This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9B960A59EA8645B0F7C4C5D1C2D1EC8D938DAC1D.cer
File:                     9B960A59EA8645B0F7C4C5D1C2D1EC8D938DAC1D.cer (raw, json)
Hash identifier:          EtPR0fgjV2v6Zq6GyyNugU0tExHVp+5f2TOqr4saWNs=
Subject key identifier:   9B:96:0A:59:EA:86:45:B0:F7:C4:C5:D1:C2:D1:EC:8D:93:8D:AC:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       78AD9EA17E01AA41946F6AE45C6436D07AA89A1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/9B960A59EA8645B0F7C4C5D1C2D1EC8D938DAC1D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Apr 2025 12:48:12 +0000
Certificate not after:    Wed 29 Apr 2026 12:53:12 +0000
Subordinate resources:    AS: 274663
                          IP: 2804:91c4::/32
Validation:               Failed, certificate revoked on Thu 07 Aug 2025 07:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ad:9e:a1:7e:01:aa:41:94:6f:6a:e4:5c:64:36:d0:7a:a8:9a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 12:48:12 2025 GMT
            Not After : Apr 29 12:53:12 2026 GMT
        Subject: CN=9B960A59EA8645B0F7C4C5D1C2D1EC8D938DAC1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ca:6a:fd:5d:19:c2:6b:89:29:88:b2:be:e0:
                    18:0d:cd:52:cc:24:34:8c:77:a6:a7:34:75:db:0a:
                    b6:f6:7c:64:d5:c5:17:34:39:dc:c8:f6:42:98:ed:
                    f4:62:b8:0e:64:90:1b:cb:5a:35:5f:4a:ab:f5:26:
                    21:56:22:36:05:ce:7a:69:dd:38:df:ad:f4:bf:e8:
                    aa:f4:8d:74:20:b1:e4:96:70:5b:de:0f:c8:af:58:
                    3d:e5:c5:1a:18:12:70:7e:09:83:e7:f0:ec:b3:e4:
                    81:72:c1:b8:52:92:d9:ed:ca:c9:18:ea:c4:de:e1:
                    64:e6:6f:94:47:92:ae:ca:71:55:2e:74:9b:fa:7d:
                    a2:ab:35:9c:15:7f:c8:94:01:93:bf:d7:9f:ed:86:
                    09:57:34:8a:72:fe:21:4e:67:59:0e:47:a7:a8:3f:
                    3b:6c:55:65:6f:8d:ff:1e:ae:17:3f:e6:cb:7c:50:
                    6e:89:47:fe:7e:11:4f:fc:4b:37:a2:c1:51:04:ed:
                    8e:80:69:7d:77:e2:8b:80:f2:1f:63:fd:2d:2b:2c:
                    f5:8b:ac:0a:10:05:0c:8a:a5:4d:ea:e4:b4:0a:46:
                    16:36:47:c1:e8:66:40:8e:09:86:a0:14:66:a8:59:
                    82:0b:57:d0:9c:67:bd:c2:44:dc:83:3a:74:28:f6:
                    43:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:96:0A:59:EA:86:45:B0:F7:C4:C5:D1:C2:D1:EC:8D:93:8D:AC:1D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/9B960A59EA8645B0F7C4C5D1C2D1EC8D938DAC1D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274663

    Signature Algorithm: sha256WithRSAEncryption
         cf:64:93:84:96:ef:3f:12:2b:3e:a7:5e:13:46:77:86:78:1b:
         a1:f8:12:1c:d9:87:3d:ab:20:85:c3:26:4b:5b:91:95:e2:8e:
         b8:69:84:5a:8c:b5:20:a8:48:d7:e0:54:1a:5b:a5:bb:f1:e4:
         66:60:f2:05:39:cb:54:f3:32:83:c4:b8:df:8b:5e:28:f7:4f:
         aa:15:99:bd:cd:ce:29:b9:59:de:39:46:03:2c:de:41:1d:41:
         f4:2f:9f:f6:e6:a2:31:c3:46:82:cf:b3:bf:87:6a:98:dd:fb:
         51:d8:3b:1c:9b:bd:0a:53:b1:34:0f:e7:19:1b:fd:83:7a:6c:
         a3:02:fb:1c:22:6a:63:d1:05:ef:ba:6f:e9:b7:e5:4d:64:df:
         b6:a4:58:24:3e:c5:a0:f1:66:eb:66:36:d1:59:cf:db:5d:6f:
         a7:b9:d4:96:39:69:75:ab:27:01:81:ca:d7:fb:7d:57:a0:6c:
         64:63:b6:6b:f5:c4:be:c6:98:f5:ea:94:23:b8:e4:c7:7f:1a:
         b3:ee:dc:9b:ef:c3:15:61:9f:6c:a9:4b:b6:2f:ec:a4:ab:ae:
         1c:a9:55:52:86:d7:cc:c3:f4:3d:6f:cc:6d:38:d4:4a:15:37:
         47:a0:4b:43:4e:6d:ff:48:43:35:fc:03:04:43:b3:6e:bc:0f:
         9a:53:6f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----