This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71.cer
File:                     CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71.cer (raw, json)
Hash identifier:          rzvNk0UVKWl0M4eJ1+EvLfcI8Flvx04migwcqRs/3LM=
Subject key identifier:   CF:EA:62:C4:56:B2:BE:E0:B7:B3:3E:22:07:5D:F9:5B:0C:68:EE:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       425510CC44317EFF5B73FB1690E411FDE53C5F88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Jun 2025 00:00:20 +0000
Certificate not after:    Fri 05 Jun 2026 00:05:20 +0000
Subordinate resources:    AS: 270890
                          IP: 186.233.4.0/22
                          IP: 2804:7304::/32
Validation:               Failed, certificate revoked on Mon 06 Oct 2025 07:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:55:10:cc:44:31:7e:ff:5b:73:fb:16:90:e4:11:fd:e5:3c:5f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  6 00:00:20 2025 GMT
            Not After : Jun  5 00:05:20 2026 GMT
        Subject: CN=CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:f1:99:ec:a1:77:e5:57:48:2e:1a:b0:bd:
                    b9:84:1f:06:e0:90:09:d3:dc:ff:d8:32:7a:a2:9b:
                    c8:dc:7f:92:21:42:ec:ad:02:da:61:23:bc:34:9e:
                    5f:fa:60:74:e0:9f:f7:f5:ea:e3:44:50:8f:89:87:
                    7d:eb:76:84:dd:e5:7d:a5:61:b5:51:fd:15:4e:20:
                    6f:f9:b5:c5:b8:47:11:e2:34:3e:b8:ee:15:af:e9:
                    91:d6:dc:1d:1f:7a:20:ba:3e:e9:01:df:37:03:d1:
                    86:16:25:1f:c5:a5:2e:f5:b1:ea:32:90:fb:0f:34:
                    85:d1:d2:d6:c2:1a:0b:34:01:c5:9d:40:4c:65:8c:
                    9a:28:98:ba:78:30:a2:0f:8a:e2:92:1a:6d:33:eb:
                    9a:d2:88:cf:18:a8:d3:ac:99:06:69:a9:b9:92:40:
                    bc:8a:fa:00:09:c0:20:2d:a3:50:72:c2:29:aa:10:
                    71:30:14:73:0c:db:c0:78:ef:7e:3a:be:39:b6:b5:
                    9b:11:f0:7a:51:db:4a:79:e1:2a:e5:c0:dc:d2:07:
                    2d:f8:5d:62:61:cd:51:0b:aa:e0:07:f2:d4:a7:fd:
                    02:81:3b:0f:98:34:0d:15:75:df:77:b6:69:b1:a9:
                    f3:0e:6f:bf:53:28:65:57:3e:5a:b9:8d:08:ff:1c:
                    b8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:EA:62:C4:56:B2:BE:E0:B7:B3:3E:22:07:5D:F9:5B:0C:68:EE:71
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/CFEA62C456B2BEE0B7B33E22075DF95B0C68EE71.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.4.0/22
                IPv6:
                  2804:7304::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270890

    Signature Algorithm: sha256WithRSAEncryption
         d6:1b:ed:8a:6a:fc:fa:49:4e:a3:79:bb:0f:f8:72:54:a8:93:
         6a:f8:59:f6:a6:f3:c3:32:34:6a:fb:d7:4d:05:9a:d1:42:ff:
         7c:f4:ea:44:ba:7d:38:25:05:98:f7:89:17:9d:b2:b7:65:cd:
         0a:f2:fb:34:be:22:83:3e:f6:7f:f9:12:80:5c:9b:65:46:98:
         32:16:ad:01:1a:47:8f:41:45:bb:7d:96:8d:d1:73:3f:41:67:
         32:6f:94:2d:6b:5a:ce:bf:a6:a8:92:0e:64:5c:c5:64:7a:e0:
         92:20:28:c8:38:2a:24:53:42:27:32:bb:d0:1d:b8:35:fd:f2:
         aa:a2:b0:99:1b:99:9d:7a:f2:c0:61:a7:03:d3:f2:03:19:86:
         11:02:55:d9:25:28:a1:cf:d4:fa:68:f8:91:ca:ac:0e:6c:db:
         55:8a:76:03:82:d3:50:4c:65:61:7a:25:3d:f9:b3:f1:97:a0:
         c4:0e:5e:2e:36:bf:3e:cb:f2:67:36:93:0d:36:00:ac:42:db:
         e1:2c:7e:5b:50:4c:b5:22:57:5f:77:9c:e2:b8:70:68:87:cd:
         b5:90:b2:fd:e1:87:e7:b9:8a:c4:39:fb:46:a3:2a:e2:f2:82:
         17:03:80:c9:4d:b3:dc:08:73:51:21:ba:bd:92:bb:87:1b:17:
         25:94:e6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----