This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
File:                     9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer (raw, json)
Hash identifier:          I9d9S3B1HiMd3ewME6cqD5KySyAjIeLGeNQ9WAattK8=
Subject key identifier:   9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3134DD65222F9DB060C4BBFC756D113740E3CB4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Jul 2025 02:27:11 +0000
Certificate not after:    Wed 29 Jul 2026 02:32:11 +0000
Subordinate resources:    AS: 265240
                          IP: 168.0.0.0 -- 168.0.2.255
                          IP: 2804:2cbc::/32
Validation:               Failed, certificate revoked on Thu 23 Oct 2025 08:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:34:dd:65:22:2f:9d:b0:60:c4:bb:fc:75:6d:11:37:40:e3:cb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 30 02:27:11 2025 GMT
            Not After : Jul 29 02:32:11 2026 GMT
        Subject: CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:43:d3:55:7b:c0:19:ee:45:8a:b5:91:29:82:
                    f9:f0:08:93:9a:01:4c:09:d7:fa:ef:19:67:3f:53:
                    0a:05:50:13:d4:0e:a0:a5:9c:be:e9:23:1b:2a:f9:
                    4d:15:f6:72:c1:f9:ef:f9:7c:dc:50:f8:98:07:77:
                    43:6a:45:71:2d:b0:3b:32:96:6a:68:f9:e6:13:e5:
                    69:0a:f4:3c:a7:da:cb:23:fd:d3:91:87:00:8c:bf:
                    07:d6:57:62:1a:8b:9e:c7:c7:16:66:f0:d2:12:c6:
                    ff:5a:45:b7:e0:9d:dc:41:0c:e6:61:8e:15:1d:e7:
                    ee:3c:1b:ec:a8:37:a5:7c:23:ef:bc:8c:51:40:1a:
                    75:af:01:f3:7d:8b:53:a0:1e:07:83:fa:03:c5:44:
                    e2:b9:da:de:46:df:0e:87:9e:b6:bf:a5:77:4a:74:
                    9b:b0:b2:0e:c6:3b:42:46:67:88:19:5b:8d:f3:55:
                    97:2e:ae:d1:60:f9:cf:d1:fc:ee:a3:59:05:b7:43:
                    7a:87:b1:0b:57:a0:ae:d5:c4:ea:94:a7:3a:3e:83:
                    06:da:0c:01:6d:06:73:b4:f3:ed:13:83:91:c9:29:
                    d9:0b:2a:6e:03:2a:b3:dd:77:dc:fb:bd:c0:71:3d:
                    7f:42:42:2a:d9:b8:fc:65:b4:e0:dd:d6:db:34:99:
                    55:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.0.0-168.0.2.255
                IPv6:
                  2804:2cbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265240

    Signature Algorithm: sha256WithRSAEncryption
         5a:fb:13:f5:3b:a5:cd:de:84:fd:c1:d6:1a:ec:3d:9f:bc:8c:
         61:b3:c3:b1:b6:ad:10:11:8e:6f:3d:e5:85:7e:1f:05:87:a5:
         8d:0e:b5:13:9e:9f:46:a8:fc:00:ea:a6:66:5b:58:8f:d9:e4:
         84:83:b9:20:03:93:15:3b:82:9a:b6:1f:b5:8c:15:8c:78:48:
         1b:45:08:e9:f2:70:b9:21:cd:44:b1:c0:c6:3b:c0:b9:7f:e1:
         6d:2e:9f:65:49:68:0c:bf:c3:91:b4:3f:0d:11:d2:06:a7:3e:
         b9:bb:49:24:30:bd:fe:2b:d0:3a:fa:68:58:f0:02:5a:0f:0e:
         a6:14:5e:2e:7a:0f:b6:3d:97:d2:7b:f2:b8:6e:e6:7a:3d:60:
         11:c2:2f:51:2f:9e:92:28:9a:72:9d:e7:56:d8:46:e8:c7:04:
         93:c6:8b:ff:d8:83:df:45:3d:fd:d8:9e:fe:9d:e3:97:ae:86:
         41:f2:f7:49:b9:0e:9b:31:11:24:18:d9:8e:ce:26:c1:65:ab:
         87:70:bc:f4:34:ed:c0:f3:6f:e9:5d:39:de:b9:78:88:bb:13:
         9a:29:57:09:f6:b7:41:d6:5a:f9:ba:ec:33:87:f7:0a:0b:85:
         68:54:26:38:e7:aa:20:9d:31:02:fd:d5:da:51:bc:f1:b1:66:
         8d:0b:07:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----