This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer
File:                     9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer (raw, json)
Hash identifier:          HfQYOwAbG+wvD8xqXo044Qock8rZRpMHRLACsERLL3A=
Subject key identifier:   9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53AEF076DC526FD94E6D8FD47A48841D5718C5C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Jun 2025 17:53:31 +0000
Certificate not after:    Mon 01 Jun 2026 17:58:31 +0000
Subordinate resources:    AS: 271254
                          IP: 45.232.84.0/22
                          IP: 2804:789c::/32
Validation:               Failed, certificate revoked on Fri 05 Sep 2025 08:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ae:f0:76:dc:52:6f:d9:4e:6d:8f:d4:7a:48:84:1d:57:18:c5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  2 17:53:31 2025 GMT
            Not After : Jun  1 17:58:31 2026 GMT
        Subject: CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:f2:e5:ca:a5:9c:9e:a3:3a:b7:24:b2:b5:
                    e0:ef:d4:5d:b8:ff:35:79:9f:00:2b:f7:2c:a5:af:
                    79:c0:17:16:7a:4f:62:13:f2:5e:c1:5b:0a:80:3d:
                    c5:a3:f3:94:8a:ea:e2:0d:1e:47:1c:7a:f0:ce:3d:
                    de:f6:b7:93:3f:4a:65:de:43:e8:78:f0:da:64:10:
                    2a:32:e3:4f:46:59:2e:49:70:85:7c:df:e8:05:95:
                    8f:10:78:44:28:1d:27:2f:34:8a:38:66:bc:e6:d8:
                    a8:4c:08:d7:24:35:92:5b:ed:93:59:02:74:93:e1:
                    e2:9a:a9:9e:91:43:95:5e:fd:5f:ba:40:38:22:20:
                    ff:9e:3a:2b:1e:b3:1c:39:1a:43:7e:bf:fb:5a:99:
                    30:58:3e:4a:ff:c3:e9:4f:57:35:00:17:c3:ff:61:
                    10:81:fd:db:b1:e5:2d:1b:42:ca:e6:94:7c:1b:02:
                    77:1f:60:0b:6f:84:4f:a2:d1:8e:a6:89:ac:3b:e2:
                    01:d8:81:10:99:d4:db:7b:d3:a0:08:8d:59:d0:3d:
                    c4:36:36:a8:74:28:39:a1:2b:26:b5:6c:44:07:e2:
                    85:3a:a2:ad:5d:cc:e4:d7:6b:ef:ee:be:86:6c:de:
                    ec:86:2b:d3:94:3a:e7:26:dd:b9:65:bb:99:ea:4c:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.84.0/22
                IPv6:
                  2804:789c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271254

    Signature Algorithm: sha256WithRSAEncryption
         5e:cd:46:5a:c7:2e:18:1b:79:40:e4:3e:f7:55:ac:f5:1f:92:
         6b:b1:42:0a:9e:80:57:d1:cf:a3:8f:19:79:1f:12:7e:9a:7d:
         fa:49:1a:f8:1a:64:c5:dc:ff:18:3c:48:8a:a8:47:87:d7:f7:
         25:03:d5:4e:85:ff:ec:28:f1:f8:a8:3a:21:ff:32:72:47:64:
         19:6a:de:85:fe:19:be:c6:07:88:db:de:fa:4d:7f:43:24:30:
         7c:ca:aa:11:bd:7e:7c:f9:96:89:1a:ca:45:03:fa:51:00:09:
         64:60:e2:b7:42:30:57:d0:7c:7e:c0:1a:bc:d7:35:7a:76:05:
         3d:53:39:8f:23:a3:83:01:e3:a5:04:bd:8c:f5:d1:81:76:9e:
         af:08:b0:69:9e:b1:55:fc:50:a2:ba:27:c4:1c:f8:f3:22:d5:
         8f:96:cb:66:9c:79:25:69:66:ec:12:0a:4d:6f:82:03:a2:30:
         6f:c0:c0:b6:03:fe:47:4d:ab:4b:6d:b7:fd:16:ce:da:ec:f2:
         d6:54:a0:db:f1:ea:2d:63:1d:7b:14:82:33:4e:f0:ee:68:e7:
         b5:de:f0:94:4d:5d:a0:77:38:5c:41:37:7a:99:60:49:b2:3e:
         81:dd:cf:a4:d4:76:92:2b:13:30:96:ad:00:c3:d9:96:9e:89:
         9a:03:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----