This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D5DA077DAEF3F74CB48A14E1CCA1756A32D46ECE.cer
File:                     D5DA077DAEF3F74CB48A14E1CCA1756A32D46ECE.cer (raw, json)
Hash identifier:          v1CFTkQMiRkuEN/PTLxPvNKbKNjAbVmyOc43bzoR4yM=
Subject key identifier:   D5:DA:07:7D:AE:F3:F7:4C:B4:8A:14:E1:CC:A1:75:6A:32:D4:6E:CE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       15ED0C5D8D24E8489003DB4236EF521315230EE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/D5DA077DAEF3F74CB48A14E1CCA1756A32D46ECE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Oct 2025 12:14:35 +0000
Certificate not after:    Thu 08 Oct 2026 12:19:35 +0000
Subordinate resources:    AS: 269288
                          IP: 45.183.164.0/22
                          IP: 2804:6248::/32
Validation:               Failed, certificate revoked on Thu 09 Oct 2025 12:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ed:0c:5d:8d:24:e8:48:90:03:db:42:36:ef:52:13:15:23:0e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  9 12:14:35 2025 GMT
            Not After : Oct  8 12:19:35 2026 GMT
        Subject: CN=D5DA077DAEF3F74CB48A14E1CCA1756A32D46ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:a1:d1:6b:28:7a:3d:e0:16:44:66:7e:04:
                    2e:00:e6:c9:b0:90:d2:13:e3:60:09:33:c1:eb:45:
                    d2:ae:31:20:d5:74:23:3e:ad:ce:88:01:3e:e0:3e:
                    dc:0d:2c:c6:f5:60:39:78:70:81:c0:ad:ff:e8:72:
                    42:df:36:76:89:4a:b3:f1:22:f7:97:15:8e:7a:b5:
                    2a:29:0d:38:42:fc:ae:e3:8f:2a:fd:45:0f:6a:b9:
                    53:b1:b5:7f:5f:f4:15:c7:2a:36:a8:43:a2:45:b6:
                    96:b9:d8:6d:a4:7d:79:41:92:d8:4f:d7:3e:f9:8d:
                    a7:04:d1:a3:9e:15:93:bf:d6:64:8c:ad:36:3d:8a:
                    72:e9:fc:72:79:4f:6a:2a:af:0f:c6:e4:88:d3:d1:
                    56:45:f8:4e:19:50:25:c6:a0:d8:c1:a0:9d:24:ef:
                    90:a5:78:65:29:d3:af:c9:28:18:11:06:ae:58:0d:
                    20:17:e5:28:8d:91:6a:e4:ce:5e:15:a7:87:fe:1f:
                    58:43:53:1f:24:54:cb:5d:d5:e9:9d:99:69:6a:a4:
                    50:75:cb:ab:a9:ab:8b:ac:dd:63:a8:95:b1:f7:17:
                    a6:04:80:34:62:a6:c7:9f:f8:21:dc:31:c0:50:be:
                    5d:cf:8d:d8:89:fc:59:1d:bf:cf:6f:3a:cf:54:f3:
                    d0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:DA:07:7D:AE:F3:F7:4C:B4:8A:14:E1:CC:A1:75:6A:32:D4:6E:CE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/D5DA077DAEF3F74CB48A14E1CCA1756A32D46ECE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.164.0/22
                IPv6:
                  2804:6248::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269288

    Signature Algorithm: sha256WithRSAEncryption
         98:17:27:6d:77:f3:21:51:42:27:19:75:34:f3:e2:37:fa:14:
         4c:26:0e:32:75:02:0c:26:3e:fb:e1:0b:9b:80:ba:09:6b:b1:
         8e:e3:67:e8:f8:d6:0c:c4:9f:e6:ef:56:3a:1a:cd:cb:a6:ac:
         b9:9b:b0:e1:04:f1:2c:b9:d3:88:f2:f2:3e:e1:73:c3:b8:f6:
         8e:b8:f1:91:dc:a3:5e:68:f6:23:4d:4d:f8:95:82:31:68:ea:
         64:71:ea:12:c4:4a:c4:eb:6a:38:26:9d:43:5c:94:7f:77:7f:
         a5:67:6f:23:74:6e:9f:eb:65:a6:3e:46:b2:6d:b0:ae:39:c0:
         9a:d0:ff:38:40:76:ba:96:8d:a4:a5:20:ba:94:9a:c8:ca:8e:
         ca:4b:0a:b2:64:38:99:fa:cf:6e:ee:b5:eb:9f:e3:57:5f:aa:
         c9:0c:36:c8:45:fa:68:2a:eb:40:a7:67:aa:f7:a4:2a:64:11:
         b6:95:e8:72:f9:18:77:56:9f:91:ed:d6:20:86:e7:56:b3:12:
         fc:d3:e1:79:85:6b:1e:25:8b:5a:f2:68:02:62:63:4d:98:7d:
         e9:ca:7c:06:34:f1:f6:35:ca:8d:e2:a5:b6:20:94:b4:da:9d:
         16:51:ac:9e:e6:29:45:95:9c:2b:40:3b:ae:58:5b:d7:78:9e:
         8d:c8:a9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----