This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.cer
File:                     9B57A6172822ADD9870A24E746B19FCFAD78E2E9.cer (raw, json)
Hash identifier:          Mn8aaY1Q1s2Szu3NBJ/xTjfNh0bayvfLm5ElvmqLmus=
Subject key identifier:   9B:57:A6:17:28:22:AD:D9:87:0A:24:E7:46:B1:9F:CF:AD:78:E2:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1726D94718251F16CC2F8EA421255A1CD30FA536
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 09:12:11 +0000
Certificate not after:    Fri 06 Mar 2026 09:17:11 +0000
Subordinate resources:    AS: 271459
                          IP: 179.0.64.0/22
                          IP: 2804:7bdc::/32
Validation:               Failed, certificate revoked on Wed 15 Oct 2025 11:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:26:d9:47:18:25:1f:16:cc:2f:8e:a4:21:25:5a:1c:d3:0f:a5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 09:12:11 2025 GMT
            Not After : Mar  6 09:17:11 2026 GMT
        Subject: CN=9B57A6172822ADD9870A24E746B19FCFAD78E2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:0b:3e:17:55:b3:80:4a:74:80:f7:5e:fc:
                    92:c4:ef:7d:36:4e:35:37:97:55:97:7f:72:bc:dd:
                    af:db:0f:c0:a6:2c:5f:42:f5:03:32:c5:c1:54:ee:
                    a9:dd:4a:f9:4f:92:ac:7b:39:ca:98:20:f4:d9:f3:
                    57:3c:ac:04:c1:0d:6b:99:c4:02:3d:79:00:88:28:
                    a5:4a:5c:15:c4:21:18:67:ea:31:4a:52:97:2a:b7:
                    65:b1:a8:fd:93:90:42:8e:32:6c:97:d7:64:8d:91:
                    44:9c:56:87:d4:e6:be:a6:a0:26:c4:0a:a7:02:4d:
                    b1:6d:cc:ab:5c:21:64:97:20:86:9d:d6:e4:54:b2:
                    68:a2:ef:68:50:77:26:da:3c:db:16:87:a3:d0:ff:
                    9d:d9:75:ce:bb:15:55:28:59:25:ab:cd:ad:66:91:
                    dd:a1:f0:03:0f:38:bb:6e:4e:24:4b:e5:14:eb:79:
                    a2:c0:df:43:db:74:4f:e6:4d:2e:73:26:77:88:56:
                    7d:ac:50:7c:d3:8d:e6:63:53:73:4c:f2:de:34:cb:
                    79:a4:cc:0e:41:85:a6:17:70:62:e4:2e:11:4a:05:
                    79:09:7d:42:f7:86:2b:d1:ee:44:3f:d2:f8:2c:6d:
                    bc:60:eb:36:f6:1c:01:91:eb:d7:6e:2d:94:e4:f9:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:57:A6:17:28:22:AD:D9:87:0A:24:E7:46:B1:9F:CF:AD:78:E2:E9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.64.0/22
                IPv6:
                  2804:7bdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271459

    Signature Algorithm: sha256WithRSAEncryption
         97:cc:10:ab:0a:2c:94:81:d7:82:11:cc:86:e5:e0:85:b3:52:
         e8:1d:2d:c2:1b:7d:be:8f:f1:50:22:8c:40:57:a4:f5:b5:ac:
         ba:46:d9:cc:8d:dd:67:85:cf:ee:58:a4:1f:3f:e6:72:40:26:
         e1:52:32:3d:47:47:9a:9d:6c:2e:13:62:91:fe:5c:83:f1:86:
         93:09:f0:42:ef:f2:b5:f2:59:9e:77:93:8f:a2:59:87:26:92:
         df:db:c6:25:a5:d1:80:7f:64:9c:04:71:42:3e:09:a2:dd:54:
         b6:17:c4:a2:6a:38:9a:14:70:6c:bc:17:68:5b:3e:a4:96:b0:
         a2:80:9d:f5:11:cc:91:f0:cc:4a:aa:48:9b:a4:b0:58:0e:5d:
         0b:79:8b:2a:a2:62:f0:d9:a6:f1:0a:59:0d:01:f8:9a:96:13:
         e7:10:38:19:59:76:bf:62:c2:2b:8a:bb:b9:d4:be:a3:96:7f:
         09:97:34:7c:4b:9f:4d:79:25:10:8f:4c:f5:db:0d:c7:f9:27:
         52:89:36:1d:ba:41:5d:82:bc:2d:ed:c7:a6:b1:e3:0d:53:0f:
         f3:f9:00:9d:84:45:78:83:67:7e:21:57:a5:ce:b0:16:c7:aa:
         26:95:b1:ef:98:c3:70:6e:aa:44:80:5e:e9:43:fe:07:57:60:
         e7:0c:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----