This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.cer
File:                     77220C997C68A28EC6D54317D0A76DDDDA1B99FD.cer (raw, json)
Hash identifier:          zGa8uVZbF2o9mRHqWqIQ1+KiZY0/dcOx8xMZOECAOe0=
Subject key identifier:   77:22:0C:99:7C:68:A2:8E:C6:D5:43:17:D0:A7:6D:DD:DA:1B:99:FD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       39CFFF212D74D2AA4F53EA76423525BD41C65714
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 17:41:17 +0000
Certificate not after:    Fri 06 Mar 2026 17:46:17 +0000
Subordinate resources:    AS: 265122
                          IP: 143.208.92.0/22
                          IP: 2804:2ad8::/32
Validation:               Failed, certificate revoked on Fri 31 Oct 2025 12:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cf:ff:21:2d:74:d2:aa:4f:53:ea:76:42:35:25:bd:41:c6:57:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 17:41:17 2025 GMT
            Not After : Mar  6 17:46:17 2026 GMT
        Subject: CN=77220C997C68A28EC6D54317D0A76DDDDA1B99FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:64:01:3f:ed:81:38:1c:de:4b:9f:05:0b:
                    db:53:ad:d8:c6:6f:9f:86:cb:f8:03:7e:ef:f9:b0:
                    3a:1d:c5:c1:ea:4b:09:98:af:0c:c3:c5:98:b4:2e:
                    52:d8:4b:b0:b9:b7:18:c4:70:a9:34:52:ab:72:fb:
                    3b:b2:c3:a6:52:a1:11:37:21:cd:09:7c:6a:0e:d6:
                    79:3f:7e:da:1a:f7:d1:1e:27:15:db:e2:20:8c:fe:
                    b9:c8:d6:93:db:a2:ae:6e:a7:db:a5:4b:1a:60:e9:
                    ea:01:1d:95:67:e8:2d:a2:cc:7c:72:40:74:56:51:
                    d2:33:a8:a9:99:3a:80:af:9a:e5:c2:85:a2:09:af:
                    48:a5:0d:ac:f4:97:04:12:77:85:66:b8:89:ac:0b:
                    ea:6f:72:9d:85:f2:0f:d0:09:1a:c3:98:a4:c9:f7:
                    ae:31:bd:48:90:c4:22:d8:f2:de:29:59:d8:8c:b7:
                    87:03:50:e1:e1:0c:d0:4f:14:23:9f:b8:02:15:0d:
                    fd:cd:30:69:41:a4:c0:07:b6:cd:3f:0b:0d:f2:14:
                    f2:65:95:44:7f:ee:ab:5a:0c:69:35:aa:94:ac:81:
                    01:d2:b8:37:f3:27:0b:df:0b:53:1f:12:40:46:37:
                    dc:fb:ee:b3:78:4f:b4:f8:88:77:55:24:c1:25:d1:
                    6a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:22:0C:99:7C:68:A2:8E:C6:D5:43:17:D0:A7:6D:DD:DA:1B:99:FD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.92.0/22
                IPv6:
                  2804:2ad8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265122

    Signature Algorithm: sha256WithRSAEncryption
         1a:ed:01:6b:a6:f8:c2:65:6a:46:36:f1:0e:06:51:9b:35:bc:
         98:a4:89:04:20:77:d5:f2:a8:23:2c:2d:fa:80:85:6a:30:1a:
         65:d0:fc:3f:e6:dc:d8:fe:7c:d3:9b:2f:e3:7c:2e:c0:d0:1e:
         f2:80:7d:a0:b4:08:02:af:3c:af:06:9f:6b:79:3e:cc:4a:d0:
         00:7e:ae:8e:08:cc:81:08:a3:b0:85:26:51:87:12:6a:4d:d3:
         a3:7b:ec:56:cb:3b:49:49:ee:04:fa:f3:f1:a2:2b:d2:cb:a3:
         0d:0b:c2:b1:dd:56:3b:08:f6:81:22:1b:d8:23:e0:3f:39:79:
         39:cf:9a:2f:9d:ce:ef:16:06:86:28:6d:b0:86:d3:06:9c:18:
         1b:88:a2:92:14:8a:9d:2b:98:de:ff:ce:b0:0b:14:40:44:fe:
         7f:02:94:df:d1:21:22:d6:4b:f0:7d:37:b2:24:0c:73:87:2c:
         af:b8:dc:9e:58:0c:63:db:30:39:de:9c:bf:01:73:d9:6f:ac:
         23:65:bc:7a:ac:fb:80:c9:ca:a5:9e:99:4b:89:ba:8d:a6:59:
         10:4e:53:36:c2:48:8f:33:c5:37:e9:ca:5d:72:09:89:8d:2c:
         d1:92:ae:9b:85:d0:de:86:2a:ad:a9:6b:74:69:08:72:37:07:
         c5:ba:76:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----