This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
File:                     BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer (raw, json)
Hash identifier:          xvzaTFRr1Kk14/dkLCedDNHMb5q+MaAep8EzyX+ryJ8=
Subject key identifier:   BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       317D35F4D9DADF8C951D1BAB23F75A01C6E2B447
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 May 2025 21:49:40 +0000
Certificate not after:    Fri 22 May 2026 21:54:40 +0000
Subordinate resources:    AS: 274726
                          IP: 2804:92a8::/32
Validation:               Failed, certificate revoked on Sat 14 Jun 2025 17:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7d:35:f4:d9:da:df:8c:95:1d:1b:ab:23:f7:5a:01:c6:e2:b4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 23 21:49:40 2025 GMT
            Not After : May 22 21:54:40 2026 GMT
        Subject: CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:4a:8a:d1:f1:eb:67:1d:db:43:6f:e1:7b:
                    3c:ed:a9:a3:e9:bd:78:db:9a:15:b7:30:9a:2d:95:
                    d5:cb:bd:63:67:fc:b1:9b:20:30:36:d2:82:0a:82:
                    5c:77:d5:81:f4:bb:23:3a:97:0e:85:2f:cf:f0:7a:
                    5c:66:13:38:3c:b1:79:6e:bc:02:e7:f7:04:00:0d:
                    22:82:17:fa:96:7d:2b:cb:1b:cb:48:b4:23:47:2d:
                    4f:b2:39:5e:d2:65:b0:4b:5c:04:2f:2b:49:c5:4f:
                    8e:37:92:d5:fe:0e:0a:11:7c:50:49:56:10:51:80:
                    cd:47:bf:1b:90:6e:ca:62:2d:21:28:14:93:65:51:
                    c2:82:85:f2:23:4c:15:ca:c4:e8:b4:f9:b2:56:ce:
                    5d:1e:5c:6b:c2:34:5e:9e:3c:bc:82:60:84:0e:14:
                    34:ce:90:dd:65:43:e8:65:8a:31:3c:3f:98:3a:42:
                    e3:2f:8c:c9:41:35:88:a5:f2:84:8a:05:eb:25:08:
                    09:0f:f8:a1:b8:2d:17:88:1f:04:84:b8:b9:37:e9:
                    67:0d:86:5d:96:e3:cb:9a:2d:76:02:fe:56:0c:60:
                    1a:fa:2c:2f:f9:dc:81:65:a2:d2:53:3e:81:ce:aa:
                    0d:97:52:a7:0a:c3:41:8a:ea:e6:25:18:4c:9e:31:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274726

    Signature Algorithm: sha256WithRSAEncryption
         50:25:69:86:53:8d:cd:51:9a:d8:46:8d:83:00:23:c6:5d:61:
         47:94:00:07:dd:55:51:d1:0a:76:7c:a4:40:98:75:90:8c:54:
         14:b2:c6:fa:7b:98:8e:f7:fd:f9:15:7b:77:92:e5:9e:62:b6:
         d4:5a:34:08:e7:05:fb:35:d3:6a:c4:1f:7b:1e:3a:18:d1:31:
         49:4b:86:93:b6:7c:af:a1:79:be:e8:92:56:cd:07:1e:e2:87:
         2f:81:6c:cb:e2:57:ec:46:87:8a:cc:c6:49:34:37:6c:74:6b:
         29:a4:66:36:7a:f7:76:3f:1b:3b:21:48:c1:2e:c0:9a:aa:19:
         9c:cf:96:48:34:41:88:f6:0b:db:f3:78:53:da:55:d1:cc:44:
         1b:f4:bf:2e:90:2a:36:a0:c0:26:99:92:e4:0f:27:c5:2c:74:
         26:14:31:20:d1:83:a6:fa:cc:df:57:11:84:43:53:a8:ce:48:
         6c:b6:af:d6:95:8b:2d:78:aa:75:cf:83:66:a2:c9:57:b8:cf:
         c3:b9:76:aa:64:ad:3c:ea:a1:e4:ff:80:3e:48:35:3c:ea:be:
         2d:f0:8c:9b:a7:10:7c:6a:be:0b:76:42:42:25:a4:ae:02:9e:
         d5:ac:ff:c8:9b:24:d5:4b:91:c3:e3:74:e6:ed:70:f1:6f:da:
         23:a3:ed:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----