This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/998C075E7A590DD191A410E239E80D3BF1F7AAC4.cer
File:                     998C075E7A590DD191A410E239E80D3BF1F7AAC4.cer (raw, json)
Hash identifier:          ESG/qPU6s3T7anS1gZ28AIE5wjUPhz3wWY2cy1+p7Cg=
Subject key identifier:   99:8C:07:5E:7A:59:0D:D1:91:A4:10:E2:39:E8:0D:3B:F1:F7:AA:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5E6319E02CC716D08533F3C44640F741A0CC5A4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/998C075E7A590DD191A410E239E80D3BF1F7AAC4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Oct 2025 12:51:24 +0000
Certificate not after:    Mon 19 Oct 2026 12:56:24 +0000
Subordinate resources:    AS: 267566
                          IP: 45.70.64.0/22
                          IP: 2804:4360::/32
Validation:               Failed, certificate revoked on Sat 25 Oct 2025 14:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:63:19:e0:2c:c7:16:d0:85:33:f3:c4:46:40:f7:41:a0:cc:5a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 20 12:51:24 2025 GMT
            Not After : Oct 19 12:56:24 2026 GMT
        Subject: CN=998C075E7A590DD191A410E239E80D3BF1F7AAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:3d:0a:2f:e2:2d:05:63:a0:1c:03:bd:ed:
                    64:3b:7f:da:a9:25:87:ce:d3:42:6a:4f:ad:88:54:
                    27:f7:5f:4c:78:6a:2a:80:1d:f4:3c:6c:fe:1a:ac:
                    3a:db:95:cb:1c:4a:d4:d5:77:e4:af:82:89:e0:2b:
                    1e:fc:cf:d9:7e:d1:35:c5:62:78:25:e8:54:32:60:
                    92:47:c0:7f:11:5d:d9:2b:d4:2f:21:8c:e4:5c:d6:
                    ee:7d:6f:b3:f1:af:72:60:98:8a:c5:47:3a:fd:c9:
                    d9:48:c9:8e:5d:2c:9a:b5:74:8f:08:76:ba:b1:1a:
                    43:52:62:c9:e4:57:83:f3:bf:b6:22:3e:ca:bc:cd:
                    96:ec:ad:df:a1:4c:43:1c:cd:11:67:42:47:ad:1c:
                    5c:64:a2:8c:ed:b3:40:0d:66:e4:bb:69:d9:e6:fa:
                    a6:55:e0:29:e7:59:a5:94:f7:85:2c:b7:91:86:e7:
                    ec:d9:6d:13:15:26:55:ee:9a:86:b2:b4:91:d2:2b:
                    0e:80:70:69:87:43:8f:c0:41:13:19:39:c5:bf:55:
                    ff:6e:c7:2b:c0:01:35:f0:ae:1f:bd:73:8a:6d:aa:
                    da:fc:5a:62:10:7a:57:ee:7d:aa:a8:90:6f:e8:96:
                    6f:e5:5e:89:72:93:4d:a9:69:13:6b:ee:c6:62:61:
                    a0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:8C:07:5E:7A:59:0D:D1:91:A4:10:E2:39:E8:0D:3B:F1:F7:AA:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/998C075E7A590DD191A410E239E80D3BF1F7AAC4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.64.0/22
                IPv6:
                  2804:4360::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267566

    Signature Algorithm: sha256WithRSAEncryption
         b4:67:c8:81:27:85:8f:85:2f:84:b6:e5:28:6e:a3:b7:ad:e5:
         08:d7:04:82:5b:5b:a2:74:30:36:52:c6:7d:15:c6:43:73:ee:
         69:aa:96:9b:36:05:5f:f7:bd:ef:c2:62:c6:6f:1a:ec:a6:55:
         36:73:c5:85:ba:65:e6:72:2c:de:eb:0a:b9:04:ee:ce:75:3a:
         dc:dd:56:e1:af:fe:65:3f:61:7e:c7:2f:0c:e6:59:42:25:83:
         87:e7:58:9f:44:a5:05:6c:a6:97:ef:9d:96:75:a3:05:57:ef:
         a7:c6:af:ab:fd:99:5e:af:c8:86:ff:8f:6e:9b:b8:26:37:14:
         96:96:2e:54:ed:f3:73:a6:66:73:51:e7:f5:ac:59:8c:6d:7b:
         47:8a:95:63:c1:66:bd:5d:e8:57:73:6e:c5:7a:ba:b3:e5:a8:
         03:ee:7a:7f:8d:86:62:71:de:95:9b:9e:f8:e8:2c:5f:1b:6e:
         3f:bd:8d:53:ac:af:78:03:4d:34:4f:31:fc:f8:a2:74:bf:9a:
         f1:17:d1:77:67:76:f9:02:dd:23:09:80:72:2d:6a:81:84:1f:
         84:8b:8c:c2:ca:2e:1b:e3:d8:93:ba:37:e6:f0:e8:f5:9e:06:
         d0:18:88:17:31:4f:fe:55:1a:c6:9a:71:f7:13:b3:9c:f7:d9:
         1e:0b:37:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----