This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7D927A1F87049C088D1AFDD59FE1D9EA1CF79D18.cer
File:                     7D927A1F87049C088D1AFDD59FE1D9EA1CF79D18.cer (raw, json)
Hash identifier:          sJ+YFDtqFH3YMtSGBBH4yaQQmrHtWECzxGY9H7ZHXLI=
Subject key identifier:   7D:92:7A:1F:87:04:9C:08:8D:1A:FD:D5:9F:E1:D9:EA:1C:F7:9D:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5941DD32CD9AD3B91CFDC7D5C52EC6C637BF90F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/7D927A1F87049C088D1AFDD59FE1D9EA1CF79D18.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Jun 2025 02:58:41 +0000
Certificate not after:    Mon 15 Jun 2026 03:03:41 +0000
Subordinate resources:    AS: 270706
                          IP: 189.127.152.0/22
                          IP: 2804:701c::/32
Validation:               Failed, certificate revoked on Sun 13 Jul 2025 08:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:41:dd:32:cd:9a:d3:b9:1c:fd:c7:d5:c5:2e:c6:c6:37:bf:90:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 16 02:58:41 2025 GMT
            Not After : Jun 15 03:03:41 2026 GMT
        Subject: CN=7D927A1F87049C088D1AFDD59FE1D9EA1CF79D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d9:22:ff:e5:47:ee:2f:94:03:bd:6a:60:82:
                    ea:c0:d5:7a:ce:e7:01:eb:d1:43:08:82:0e:33:a4:
                    2c:eb:46:5e:32:81:af:66:d4:e2:d6:0e:dd:3d:b6:
                    0d:ea:23:d8:bf:81:16:0c:f2:96:40:7e:62:00:2c:
                    67:86:99:2c:52:8c:c6:44:84:d0:87:e2:d8:0f:77:
                    5b:c9:f3:91:d6:7a:ab:80:4f:cd:4c:45:42:eb:b7:
                    26:32:c3:c5:7e:93:a5:8d:aa:a3:53:08:6f:3a:05:
                    bc:18:77:47:b8:f7:76:24:30:f9:ea:05:28:03:11:
                    61:76:fa:64:1b:77:b3:cf:87:2e:be:3b:61:d5:0e:
                    14:04:86:f9:9e:01:47:94:51:d5:24:53:3d:02:01:
                    fa:15:ab:55:40:c0:99:b4:a9:f4:57:8b:2c:92:08:
                    95:0c:ff:ff:01:19:59:73:4c:94:19:bc:85:18:fa:
                    89:b5:03:79:fe:46:3c:cc:a7:2d:ba:fe:3f:3e:b7:
                    69:d7:60:d4:8d:b3:79:5c:52:a5:6c:0a:06:4f:ec:
                    9c:c8:f1:00:67:d5:31:2f:e5:39:8c:a3:5c:20:8e:
                    04:5c:e7:2b:80:40:91:34:cc:c6:bc:9f:93:20:2a:
                    23:c6:a7:23:ce:4a:7f:e8:cc:5e:f2:b1:85:05:90:
                    a5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:92:7A:1F:87:04:9C:08:8D:1A:FD:D5:9F:E1:D9:EA:1C:F7:9D:18
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/7D927A1F87049C088D1AFDD59FE1D9EA1CF79D18.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.152.0/22
                IPv6:
                  2804:701c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270706

    Signature Algorithm: sha256WithRSAEncryption
         07:aa:19:6d:f3:9b:0c:ee:64:14:87:5b:ed:43:65:01:32:09:
         b0:33:7b:d2:c9:18:bc:0f:71:d3:90:c9:4d:5c:fb:5f:f8:93:
         a8:63:9b:b3:7a:d3:63:15:de:f4:ee:45:d7:32:56:bb:d3:ef:
         0b:81:39:f6:d2:d3:26:3e:99:24:c8:23:74:9d:42:4e:75:42:
         e9:f4:82:20:89:21:69:3e:c8:43:48:39:f0:2b:a6:52:0c:8e:
         16:ab:e2:a0:73:1d:13:17:01:7b:3d:c1:c7:20:95:a0:3e:8a:
         87:a6:21:b8:c6:a3:40:91:b3:e5:33:c0:cf:6b:0b:13:e8:28:
         9c:3b:87:38:14:32:03:7d:d7:24:52:68:73:a5:53:7c:33:e3:
         43:e9:4f:f9:47:72:01:90:51:59:f7:61:0a:b7:6a:93:6b:9a:
         df:e4:e1:9b:37:2b:c5:19:d0:14:02:34:e1:c7:fe:1a:18:e8:
         42:9b:45:85:32:c3:f7:1e:73:00:52:38:97:11:bb:f8:03:1a:
         2d:f0:d6:6f:81:aa:01:f7:b3:d8:48:b1:aa:38:94:7f:53:a1:
         dd:42:c7:fc:5c:94:5c:42:6a:c5:dd:41:3b:ad:4c:42:69:32:
         71:55:51:fe:b8:07:40:e5:f9:15:c9:4e:52:3a:40:a6:ed:a7:
         de:96:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----