This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C11E9EB14496B44C233C294F320837F642CF9602.cer
File:                     C11E9EB14496B44C233C294F320837F642CF9602.cer (raw, json)
Hash identifier:          NdtJv2batUu3cQZFWA9taQ4ZA2ux8hxligncRWQfliY=
Subject key identifier:   C1:1E:9E:B1:44:96:B4:4C:23:3C:29:4F:32:08:37:F6:42:CF:96:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       359A1D874C23AD290FE381FB8BA60A3A532AE760
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XJdW6jMj6NcvWsCHPS1EmU3A3rBpsSajpRSoGLUWj47/0/C11E9EB14496B44C233C294F320837F642CF9602.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XJdW6jMj6NcvWsCHPS1EmU3A3rBpsSajpRSoGLUWj47/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 15 Jun 2025 01:08:33 +0000
Certificate not after:    Sun 14 Jun 2026 01:13:33 +0000
Subordinate resources:    AS: 273451
                          IP: 191.253.56.0/22
                          IP: 2804:8ed8::/32
Validation:               Failed, certificate revoked on Wed 08 Oct 2025 14:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9a:1d:87:4c:23:ad:29:0f:e3:81:fb:8b:a6:0a:3a:53:2a:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 15 01:08:33 2025 GMT
            Not After : Jun 14 01:13:33 2026 GMT
        Subject: CN=C11E9EB14496B44C233C294F320837F642CF9602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0c:0e:bb:aa:d6:b0:4b:58:33:0f:c0:65:53:
                    44:a1:f3:01:56:e2:b1:d4:8e:1f:3b:b1:f2:52:97:
                    5b:c4:93:7b:d4:0c:18:af:42:85:88:22:ca:56:4e:
                    ba:ca:ea:a9:af:2f:d6:44:6c:5f:07:42:4a:15:da:
                    c1:ca:53:a8:02:26:ea:74:9e:d9:92:60:2f:8f:4f:
                    cd:bc:e9:3d:5b:f0:64:c3:ed:84:29:a2:a8:67:c3:
                    60:d3:1a:eb:e5:d0:6b:b4:e8:81:38:8a:93:fa:27:
                    55:8c:f6:78:26:ae:d4:03:8f:f8:1d:96:13:02:92:
                    4c:5c:cd:ae:23:8a:de:f5:34:35:53:55:74:56:a3:
                    72:1d:ef:4d:e1:60:c8:e6:9f:4b:9c:c8:f1:1f:9a:
                    dc:7e:b0:78:b0:54:da:5c:98:1b:8f:94:b7:40:86:
                    47:79:77:5c:f9:01:91:b1:9f:3c:72:7d:f3:67:73:
                    c2:42:81:14:71:18:89:72:89:9c:ac:c9:03:49:f8:
                    0a:89:bd:e8:1e:73:48:80:bf:36:51:84:f1:a8:bf:
                    be:48:3c:4f:d0:4e:11:4e:73:84:e8:4f:1e:fb:3f:
                    84:4c:f6:ba:96:c0:34:21:b3:d9:4b:00:57:91:71:
                    6c:cf:92:d8:ae:e4:24:f9:fd:15:77:03:89:c2:84:
                    8b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:1E:9E:B1:44:96:B4:4C:23:3C:29:4F:32:08:37:F6:42:CF:96:02
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XJdW6jMj6NcvWsCHPS1EmU3A3rBpsSajpRSoGLUWj47/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XJdW6jMj6NcvWsCHPS1EmU3A3rBpsSajpRSoGLUWj47/0/C11E9EB14496B44C233C294F320837F642CF9602.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.56.0/22
                IPv6:
                  2804:8ed8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273451

    Signature Algorithm: sha256WithRSAEncryption
         77:60:9c:a1:d6:94:1d:dc:da:11:bf:6a:50:4f:40:5e:81:2e:
         03:0d:3b:ee:75:64:b5:24:4e:ca:d5:51:aa:1d:31:b5:8c:f8:
         c5:84:55:f1:db:ed:3a:02:ca:4f:5a:6d:c9:43:d1:25:91:23:
         4e:ad:69:a1:05:5b:d9:98:62:a4:41:98:a7:15:2a:7b:20:1d:
         66:23:1d:d2:13:c8:a4:7e:ad:d7:8c:c3:9a:ff:f8:60:2b:ca:
         47:e5:06:aa:74:5f:2e:9c:2e:67:5e:2e:5b:c8:71:1b:bc:52:
         17:6c:14:68:f8:6d:43:ac:fa:68:84:4d:2a:24:c4:b4:a0:38:
         94:9f:0d:07:49:97:9f:54:96:3e:00:dd:df:6c:c4:91:0b:04:
         a1:ed:7b:42:8e:c9:49:c3:bc:34:11:2e:99:6b:22:f5:46:e8:
         b1:f3:29:dd:d0:e5:e8:07:c9:d6:36:6d:26:f7:c7:e4:9d:d4:
         b9:a2:71:18:6a:8e:bf:a0:2d:4d:04:37:76:cf:50:cb:c4:aa:
         2d:b6:37:bf:bc:43:e9:59:74:cd:8d:23:d1:4a:81:1e:82:23:
         e0:eb:83:19:80:d4:2d:e1:40:a7:15:42:e8:ef:a6:02:c1:27:
         f7:85:c7:64:72:8b:f3:4c:b9:b4:6b:16:56:29:cf:e7:c4:ee:
         e7:22:2f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----