This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.cer
File:                     82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.cer (raw, json)
Hash identifier:          By4d04TquteLfxUavq90ZlVFM4NwGiGZF9E/p2S/qlU=
Subject key identifier:   82:EF:E1:37:B6:D9:99:94:28:40:0B:1E:8C:0F:A5:C1:5F:8F:7C:9F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B522D287C706CC5F3A80DD33A424E56B5C051BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Apr 2025 16:06:51 +0000
Certificate not after:    Tue 07 Apr 2026 16:11:51 +0000
Subordinate resources:    AS: 270260
                          IP: 200.110.100.0/22
                          IP: 2804:6948::/32
Validation:               Failed, certificate revoked on Wed 29 Oct 2025 07:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:52:2d:28:7c:70:6c:c5:f3:a8:0d:d3:3a:42:4e:56:b5:c0:51:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  8 16:06:51 2025 GMT
            Not After : Apr  7 16:11:51 2026 GMT
        Subject: CN=82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:77:68:4e:27:9a:d0:36:39:26:f1:19:d4:
                    7b:41:7b:fd:64:18:e5:92:b9:8c:14:6f:ef:53:2e:
                    2f:5a:37:1e:74:68:b1:ef:5b:e5:a3:48:2d:b1:e5:
                    2c:1f:9e:b2:e8:dd:1c:e4:41:14:ba:bb:58:e9:0e:
                    9a:76:69:1f:e3:9a:f0:15:47:0e:db:9b:61:89:1d:
                    30:d0:f8:8b:93:9c:ba:31:d7:98:c4:5f:96:10:5a:
                    60:ab:de:37:55:ee:64:f0:7f:74:df:35:f7:07:ff:
                    1d:bb:23:57:a6:3b:f7:ee:2d:87:a6:0e:bd:c3:7d:
                    2e:ed:5e:ab:1d:74:94:77:87:17:93:20:3d:1b:45:
                    11:60:78:81:ff:76:39:32:04:ad:0c:1d:f6:d9:36:
                    eb:d6:ce:36:64:e8:90:51:e6:04:4b:80:c9:62:ce:
                    39:da:0c:b8:79:3f:1f:1a:3c:08:b7:22:68:6e:e6:
                    41:14:4b:19:92:35:c9:30:d0:95:fa:67:f6:7b:50:
                    86:f8:86:b9:78:0e:d3:1d:d6:31:1d:f2:3c:80:89:
                    38:ad:16:3e:10:09:6d:dd:13:7c:c0:9c:77:4e:ad:
                    a9:98:1a:87:90:af:78:9e:f5:22:af:7b:19:c3:25:
                    8c:a9:3b:5f:85:93:db:39:cf:f9:1f:75:cf:40:e7:
                    ec:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:EF:E1:37:B6:D9:99:94:28:40:0B:1E:8C:0F:A5:C1:5F:8F:7C:9F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.100.0/22
                IPv6:
                  2804:6948::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270260

    Signature Algorithm: sha256WithRSAEncryption
         7a:ea:2b:0c:f0:4c:a1:c1:b3:24:0f:53:6f:4c:7d:30:97:ab:
         0c:e6:20:bf:31:7d:55:a2:44:ec:94:bc:e7:1a:9a:39:25:96:
         87:b4:b5:25:a6:68:32:14:7d:d7:99:77:9e:6f:2f:c8:a0:72:
         26:00:75:a9:73:57:75:e3:e2:72:ac:41:6c:5f:43:31:cd:4f:
         6a:9a:df:10:7b:9d:a0:61:4b:cd:0e:92:47:b2:8e:38:79:5f:
         4b:85:55:e8:7e:8c:11:8f:88:a9:aa:eb:85:37:0e:ff:2c:01:
         b8:26:4f:89:87:89:e6:4b:33:76:58:54:c3:6a:3d:61:0c:d5:
         c9:ea:0f:70:8f:38:66:fb:4b:82:61:41:7c:ed:c3:ae:b6:63:
         68:79:04:56:c2:5e:5a:11:2d:8d:15:d2:cf:ce:60:3d:c4:d7:
         25:a2:70:e0:fb:c5:72:ea:a8:ef:b3:22:1b:d3:b4:25:6c:79:
         3b:ae:e9:e0:82:e8:06:fd:c1:95:2b:49:a7:02:74:14:e0:89:
         fc:c0:0e:9f:83:d6:3c:ed:cf:9c:4e:10:63:de:53:40:0f:c0:
         93:67:fe:3e:fd:b5:3b:7a:52:eb:dd:81:bd:c7:ae:fa:d6:39:
         4d:5b:63:f0:88:f7:3b:fa:93:b1:01:b9:a5:2c:b3:5c:d7:03:
         86:c5:b4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----