This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.cer
File:                     79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.cer (raw, json)
Hash identifier:          iFEabsb0RE9lKyASn8Yum5KmzSsrlCqpDjv/L98REBI=
Subject key identifier:   79:E1:12:00:E9:DB:04:5F:5A:94:8F:7C:DE:1F:2E:88:F8:EF:E1:A1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       27E40371A501FB1C6ACFA575D94F1B3C4287481F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 May 2025 07:43:36 +0000
Certificate not after:    Wed 06 May 2026 07:48:36 +0000
Subordinate resources:    AS: 266279
                          IP: 170.78.128.0/22
                          IP: 2804:3548::/32
Validation:               Failed, certificate revoked on Tue 14 Oct 2025 13:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e4:03:71:a5:01:fb:1c:6a:cf:a5:75:d9:4f:1b:3c:42:87:48:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  7 07:43:36 2025 GMT
            Not After : May  6 07:48:36 2026 GMT
        Subject: CN=79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:48:3a:79:d6:10:59:37:f3:01:1f:40:a2:
                    fe:8c:6d:c9:41:39:66:ab:c0:25:70:54:e5:70:9e:
                    5e:f6:0c:f4:c3:38:5a:4c:c2:6a:1a:95:31:70:15:
                    99:2c:79:cf:be:b3:02:4c:0b:ef:f6:7c:45:9a:56:
                    89:7f:da:44:4e:0b:88:00:4b:0a:e2:ae:40:ae:d9:
                    a5:d7:96:1d:33:dc:78:20:3b:54:34:b0:43:10:5a:
                    29:8d:bd:d2:be:fa:54:0d:6d:f8:4c:14:1f:3c:58:
                    16:d5:a0:fa:ac:80:84:7b:3d:95:2a:5f:56:ce:6d:
                    83:6e:a5:7f:65:eb:af:cb:31:73:36:51:d2:d4:ed:
                    0c:46:4c:b0:18:65:f1:f4:9d:8a:74:c5:2f:2a:77:
                    c7:b1:af:64:47:06:9e:25:54:fc:06:f2:62:3a:b7:
                    00:26:6d:19:dd:b8:f0:cf:32:be:d0:5c:d1:35:0e:
                    ec:73:0f:c1:39:02:52:2d:0a:b9:00:8a:a4:54:b5:
                    b8:d5:5f:5f:a4:7c:c0:dd:dc:7d:8b:09:f9:0b:fa:
                    dd:b9:49:02:d5:a0:80:21:59:5c:29:63:cc:c7:98:
                    af:6f:e0:4a:7b:39:12:99:9d:13:43:c0:db:78:3d:
                    32:a5:bd:23:bb:e1:46:f7:a5:09:dd:1d:39:9a:d8:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:E1:12:00:E9:DB:04:5F:5A:94:8F:7C:DE:1F:2E:88:F8:EF:E1:A1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.128.0/22
                IPv6:
                  2804:3548::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266279

    Signature Algorithm: sha256WithRSAEncryption
         34:72:82:fa:75:6b:d5:74:02:80:e9:3c:67:5b:e7:6e:d3:75:
         38:09:81:98:9f:53:ba:63:75:7c:b1:f8:0d:d3:62:d8:34:c8:
         d2:7a:13:e8:83:8f:37:3e:4a:40:19:8e:cb:73:db:30:df:90:
         c2:b9:2e:e6:a2:31:51:c9:ae:be:b3:e6:3e:07:d9:dd:4f:75:
         c7:1d:12:de:d8:dc:0d:8d:a3:31:ff:38:77:30:1b:61:71:07:
         8b:9a:44:52:29:80:07:dc:25:35:90:42:5a:1c:70:87:92:93:
         af:01:13:9b:40:a5:cb:fd:a3:6f:38:d9:21:72:f1:d0:74:6b:
         8b:ee:11:5f:fc:05:4a:a6:d2:ce:28:5a:58:db:5c:05:37:04:
         f5:08:9a:8a:b1:a7:74:00:27:84:5c:7e:73:59:9c:de:f6:01:
         0c:55:8b:6d:59:76:0e:09:b6:93:6f:7e:ea:d8:d1:b3:d4:7c:
         7b:88:5c:bf:97:18:da:4a:a7:94:c8:3d:ee:46:fd:ec:a6:2b:
         13:9f:aa:f2:e6:a6:91:57:70:e1:5b:79:af:1b:4f:3a:b8:73:
         f1:3d:1f:4a:98:8d:e5:e3:de:67:a8:5a:b0:80:b1:11:27:e0:
         53:e8:9d:9f:0f:b8:3c:79:3e:33:ae:6c:53:bf:48:f4:76:85:
         84:bb:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----