This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.cer
File:                     BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.cer (raw, json)
Hash identifier:          W2Je86aePn35jt38fgpl3rkUCLR9beeERbh22/RDSkQ=
Subject key identifier:   BA:06:8D:58:46:A4:AF:59:66:3B:C8:8C:A7:8A:ED:0F:7F:45:CC:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       262F728181344C135D3295908F5E1983941A8220
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 May 2025 18:23:19 +0000
Certificate not after:    Fri 15 May 2026 18:28:19 +0000
Subordinate resources:    AS: 53075
                          IP: 177.93.192.0/19
                          IP: 186.194.16.0/20
                          IP: 187.94.16.0/20
                          IP: 2804:910::/32
Validation:               Failed, certificate revoked on Sat 25 Oct 2025 16:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2f:72:81:81:34:4c:13:5d:32:95:90:8f:5e:19:83:94:1a:82:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 18:23:19 2025 GMT
            Not After : May 15 18:28:19 2026 GMT
        Subject: CN=BA068D5846A4AF59663BC88CA78AED0F7F45CCD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:c8:4c:18:8b:68:3f:4f:9a:7b:b3:fa:9e:
                    36:90:f4:4f:d9:2c:2c:45:84:eb:96:c6:a5:65:36:
                    f0:d2:53:b2:7b:1c:21:01:07:3c:6b:c7:4f:f2:d2:
                    30:03:2d:c3:fe:db:be:cd:e6:f5:e8:93:41:4e:7e:
                    36:d6:78:93:38:74:29:c7:33:56:68:6e:a0:d2:78:
                    23:fd:1e:16:c3:17:e7:94:63:e2:f0:92:fc:0b:36:
                    3e:2f:9c:95:89:56:a6:12:71:ce:8c:29:8b:10:a3:
                    d3:0f:ad:dd:b3:99:e0:04:a1:de:af:fb:2d:fe:d5:
                    5e:d4:e2:bc:fc:32:6e:3f:7c:52:42:49:23:45:94:
                    73:87:9b:28:39:a4:dd:ad:99:79:91:c1:cc:fc:4c:
                    4d:9d:12:5e:24:a6:61:a1:34:a5:5f:b6:3e:8b:e6:
                    83:6f:da:81:82:59:1c:46:be:33:6e:66:bc:e0:5e:
                    ca:37:ec:e6:80:0b:e5:29:2e:27:ff:e2:5e:77:f5:
                    fe:46:ef:99:fa:a0:69:98:1d:26:d5:4e:74:d2:e3:
                    f9:74:9f:4a:54:15:ca:78:aa:77:2f:e9:69:bc:73:
                    ae:80:bb:5c:1c:3c:81:c9:7d:71:2c:97:11:da:35:
                    b7:79:c4:5f:fd:14:48:9b:01:3f:2c:24:c3:01:b7:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:06:8D:58:46:A4:AF:59:66:3B:C8:8C:A7:8A:ED:0F:7F:45:CC:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.192.0/19
                  186.194.16.0/20
                  187.94.16.0/20
                IPv6:
                  2804:910::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53075

    Signature Algorithm: sha256WithRSAEncryption
         35:9b:8b:62:b3:9f:76:3d:c8:ea:69:d4:99:b2:ec:44:4a:c8:
         6a:60:b3:f3:59:5c:69:0f:cc:4b:d0:66:09:22:f0:0c:2b:2c:
         01:54:50:fe:52:81:32:5f:ca:9b:25:ce:5d:72:8f:78:d9:04:
         82:9d:80:67:40:61:d1:72:5a:96:68:5b:08:08:16:e9:44:0f:
         69:5f:c9:6d:df:2f:21:90:c2:33:d7:9e:4a:59:d7:5a:98:77:
         1a:60:a9:89:e7:a5:29:3a:00:03:ad:bc:c2:45:ca:98:d9:89:
         fc:6f:87:69:35:90:f0:f0:40:86:6d:89:e7:7c:3b:ca:a6:48:
         e2:fe:df:10:c8:92:71:f4:35:d0:ed:e6:e5:5d:4a:87:77:70:
         ff:7c:d9:9e:9a:41:bc:cb:f5:38:c5:6a:0d:13:80:2b:9a:a6:
         58:d6:44:64:4f:d7:b5:34:e8:b3:62:47:32:d8:34:b2:4f:c5:
         08:c5:5e:6b:7a:a5:e4:b9:ff:5a:c6:90:54:d9:a4:6b:7a:38:
         71:94:8c:a6:e5:52:ec:72:10:4c:16:76:76:46:2d:60:e5:06:
         8a:e8:a7:38:46:4e:29:f9:53:60:4f:90:ac:8e:fa:62:cb:21:
         c1:e8:e4:4f:04:43:92:82:05:0a:2a:c9:03:38:1d:9f:4f:ab:
         c3:ae:5b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----