This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7BEEBD056146455EA8F344FAB5588758068DAA8A.cer
File:                     7BEEBD056146455EA8F344FAB5588758068DAA8A.cer (raw, json)
Hash identifier:          nrrgLDIQ1JK3n0/VGNf9WQrkg/vWKoG5Vp2WaKxWCXU=
Subject key identifier:   7B:EE:BD:05:61:46:45:5E:A8:F3:44:FA:B5:58:87:58:06:8D:AA:8A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0CE8327A9F8E3F1A0DDF8E23254F735BB4FE7EC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/7BEEBD056146455EA8F344FAB5588758068DAA8A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Jun 2025 15:44:20 +0000
Certificate not after:    Tue 16 Jun 2026 15:49:20 +0000
Subordinate resources:    AS: 270758
                          IP: 200.39.144.0/22
                          IP: 2804:70f4::/32
Validation:               Failed, certificate revoked on Tue 01 Jul 2025 09:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e8:32:7a:9f:8e:3f:1a:0d:df:8e:23:25:4f:73:5b:b4:fe:7e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 17 15:44:20 2025 GMT
            Not After : Jun 16 15:49:20 2026 GMT
        Subject: CN=7BEEBD056146455EA8F344FAB5588758068DAA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:76:46:46:ac:66:35:88:a3:29:49:1a:3b:6a:
                    05:1a:7e:74:f2:12:ce:03:35:de:f4:78:e7:d8:a3:
                    2b:2f:26:50:05:ea:7a:4e:d6:44:8d:7e:07:5d:f8:
                    84:0a:14:01:00:fc:e3:40:d3:59:22:c1:be:8a:40:
                    ee:66:b8:54:64:4d:b3:c5:22:39:7f:71:09:d0:5b:
                    42:eb:7a:5d:4f:96:64:f6:d3:35:35:0d:6c:91:3d:
                    29:ab:45:6c:64:4e:e8:eb:26:74:97:29:85:5a:10:
                    32:a7:42:41:6c:6f:63:e5:df:de:b9:9f:3c:9c:17:
                    b1:61:35:09:3b:8a:b6:e5:dc:59:e4:5b:31:36:6a:
                    e6:20:54:cc:46:f0:c7:e9:82:4f:5e:54:17:56:7a:
                    74:c7:e5:d0:81:a3:f1:b5:81:8e:b7:bc:7c:be:52:
                    7a:e6:69:9e:83:a9:12:54:7a:49:1b:84:03:63:ed:
                    4b:eb:12:30:e6:58:37:5f:e8:b9:ea:92:a4:5f:c4:
                    82:03:63:6e:77:54:f3:bf:5b:d5:33:98:1c:48:aa:
                    3b:8d:ac:0d:a6:c6:b0:be:e3:64:db:a3:0e:d7:03:
                    6e:7d:37:07:16:c5:9f:43:66:61:63:9e:cd:16:f7:
                    d7:49:5b:07:90:9f:1c:c9:b9:86:ff:d2:96:69:ff:
                    dc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:EE:BD:05:61:46:45:5E:A8:F3:44:FA:B5:58:87:58:06:8D:AA:8A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/7BEEBD056146455EA8F344FAB5588758068DAA8A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.144.0/22
                IPv6:
                  2804:70f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270758

    Signature Algorithm: sha256WithRSAEncryption
         00:24:e8:b1:b9:76:9c:de:2a:3f:5c:df:c7:a8:82:a8:cf:0e:
         ec:e8:e9:5f:0f:88:0d:48:74:dc:b6:98:4c:4f:cd:10:7b:52:
         cd:50:29:3d:69:ee:f5:63:cf:56:06:28:0f:ab:27:54:29:ef:
         32:2b:b4:e6:95:9c:8a:36:1d:c0:39:34:c8:3f:0c:74:b8:a5:
         a1:cc:bf:a0:45:08:52:e8:e6:26:f1:05:b4:f1:2f:1a:f9:c0:
         e0:b4:12:64:25:80:aa:34:ff:93:b1:0a:62:0c:d2:2d:32:00:
         57:11:37:82:b6:b1:a8:42:54:65:8e:5a:a8:cd:19:c6:9a:b2:
         6d:48:42:cc:26:fb:f0:9b:4c:9d:4e:a8:0e:44:ab:93:15:a5:
         e8:bc:a0:e7:28:fa:35:e6:56:96:31:a8:34:19:7b:1a:7a:fb:
         8f:92:40:0f:47:a5:3c:a5:fc:54:97:70:32:22:21:48:0f:b6:
         ad:60:e2:6e:37:a2:16:69:5a:e2:22:af:81:aa:7f:d6:d2:d2:
         73:99:e5:77:3e:5f:a4:00:51:44:57:11:f0:e1:e9:c9:44:32:
         df:42:9d:f4:ba:cb:ef:24:32:06:42:d8:dd:90:09:6f:18:c8:
         ff:eb:b1:88:24:9b:45:3b:8a:1d:20:75:8b:ad:dc:8f:5c:9e:
         e8:7a:b0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----