This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer
File:                     BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer (raw, json)
Hash identifier:          cZJ0+n9ObudNmB2hYnVinvL7ALNtUcI+4Vq+ULUSces=
Subject key identifier:   BF:5F:73:26:7A:08:76:B9:F6:FD:A7:5E:24:67:70:4D:6B:FB:84:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F1B896E901AAFBB6C541012E9D1B326464CA1B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Nov 2025 13:07:37 +0000
Certificate not after:    Mon 16 Nov 2026 13:12:37 +0000
Subordinate resources:    AS: 265437
                          IP: 168.195.176.0/22
                          IP: 2804:3420::/32
Validation:               Failed, certificate revoked on Mon 17 Nov 2025 13:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1b:89:6e:90:1a:af:bb:6c:54:10:12:e9:d1:b3:26:46:4c:a1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 17 13:07:37 2025 GMT
            Not After : Nov 16 13:12:37 2026 GMT
        Subject: CN=BF5F73267A0876B9F6FDA75E2467704D6BFB84D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:d2:1b:40:bc:fb:70:50:1c:b6:b9:50:da:
                    e4:5d:08:d0:59:b1:82:f3:cf:52:b5:9b:6f:b7:47:
                    e3:9e:fd:8c:7a:5d:9c:26:83:8f:75:b8:5d:86:7e:
                    03:01:66:3b:c4:9a:7a:b6:1b:9e:df:98:02:8e:89:
                    55:e3:6b:3b:9b:e4:b8:36:f8:9a:c1:09:e9:27:61:
                    f7:6c:d4:94:05:15:ef:4e:cd:62:e0:1e:66:55:7b:
                    34:8d:3a:06:f0:f1:b9:9d:cd:9b:e9:19:de:44:64:
                    0a:9e:5e:a1:0f:f4:c8:41:10:f0:6a:a5:b6:90:f5:
                    cb:c2:0f:92:1f:29:0b:c2:78:71:cb:e5:98:bf:39:
                    d7:a4:a2:33:d6:1a:fe:ce:b7:0d:d7:02:3c:9e:9b:
                    37:28:e3:42:f7:69:2e:80:0b:55:86:31:9e:5f:c0:
                    78:e2:51:bd:7b:71:b5:77:d7:0c:94:27:d6:43:b5:
                    5e:db:ae:99:3b:82:03:f4:04:85:50:c9:78:d8:a7:
                    05:fc:7a:be:25:8c:f9:8e:c6:cb:d1:fe:bc:4c:4e:
                    97:37:ac:56:ce:a6:6d:c2:f0:5c:e8:c3:88:87:93:
                    72:7c:12:20:5d:24:38:98:11:c1:22:e4:20:40:9e:
                    ed:81:34:1b:d7:42:cc:22:00:b9:8e:61:2f:eb:64:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:5F:73:26:7A:08:76:B9:F6:FD:A7:5E:24:67:70:4D:6B:FB:84:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.176.0/22
                IPv6:
                  2804:3420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265437

    Signature Algorithm: sha256WithRSAEncryption
         92:76:65:02:21:e9:cc:08:71:0b:30:e1:55:45:08:af:6a:09:
         4e:81:7d:cc:35:13:56:15:bb:48:46:1a:64:3b:e3:a3:6c:2c:
         32:8a:a3:79:4e:8e:d6:c4:f2:92:3b:b6:81:1c:02:5b:29:9b:
         e6:aa:7b:23:e8:e6:a3:a5:43:dc:62:ac:5b:1a:48:a0:08:48:
         5b:ce:36:1c:88:06:c8:2c:0b:c7:9b:c2:53:2f:01:f6:3a:94:
         7c:60:60:93:71:d0:2a:14:9d:a4:a4:49:18:ce:16:87:7e:99:
         33:2b:dc:a0:7d:9c:12:76:da:eb:d0:02:cd:75:fb:ef:84:40:
         22:ab:d2:2b:98:67:46:b9:0f:90:8e:af:11:87:b7:b7:00:4f:
         59:52:df:5d:be:fe:35:07:04:5e:61:c3:80:48:9f:bd:d8:58:
         f9:a6:79:71:14:7b:8e:64:7e:8b:7c:88:fe:08:c3:3f:7a:f4:
         b8:e6:f1:15:4c:05:e5:0d:14:8a:5b:0e:c6:95:72:26:2d:ae:
         6f:81:7e:77:34:6f:75:24:bd:af:f2:91:2c:b0:b7:6c:38:e7:
         99:4b:70:39:d8:25:c0:54:8a:8f:2a:9e:d6:dd:a6:fd:ad:8a:
         7f:3f:57:a9:5c:86:9e:d8:99:18:e6:71:bf:3e:14:99:35:49:
         3c:a1:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----