This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.cer
File:                     D6B9EE6613E3E32F3534176202CB552DAD0B77CB.cer (raw, json)
Hash identifier:          65aYMTuLkETvM0jmVCYtFdFi+LfmDqstE3mC51G+eY0=
Subject key identifier:   D6:B9:EE:66:13:E3:E3:2F:35:34:17:62:02:CB:55:2D:AD:0B:77:CB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       350D8C994FC9C6928208E1135151FA87464A2F1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Jun 2025 18:23:53 +0000
Certificate not after:    Thu 04 Jun 2026 18:28:53 +0000
Subordinate resources:    AS: 264866
                          IP: 168.205.220.0/22
                          IP: 2804:2f04::/32
Validation:               Failed, certificate revoked on Sat 30 Aug 2025 18:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0d:8c:99:4f:c9:c6:92:82:08:e1:13:51:51:fa:87:46:4a:2f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  5 18:23:53 2025 GMT
            Not After : Jun  4 18:28:53 2026 GMT
        Subject: CN=D6B9EE6613E3E32F3534176202CB552DAD0B77CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:39:b2:94:dc:bf:f3:67:6a:d4:34:4d:e2:
                    c4:b4:c0:f9:f3:36:d9:be:19:7e:1b:0c:2b:93:a9:
                    71:33:29:13:a2:b2:28:b7:17:a0:27:04:4a:81:48:
                    18:85:b0:18:8f:03:af:2d:7a:3a:6e:7b:46:6f:e1:
                    57:b4:30:76:b5:25:47:73:e7:5a:e0:5f:d1:81:a8:
                    72:e0:28:5c:a6:0a:e1:bc:35:5a:00:38:89:b6:83:
                    7f:f0:30:87:ab:ff:e6:ce:a8:df:9a:01:86:a9:a4:
                    79:d3:e1:5a:8b:0d:04:4c:84:e7:c9:87:f0:53:20:
                    63:44:3d:3a:32:53:64:7f:95:dc:89:16:91:a1:70:
                    71:af:9c:81:d3:ea:64:00:a7:56:be:c3:7e:a3:58:
                    79:2d:c1:f2:13:85:eb:19:e4:32:8d:ec:0b:36:e6:
                    e6:61:18:8a:60:78:87:03:6c:7a:b5:1e:24:0f:7f:
                    86:9b:85:3c:12:d7:29:35:ba:d5:03:9b:c2:a9:d7:
                    52:cf:69:02:87:07:e4:2b:ff:b5:d5:0c:69:9e:82:
                    e4:df:85:58:67:1a:f4:94:3e:cb:8b:0d:e9:2d:c6:
                    f0:57:c9:13:ff:0b:56:8f:e3:66:eb:09:8b:bb:f6:
                    fb:11:d3:98:fb:0f:f6:88:00:a8:6d:e6:ab:ea:06:
                    32:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:B9:EE:66:13:E3:E3:2F:35:34:17:62:02:CB:55:2D:AD:0B:77:CB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.220.0/22
                IPv6:
                  2804:2f04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264866

    Signature Algorithm: sha256WithRSAEncryption
         64:c9:d3:7d:c1:03:68:59:0b:5b:7f:7c:7c:59:0e:c9:85:55:
         96:2d:42:f2:89:19:5e:7e:c7:bc:c9:ab:3d:f6:fa:f5:53:2c:
         b2:47:19:ae:4f:f0:10:18:13:9d:b2:df:3a:60:75:71:25:dd:
         35:6f:f1:9b:4d:e9:ea:09:80:95:0f:94:73:d6:5e:93:bf:76:
         31:7d:07:c8:3c:57:47:fd:86:f0:7b:82:b5:3c:fa:48:c1:0e:
         af:80:2d:1b:ae:30:3b:c3:9b:a0:04:ac:bb:f6:b4:3e:91:ab:
         6d:c2:cd:6f:26:f8:fc:35:bf:1c:8e:93:ea:99:c6:a9:2c:8d:
         07:a3:fe:79:e2:81:52:64:17:77:a7:86:e1:54:07:0e:27:0d:
         c6:aa:e2:23:c0:88:6a:01:44:a4:b3:4e:e8:51:78:c4:a4:ab:
         8f:4e:33:11:0e:ef:18:3c:84:d2:7d:35:b8:1a:76:8c:87:f6:
         34:23:50:9b:8a:72:9c:21:1b:ff:39:3a:1d:59:07:b4:e4:83:
         97:7b:40:a5:8c:33:50:f9:34:75:c0:e5:ea:35:35:87:d5:78:
         41:58:71:9a:79:da:d2:ad:9b:1c:86:a0:76:49:fe:be:1a:28:
         a7:a2:df:8b:de:31:1f:2f:a7:6a:ac:8f:03:3b:91:fa:ea:07:
         b5:99:27:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----