This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.cer
File:                     BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.cer (raw, json)
Hash identifier:          M5TYn0XoOTWvHqxuPjY+2a4lWXz9Gq84130Lp+URAf0=
Subject key identifier:   BA:9C:8A:E4:CF:CE:7D:90:0B:77:A3:2A:AE:8A:B5:49:D3:01:42:6F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       123166616EE7B9166C950E252FC1E03D596C3BF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1/BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Aug 2025 13:42:19 +0000
Certificate not after:    Wed 12 Aug 2026 13:47:19 +0000
Subordinate resources:    AS: 268258
                          IP: 45.237.8.0/22
                          IP: 2804:4e64::/32
Validation:               Failed, certificate revoked on Wed 13 Aug 2025 13:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:31:66:61:6e:e7:b9:16:6c:95:0e:25:2f:c1:e0:3d:59:6c:3b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 13 13:42:19 2025 GMT
            Not After : Aug 12 13:47:19 2026 GMT
        Subject: CN=BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:74:d8:e3:29:fe:0c:2a:7e:4c:7b:06:d8:
                    c7:4d:34:1f:8c:66:ad:b7:65:c0:07:37:76:21:bd:
                    b1:bd:04:f9:27:b1:98:94:28:39:a9:1a:d3:f9:84:
                    0f:06:ee:46:a3:5f:e9:bb:f3:94:15:f5:98:a9:eb:
                    83:0d:06:f8:7d:3d:19:f3:d0:2a:cb:e6:81:c5:8b:
                    8f:d0:f7:1e:68:6e:45:9e:12:d5:da:5c:8b:87:97:
                    aa:16:3f:bb:39:ac:ae:1e:6c:40:cc:5f:13:ab:91:
                    bc:16:1f:89:a9:fd:7c:b5:f5:68:dd:fb:67:69:4e:
                    8d:46:9b:6b:a7:f2:a6:ab:30:4a:a8:ca:86:83:91:
                    e0:1b:12:df:bc:e6:8c:27:ac:93:76:8c:6f:4d:25:
                    99:d9:ce:91:34:ec:8b:4e:27:14:35:1b:2e:c4:2d:
                    59:b5:37:72:df:ce:c2:61:48:5d:90:16:e0:b9:7e:
                    dd:4e:90:c4:9d:f8:55:06:af:6e:7d:94:84:0e:c7:
                    f4:1b:20:47:6f:e8:d2:8d:1f:af:45:c4:10:6f:da:
                    98:fa:0f:ff:f6:7b:89:fe:4c:02:f2:2d:69:0e:ba:
                    1e:8f:65:2f:99:24:5a:ca:36:e5:c8:50:28:d9:e2:
                    00:fd:e3:5f:6b:e6:6c:a6:bc:d4:50:f6:ce:f6:a1:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:9C:8A:E4:CF:CE:7D:90:0B:77:A3:2A:AE:8A:B5:49:D3:01:42:6F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1/BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.8.0/22
                IPv6:
                  2804:4e64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268258

    Signature Algorithm: sha256WithRSAEncryption
         95:12:c6:91:aa:71:39:88:9b:82:6c:9a:6d:8c:43:4e:97:21:
         cb:cf:6e:97:cc:ae:f0:c8:21:ca:fc:ab:5b:13:da:f7:c5:48:
         57:c3:33:74:b1:3a:99:44:86:89:ec:55:ae:e5:09:14:ca:73:
         87:fa:e8:7b:ff:ca:61:ee:ed:ed:74:c2:ba:9e:a5:6d:4e:bc:
         11:71:d2:e8:b6:e2:1c:42:cb:6d:ba:d4:38:0d:fc:ff:4f:6f:
         1a:4f:9a:a6:d7:a0:be:74:4c:0b:58:02:73:b8:83:53:28:ff:
         e7:81:75:e6:f0:13:7f:58:3d:11:3d:ed:5a:4c:36:30:d3:68:
         f9:f3:fc:52:50:6f:53:38:1b:a1:2c:66:8b:0f:f8:3c:6e:f9:
         2d:4c:ce:5f:17:f4:48:8a:fb:a2:b4:6c:94:50:97:f6:e8:fa:
         a1:98:52:a5:f3:39:90:91:ba:ca:f6:58:39:02:34:5e:64:2b:
         97:f1:4c:52:64:2f:47:c6:04:0f:c2:49:ec:08:d2:d8:cf:17:
         67:a0:c2:93:a6:a9:8d:df:b1:f0:b1:d1:47:7c:67:c4:4d:07:
         fe:88:33:e5:bf:f6:e5:34:d0:0d:f6:a8:42:6e:fb:e0:f4:34:
         c0:83:ef:79:b6:50:21:95:01:5a:8d:12:56:60:46:f3:bf:9f:
         7f:bf:ae:e3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUEjFmYW7nuRZslQ4lL8HgPVlsO/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA4MTMxMzQyMTlaFw0yNjA4MTIxMzQ3MTlaMDMxMTAvBgNV
BAMTKEJBOUM4QUU0Q0ZDRTdEOTAwQjc3QTMyQUFFOEFCNTQ5RDMwMTQyNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CnTY4yn+DCp+THsG2MdNNB+M
Zq23ZcAHN3YhvbG9BPknsZiUKDmpGtP5hA8G7kajX+m785QV9Zip64MNBvh9PRnz
0CrL5oHFi4/Q9x5obkWeEtXaXIuHl6oWP7s5rK4ebEDMXxOrkbwWH4mp/Xy19Wjd
+2dpTo1Gm2un8qarMEqoyoaDkeAbEt+85ownrJN2jG9NJZnZzpE07ItOJxQ1Gy7E
LVm1N3LfzsJhSF2QFuC5ft1OkMSd+FUGr259lIQOx/QbIEdv6NKNH69FxBBv2pj6
D//2e4n+TALyLWkOuh6PZS+ZJFrKNuXIUCjZ4gD9419r5mymvNRQ9s72oQBhAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6nIrkz859kAt3
oyquirVJ0wFCbzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0ho
aWprVWZjQjc1ZUxvbUdFZ1hveUhkWDJQeWlDMUFaOG5GVGNuQm1mQlQvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNI
aGlqa1VmY0I3NWVMb21HRWdYb3lIZFgyUHlpQzFBWjhuRlRjbkJtZkJULzEvQkE5
QzhBRTRDRkNFN0Q5MDBCNzdBMzJBQUU4QUI1NDlEMzAxNDI2Ri5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLe0IMA0EAgACMAcDBQAoBE5kMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQX4jANBgkqhkiG9w0BAQsFAAOCAQEAlRLGkapxOYibgmya
bYxDTpchy89ul8yu8MghyvyrWxPa98VIV8MzdLE6mUSGiexVruUJFMpzh/roe//K
Ye7t7XTCup6lbU68EXHS6LbiHELLbbrUOA38/09vGk+aptegvnRMC1gCc7iDUyj/
54F15vATf1g9ET3tWkw2MNNo+fP8UlBvUzgboSxmiw/4PG75LUzOXxf0SIr7orRs
lFCX9uj6oZhSpfM5kJG6yvZYOQI0XmQrl/FMUmQvR8YED8JJ7AjS2M8XZ6DCk6ap
jd+x8LHRR3xnxE0H/ogz5b/25TTQDfaoQm774PQ0wIPvebZQIZUBWo0SVmBG87+f
f7+u4w==
-----END CERTIFICATE-----