This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/933BCEC9EF3E6838B525214C2D8A2C537C80D35C.cer
File:                     933BCEC9EF3E6838B525214C2D8A2C537C80D35C.cer (raw, json)
Hash identifier:          8mZxwNjhnmaZs8Unhs2hq1zHOtcfza+A70IbWxF3AAs=
Subject key identifier:   93:3B:CE:C9:EF:3E:68:38:B5:25:21:4C:2D:8A:2C:53:7C:80:D3:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B537805AE9E2C212E6BE6EEDA08A7CEFD705D94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9qk9bBfSPZ49L1hmcj9LawokW5gtBCovDsKAJqsu9ujf/0/933BCEC9EF3E6838B525214C2D8A2C537C80D35C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9qk9bBfSPZ49L1hmcj9LawokW5gtBCovDsKAJqsu9ujf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Apr 2025 16:27:04 +0000
Certificate not after:    Thu 23 Apr 2026 16:32:04 +0000
Subordinate resources:    AS: 262886
                          IP: 177.23.0.0/21
Validation:               Failed, certificate revoked on Sun 05 Oct 2025 23:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:53:78:05:ae:9e:2c:21:2e:6b:e6:ee:da:08:a7:ce:fd:70:5d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 16:27:04 2025 GMT
            Not After : Apr 23 16:32:04 2026 GMT
        Subject: CN=933BCEC9EF3E6838B525214C2D8A2C537C80D35C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:d1:e0:a7:a6:0a:8c:50:a5:27:80:83:28:
                    4d:de:05:85:27:15:9b:c5:50:08:b4:e4:81:82:b1:
                    95:d4:84:d2:71:34:5c:14:25:e9:57:4e:48:09:69:
                    c9:a1:3a:f7:ba:d4:3a:a4:eb:d0:2f:56:9a:3e:22:
                    e1:c0:ad:06:b0:d1:5a:de:73:88:15:8a:ac:27:ff:
                    ee:e3:23:8f:cb:34:0a:84:7e:b0:49:80:31:26:53:
                    e7:dd:a8:9e:68:3c:4b:ce:06:d3:05:fc:06:fd:ed:
                    28:65:32:2b:ba:07:3c:6f:00:53:37:fa:3d:88:47:
                    85:c8:94:55:9c:ff:2f:8c:92:18:f7:2d:be:ea:00:
                    4b:98:96:f3:67:0e:e6:00:4d:66:91:0b:47:f3:f4:
                    bf:4a:41:ce:d4:d2:e9:50:44:a7:34:2a:02:db:c5:
                    1f:56:52:a9:37:33:f4:58:83:46:a2:c3:6d:ff:76:
                    77:a6:3b:7d:89:5e:66:c5:54:fa:68:8b:cc:7f:c6:
                    01:e1:17:71:5a:59:6f:b2:3d:df:d4:86:61:4b:c8:
                    0f:79:fb:e7:4f:4d:e7:57:60:2a:91:f7:73:47:49:
                    23:af:95:ac:f8:94:be:b7:0a:9e:4d:dc:48:f5:61:
                    82:51:9b:38:39:dc:c8:42:fc:42:79:f6:e4:71:19:
                    02:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:3B:CE:C9:EF:3E:68:38:B5:25:21:4C:2D:8A:2C:53:7C:80:D3:5C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9qk9bBfSPZ49L1hmcj9LawokW5gtBCovDsKAJqsu9ujf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9qk9bBfSPZ49L1hmcj9LawokW5gtBCovDsKAJqsu9ujf/0/933BCEC9EF3E6838B525214C2D8A2C537C80D35C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.0.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262886

    Signature Algorithm: sha256WithRSAEncryption
         74:39:47:d0:61:40:d3:2f:97:9f:23:d7:2d:24:ba:3a:fa:92:
         7c:63:15:9f:3e:53:f9:25:5f:72:09:c7:89:cf:16:46:bc:54:
         97:19:09:bb:c3:c5:c5:80:4e:fe:5b:e9:c0:55:50:4e:c8:41:
         dd:aa:81:d3:58:f9:0f:0b:f2:44:f1:f6:aa:b3:2b:7e:cb:6a:
         8a:20:32:40:ae:ff:4c:8b:42:d4:50:44:ed:45:71:95:bd:61:
         20:fa:d5:0e:c6:22:3a:19:e4:6c:7e:6b:68:4a:f4:d2:f1:65:
         73:c3:03:5e:f4:46:b5:0a:0e:7d:81:63:f5:ef:28:bd:8a:29:
         01:ca:7c:7d:2e:fc:03:79:a6:6a:81:43:b2:ba:82:5f:ed:80:
         98:ba:46:5e:3e:67:48:ed:9a:e2:f0:9c:93:96:ee:c2:f1:57:
         e9:5b:1c:7d:ff:e6:8f:08:0a:f1:26:48:9c:87:30:27:50:f9:
         3e:45:22:d6:4d:93:e9:a8:18:9b:01:8e:b7:fa:84:05:12:7e:
         13:74:54:23:ca:e7:65:97:46:b9:0f:27:57:b1:ad:d5:85:0d:
         e1:25:93:34:c0:37:7e:c6:96:d1:5e:5e:2a:a0:73:d8:04:d0:
         68:22:39:a6:18:27:73:2b:34:fb:09:7e:29:03:5a:7b:7b:04:
         04:65:b3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----