This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CFBDC034E21CCE505A2A3F65B427FEC98751D9C7.cer
File:                     CFBDC034E21CCE505A2A3F65B427FEC98751D9C7.cer (raw, json)
Hash identifier:          SywJqwKUd9jOvjNLd8uHsL/ih8y1UydhAiZOom5j3ko=
Subject key identifier:   CF:BD:C0:34:E2:1C:CE:50:5A:2A:3F:65:B4:27:FE:C9:87:51:D9:C7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       61E2332251D7CACB266AEB2469C46ED816FA4B22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/CFBDC034E21CCE505A2A3F65B427FEC98751D9C7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 04 May 2025 11:56:38 +0000
Certificate not after:    Sun 03 May 2026 12:01:38 +0000
Subordinate resources:    AS: 270515
                          IP: 187.49.152.0/22
                          IP: 2804:6d24::/32
Validation:               Failed, certificate revoked on Sat 16 Aug 2025 04:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e2:33:22:51:d7:ca:cb:26:6a:eb:24:69:c4:6e:d8:16:fa:4b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  4 11:56:38 2025 GMT
            Not After : May  3 12:01:38 2026 GMT
        Subject: CN=CFBDC034E21CCE505A2A3F65B427FEC98751D9C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d2:66:8f:8d:9a:3b:2c:da:97:c0:80:16:e3:
                    6e:cb:01:af:61:95:b8:54:43:18:d9:a0:4f:a9:b5:
                    8a:bd:78:bb:2d:06:f8:72:1f:6b:71:73:98:51:1c:
                    1e:43:e7:7a:72:f3:8b:6c:cd:98:ff:03:25:6e:3c:
                    1a:1b:7f:06:c0:2f:25:08:eb:af:42:25:31:49:56:
                    3b:ba:47:bb:86:8f:07:cb:a8:0d:cb:e2:5f:57:2a:
                    b6:99:1b:fd:ea:62:45:2d:0b:c5:75:a2:47:55:5d:
                    5e:47:20:2f:ed:e5:db:c1:79:6a:35:f6:9e:91:fb:
                    fd:48:f5:f4:c8:33:53:26:eb:01:21:49:de:af:e4:
                    44:ef:f2:0f:b9:54:4e:f1:da:49:18:c0:66:04:ab:
                    85:bd:45:8e:a3:ab:5d:c2:38:1e:38:4e:ae:fd:58:
                    fa:05:c4:1e:94:d8:d7:55:85:87:38:6d:95:ac:b9:
                    49:4c:0d:d3:41:33:99:8c:65:e4:a7:82:b6:6d:7f:
                    3c:c6:af:29:2b:bd:54:7d:22:6b:c6:03:eb:d9:03:
                    36:aa:64:ec:db:8c:ac:27:ee:9b:4e:5c:02:84:6e:
                    b4:be:9d:7c:fd:d0:6e:52:e3:2a:0d:80:35:94:86:
                    af:f7:44:54:37:23:95:8b:be:23:ed:58:c1:2c:a2:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:BD:C0:34:E2:1C:CE:50:5A:2A:3F:65:B4:27:FE:C9:87:51:D9:C7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/CFBDC034E21CCE505A2A3F65B427FEC98751D9C7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.152.0/22
                IPv6:
                  2804:6d24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270515

    Signature Algorithm: sha256WithRSAEncryption
         1d:bb:f2:9f:44:f0:69:12:20:8b:23:d7:78:56:b1:eb:45:cd:
         63:c2:a5:33:93:92:e0:7b:05:40:c2:28:84:18:fb:d2:65:fa:
         78:8e:ae:d1:c9:1e:e4:f3:92:9a:f3:79:84:fc:7f:47:da:59:
         e0:0b:9d:a0:91:e1:2f:08:29:7a:51:7c:d9:7a:13:ce:67:07:
         18:cc:b0:b2:70:55:de:5a:36:ba:46:cc:fa:58:dd:50:ec:75:
         1b:65:36:e1:f5:35:1d:f6:89:56:71:b3:5d:a4:28:c5:ad:97:
         6f:22:45:e9:82:30:ca:b5:48:0e:2d:e8:8f:bf:cb:25:44:c1:
         4d:14:c2:e3:a3:69:fe:b8:45:80:06:a0:e4:c3:d2:ea:b3:5f:
         b4:d9:9f:42:1c:26:78:05:60:b3:f5:44:b6:64:e0:a6:e1:92:
         40:cd:0c:5f:e4:bd:e4:74:7f:77:85:c0:48:9b:20:72:aa:00:
         4a:86:f2:c8:08:15:ff:04:48:25:6c:06:0f:24:48:b1:e2:04:
         bf:48:cc:b9:e4:69:9d:bc:de:61:05:36:35:9e:5a:9d:41:44:
         51:ec:11:71:35:f5:99:7f:0b:b5:6b:a5:3e:76:78:7d:2a:e7:
         75:6e:76:ba:e8:2c:b3:b5:e9:ad:70:88:6a:ef:c7:e9:33:7b:
         39:4e:3e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----