This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/648D03AF76A81708C4D992B5A5E474B4351E4F19.cer File: 648D03AF76A81708C4D992B5A5E474B4351E4F19.cer (raw, json) Hash identifier: gjpukpwK4ZSeOUWfdEOf/1YekVFq4kZ+CLSjH5ehNJM= Subject key identifier: 64:8D:03:AF:76:A8:17:08:C4:D9:92:B5:A5:E4:74:B4:35:1E:4F:19 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7559A418E82CE0CB2D6CE751C547D2F726215227 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/648D03AF76A81708C4D992B5A5E474B4351E4F19.mft caRepository: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 16 Jun 2025 19:39:31 +0000 Certificate not after: Mon 15 Jun 2026 19:44:31 +0000 Subordinate resources: AS: 263913 IP: 138.204.240.0/22 IP: 170.231.216.0/22 IP: 2804:279c::/32 Validation: Failed, certificate revoked on Wed 22 Oct 2025 17:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:59:a4:18:e8:2c:e0:cb:2d:6c:e7:51:c5:47:d2:f7:26:21:52:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 16 19:39:31 2025 GMT Not After : Jun 15 19:44:31 2026 GMT Subject: CN=648D03AF76A81708C4D992B5A5E474B4351E4F19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:55:8f:c2:ca:66:85:59:60:d6:08:c9:fe: 92:78:68:9c:ee:09:6f:04:3e:95:c7:15:39:9a:da: aa:64:fa:5e:10:fb:67:6f:8c:d9:73:9a:ed:c2:6d: c0:01:11:a5:cf:ce:20:04:a3:c9:d7:3b:88:4d:f8: 15:d9:67:1b:97:e3:8f:97:9d:09:8d:da:bb:b1:13: 38:46:61:7c:20:23:46:2e:d0:bd:f9:01:2e:61:97: 6e:c3:6e:98:c8:bf:e8:cc:18:de:80:34:dd:cf:17: 39:64:25:f0:67:97:96:18:7b:f1:17:27:dd:4b:63: 94:a9:f4:a6:61:bf:0e:fc:f5:fe:93:61:7e:21:b2: b9:6f:b5:bd:93:27:1d:21:81:08:2d:c9:af:b5:ba: c7:fb:81:11:35:53:d8:42:de:d5:bb:42:85:f7:78: 60:6f:9a:a8:84:10:35:75:ab:5d:d1:a0:5d:76:8e: 43:07:2f:8d:d9:30:27:87:ba:68:1d:e4:aa:02:9e: e5:26:d0:7f:de:e9:0e:80:fa:1f:81:90:85:57:7e: 72:42:67:7c:51:87:bb:09:19:f0:d0:81:98:72:9e: cb:47:0d:98:b4:1c:8e:68:09:0e:d4:ec:ce:dc:9a: 7f:50:c7:3b:c3:41:f2:62:71:f7:e8:19:38:d9:bf: a2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:8D:03:AF:76:A8:17:08:C4:D9:92:B5:A5:E4:74:B4:35:1E:4F:19 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/648D03AF76A81708C4D992B5A5E474B4351E4F19.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.240.0/22 170.231.216.0/22 IPv6: 2804:279c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263913 Signature Algorithm: sha256WithRSAEncryption ad:ec:6f:df:9f:4e:ae:c4:af:c1:1e:ea:e7:74:f7:c0:83:3c: 30:58:2f:27:37:70:98:1d:3c:57:c0:12:32:a9:8a:a6:bc:b6: da:f2:44:f4:f9:01:73:10:5f:67:97:02:fe:fd:be:52:ca:72: 30:3e:ea:50:44:16:68:74:c6:a5:05:cc:bd:7f:c8:30:54:75: 83:50:1c:cf:03:32:c8:50:75:a0:be:76:7b:ba:82:e2:66:4b: 0c:7b:39:85:12:16:17:b5:a6:77:d1:5f:e4:59:52:7e:ec:b8: f8:20:78:e6:9d:e3:68:b5:c3:35:0c:39:8c:da:8b:73:e1:b1: a8:e6:9a:16:9b:51:9f:3f:21:35:1e:90:f8:56:62:bc:1e:f3: 99:57:0c:e5:d7:86:2b:07:ae:a8:f9:10:ba:52:6f:29:ce:24: b2:02:27:8a:01:a2:b9:1d:2a:cf:50:2d:a5:46:54:35:ba:96: a8:fe:6a:6d:8d:50:5d:2a:28:e9:b7:09:f6:aa:4d:e3:5b:c0: ca:ee:09:2e:ed:4d:19:c7:4e:cf:11:5f:5c:68:16:aa:c0:3d: e5:7f:9b:72:e3:21:43:14:b7:0a:33:87:f7:a2:85:a5:b7:6d: 48:d5:50:dc:9a:7c:48:62:53:e2:99:03:bb:03:bb:42:48:b2: 78:2e:34:62 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUdVmkGOgs4MstbOdRxUfS9yYhUicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MTYxOTM5MzFaFw0yNjA2MTUxOTQ0MzFaMDMxMTAvBgNV BAMTKDY0OEQwM0FGNzZBODE3MDhDNEQ5OTJCNUE1RTQ3NEI0MzUxRTRGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mlWPwspmhVlg1gjJ/pJ4aJzu CW8EPpXHFTma2qpk+l4Q+2dvjNlzmu3CbcABEaXPziAEo8nXO4hN+BXZZxuX44+X nQmN2ruxEzhGYXwgI0Yu0L35AS5hl27DbpjIv+jMGN6ANN3PFzlkJfBnl5YYe/EX J91LY5Sp9KZhvw789f6TYX4hsrlvtb2TJx0hgQgtya+1usf7gRE1U9hC3tW7QoX3 eGBvmqiEEDV1q13RoF12jkMHL43ZMCeHumgd5KoCnuUm0H/e6Q6A+h+BkIVXfnJC Z3xRh7sJGfDQgZhynstHDZi0HI5oCQ7U7M7cmn9QxzvDQfJicffoGTjZv6KxAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkjQOvdqgXCMTZ krWl5HS0NR5PGTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1dU OWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3aFcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NX VDlpbzNybU1QTk1lVXVEU3VvZGg0elFjNldvNnJLV3g2eDhxc0hod2hXLzAvNjQ4 RDAzQUY3NkE4MTcwOEM0RDk5MkI1QTVFNDc0QjQzNTFFNEYxOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCiszwAwQCqufYMA0EAgACMAcDBQAoBCecMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQG6TANBgkqhkiG9w0BAQsFAAOCAQEArexv359O rsSvwR7q53T3wIM8MFgvJzdwmB08V8ASMqmKpry22vJE9PkBcxBfZ5cC/v2+Uspy MD7qUEQWaHTGpQXMvX/IMFR1g1AczwMyyFB1oL52e7qC4mZLDHs5hRIWF7Wmd9Ff 5FlSfuy4+CB45p3jaLXDNQw5jNqLc+GxqOaaFptRnz8hNR6Q+FZivB7zmVcM5deG KweuqPkQulJvKc4ksgInigGiuR0qz1AtpUZUNbqWqP5qbY1QXSoo6bcJ9qpN41vA yu4JLu1NGcdOzxFfXGgWqsA95X+bcuMhQxS3CjOH96KFpbdtSNVQ3Jp8SGJT4pkD uwO7QkiyeC40Yg== -----END CERTIFICATE-----Generated at Wed Dec 17 00:15:28 2025 by rpki-client