Subject key identifier:   61:B9:32:CD:84:9C:E6:72:D7:AD:F5:C3:5F:76:FC:83:A0:60:26:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B87EF3B838A72E860CDA01C0B66007BB286DA88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Jun 2025 20:18:04 +0000
Certificate not after:    Mon 08 Jun 2026 20:23:04 +0000
Subordinate resources:    AS: 266265
                          IP: 45.65.172.0/22
                          IP: 2804:3d48::/32
Validation:               Failed, certificate revoked on Sun 31 Aug 2025 20:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:87:ef:3b:83:8a:72:e8:60:cd:a0:1c:0b:66:00:7b:b2:86:da:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  9 20:18:04 2025 GMT
            Not After : Jun  8 20:23:04 2026 GMT
        Subject: CN=61B932CD849CE672D7ADF5C35F76FC83A060268C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:c9:c6:52:20:c3:17:03:24:a3:5f:d7:5f:
                    9b:ad:27:16:66:29:eb:d3:8f:9c:b9:0e:47:0b:f6:
                    60:f9:93:0d:fd:f5:92:36:a6:5f:68:30:79:e6:ac:
                    81:8e:66:f9:d6:0e:32:e2:68:a1:1f:9e:90:33:d4:
                    c2:82:e5:ce:07:32:25:cb:7b:05:d1:6f:5c:3e:62:
                    56:2c:c0:7a:6a:65:e9:07:58:eb:1d:9b:0e:98:9c:
                    e9:00:88:95:0b:0e:34:09:de:ce:18:61:da:f7:07:
                    61:b0:db:f1:d7:44:4c:0c:87:bc:c4:19:c3:4e:e0:
                    3f:fa:e4:f5:a5:00:22:6b:f1:7c:67:43:f7:50:70:
                    86:8d:78:f2:15:13:3f:c3:49:7a:27:56:50:3d:4c:
                    4a:e0:8e:c2:d7:52:42:22:5b:4d:3a:cd:49:af:6e:
                    0c:23:01:1d:9e:d9:2c:b6:a4:d9:6a:8d:be:bc:1b:
                    b2:ad:f7:3f:77:51:a9:b8:d2:2b:c1:58:f5:be:73:
                    d5:d8:1b:4e:73:1c:61:61:cf:0b:bb:00:7a:3d:f9:
                    64:ec:c7:b9:89:f4:27:95:c3:93:88:60:2d:87:29:
                    36:e9:2f:1b:73:10:61:24:9a:27:87:56:e7:5b:3d:
                    c0:ee:c5:70:d5:57:b6:c8:11:bf:ac:59:ce:ba:ee:
                    3d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:B9:32:CD:84:9C:E6:72:D7:AD:F5:C3:5F:76:FC:83:A0:60:26:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.172.0/22
                IPv6:
                  2804:3d48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266265

    Signature Algorithm: sha256WithRSAEncryption
         ac:15:11:4e:da:b4:da:1a:85:6d:fc:98:c1:3d:07:70:c3:66:
         ae:3d:78:1a:6a:7b:37:5d:87:63:58:b3:3d:17:d8:0a:5b:b8:
         82:85:78:d3:e9:1b:b2:58:db:33:c4:56:5e:4e:c0:da:35:5b:
         24:d4:b2:c9:9c:f4:5d:61:2d:fe:18:8c:f6:0f:52:20:5e:2a:
         bd:91:49:a2:05:30:98:a8:59:71:43:84:08:92:90:7c:fd:d1:
         79:24:32:99:a8:5e:0c:ad:be:eb:56:c5:e7:0a:50:a0:99:b2:
         35:23:51:20:f2:f6:10:e5:02:88:b9:01:d2:3c:5c:84:20:f7:
         bb:b5:a6:8a:36:e9:5c:0e:2a:a7:c8:2d:9c:ed:a4:5b:c2:55:
         d2:31:99:a6:8a:d9:79:0f:2d:57:9a:fc:6f:41:a9:da:11:39:
         f5:da:ac:50:91:fb:07:01:fd:ef:69:39:20:80:3d:db:b7:44:
         e3:97:75:a7:2a:9b:73:5f:63:73:be:dc:c8:9f:e0:ba:e0:58:
         bc:14:41:26:a4:c2:cc:5d:51:ca:f1:e5:21:8e:57:dd:e7:9a:
         48:32:65:0d:e6:60:89:88:f0:3d:af:fb:48:b7:4a:ef:db:a5:
         a5:58:30:41:d9:b0:ed:cd:8c:fb:a7:49:fb:5f:a0:8c:a5:e2:
         15:1f:98:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----