This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6EA37C4D080AEB9F5587B7C537BE633D714F5748.cer
File:                     6EA37C4D080AEB9F5587B7C537BE633D714F5748.cer (raw, json)
Hash identifier:          lmHpuoWDGIqXcfr7ma7LuSw9OhC6H0G4C1DvkwFVR2Y=
Subject key identifier:   6E:A3:7C:4D:08:0A:EB:9F:55:87:B7:C5:37:BE:63:3D:71:4F:57:48
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2CDD2ED644D78A6C224D8E5A187FF5440C23CBF2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/6EA37C4D080AEB9F5587B7C537BE633D714F5748.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Dec 2025 22:51:57 +0000
Certificate not after:    Wed 09 Dec 2026 22:56:57 +0000
Subordinate resources:    AS: 267096
                          IP: 45.229.24.0/22
                          IP: 2804:4814::/32
Validation:               Failed, certificate revoked on Wed 17 Dec 2025 02:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:dd:2e:d6:44:d7:8a:6c:22:4d:8e:5a:18:7f:f5:44:0c:23:cb:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 10 22:51:57 2025 GMT
            Not After : Dec  9 22:56:57 2026 GMT
        Subject: CN=6EA37C4D080AEB9F5587B7C537BE633D714F5748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:aa:04:8c:24:bd:14:4a:6e:cd:8d:3f:d9:
                    7b:35:e7:bf:ae:3b:43:24:d9:b2:9b:29:5c:e6:12:
                    7e:61:7e:2d:18:de:27:a0:b2:7b:1e:9d:99:a7:48:
                    6d:dd:93:b4:ce:9a:46:fb:3b:64:92:62:24:85:70:
                    d3:c8:96:e4:b1:a1:e8:c4:8f:f6:fc:22:05:4d:3a:
                    c8:09:b8:20:b6:b3:a7:ad:7d:7b:a2:e9:fa:3d:2e:
                    58:76:76:04:b8:3d:86:3e:45:69:e3:38:e8:aa:db:
                    68:80:33:63:73:fa:73:24:c5:ac:f8:58:5c:6c:e2:
                    5b:85:97:91:59:fc:1c:45:8e:86:11:22:95:e8:b7:
                    be:32:7c:95:9e:e7:a7:fe:00:e0:62:a1:8f:97:29:
                    39:1d:8e:e2:ea:50:a6:98:2d:29:9c:5e:3a:c7:68:
                    56:a5:46:71:a4:e2:8f:f7:73:d7:dc:d3:ca:aa:7f:
                    3a:1e:02:94:5c:b4:68:55:84:ac:e7:24:85:24:d9:
                    3b:45:55:3e:bb:d0:0d:cf:0f:ae:35:cd:60:78:e1:
                    46:b0:07:ca:5b:9d:57:52:a2:83:08:84:52:17:cd:
                    20:97:80:06:8b:4b:d5:7f:a7:93:0d:fc:f5:9d:24:
                    71:70:71:bd:fb:81:d6:b1:fa:90:ba:64:9f:23:5f:
                    5b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:A3:7C:4D:08:0A:EB:9F:55:87:B7:C5:37:BE:63:3D:71:4F:57:48
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/6EA37C4D080AEB9F5587B7C537BE633D714F5748.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.24.0/22
                IPv6:
                  2804:4814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267096

    Signature Algorithm: sha256WithRSAEncryption
         b4:e3:e7:5d:56:38:e8:7c:02:35:17:72:6e:8f:fe:d8:70:b7:
         69:73:75:95:1d:79:95:4d:4b:be:db:b4:af:cb:91:5b:74:59:
         28:85:ad:62:1f:77:3f:49:19:a2:be:f4:27:f0:91:58:a5:88:
         35:f9:59:ce:51:bc:d1:1d:e5:73:80:6a:e5:5d:23:25:76:77:
         10:68:dd:6b:15:52:0e:6f:20:df:d4:ec:83:1a:0d:7b:2d:93:
         7f:38:29:01:21:cc:ed:2e:5a:dc:15:44:80:4b:2f:c6:05:b1:
         be:a6:b7:0c:08:d6:a0:2d:b5:ca:63:95:e9:22:b2:6f:e8:7a:
         73:4c:c1:3b:5c:d1:1a:3c:32:9d:27:d9:56:a5:2d:4f:0e:bc:
         eb:2e:44:56:ee:68:1c:52:40:9c:45:bf:00:e1:6e:a5:a8:ea:
         31:1c:c8:25:56:bc:70:ed:6e:25:a6:23:fc:b2:f9:25:2a:d6:
         a5:3b:5d:15:63:8d:5e:c1:e6:3a:aa:e8:1b:b7:51:0a:d9:f9:
         34:ee:ca:23:68:28:27:99:c4:b4:4a:ad:91:f4:85:9f:89:03:
         31:a2:c2:f1:75:e8:1d:4b:b8:81:6b:2d:13:34:21:3a:0b:92:
         16:93:5b:bf:4d:e5:86:c9:3f:c2:fa:50:c9:af:a7:9c:af:0b:
         6f:0e:f6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----