This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E25A82376A73E59B60104D90BCE9E4246EC8B146.cer
File:                     E25A82376A73E59B60104D90BCE9E4246EC8B146.cer (raw, json)
Hash identifier:          S6bIBj67za1Ut46A6xYW9Turf+No1mnD7wPtJw2xYh0=
Subject key identifier:   E2:5A:82:37:6A:73:E5:9B:60:10:4D:90:BC:E9:E4:24:6E:C8:B1:46
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       070E442E9A3B128830E4BE7F36F4A3C5342E6FE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/E25A82376A73E59B60104D90BCE9E4246EC8B146.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Sep 2025 15:00:58 +0000
Certificate not after:    Tue 22 Sep 2026 15:05:58 +0000
Subordinate resources:    AS: 271664
                          IP: 177.73.216.0/22
                          IP: 2804:7f10::/32
Validation:               Failed, certificate revoked on Tue 23 Sep 2025 16:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0e:44:2e:9a:3b:12:88:30:e4:be:7f:36:f4:a3:c5:34:2e:6f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 23 15:00:58 2025 GMT
            Not After : Sep 22 15:05:58 2026 GMT
        Subject: CN=E25A82376A73E59B60104D90BCE9E4246EC8B146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a2:e6:ef:46:4e:59:2f:b6:01:08:5d:3b:b1:
                    9a:5c:5e:3a:f9:68:f6:eb:f6:25:83:8e:c9:5c:d4:
                    75:87:6b:43:b1:7f:fc:1e:f0:bf:b5:d6:3c:47:b8:
                    69:bd:d1:03:76:9b:c6:bb:76:5e:d0:de:f6:14:01:
                    34:9e:5c:4e:02:61:f1:a1:5e:28:40:ef:0f:37:19:
                    d8:83:04:81:7d:16:45:28:f8:8f:c2:05:cd:a4:4b:
                    5b:e2:64:f6:01:53:3e:0e:0a:5d:ea:f4:24:54:f4:
                    14:3c:46:ef:2c:12:3c:cb:bf:da:9a:70:62:6f:6e:
                    3d:24:c1:58:0c:66:26:54:fb:30:c0:3f:0a:87:5c:
                    26:ea:8b:38:5d:38:a1:34:bd:ed:00:99:14:b2:0b:
                    88:85:bd:2c:f2:ea:83:6c:3b:b3:f9:61:2c:1d:c1:
                    4f:12:59:5f:63:0f:e8:12:26:05:ef:9b:63:3a:33:
                    2e:1e:0e:ee:15:13:f7:e7:e0:b4:1d:ec:87:54:e2:
                    91:e2:d3:56:96:d8:0d:dc:cc:5e:9a:bf:22:1a:be:
                    7f:b5:58:db:86:62:03:7a:54:f0:70:c0:b8:5c:90:
                    0c:c9:96:ea:e2:76:55:eb:af:1b:d8:4e:b0:c3:45:
                    fd:fd:06:2a:77:a3:5f:d0:7b:b8:97:bc:1b:c6:5e:
                    5e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:5A:82:37:6A:73:E5:9B:60:10:4D:90:BC:E9:E4:24:6E:C8:B1:46
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/E25A82376A73E59B60104D90BCE9E4246EC8B146.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.216.0/22
                IPv6:
                  2804:7f10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271664

    Signature Algorithm: sha256WithRSAEncryption
         05:71:69:ff:6a:d1:b7:df:70:6d:40:09:b2:b5:f8:77:84:37:
         e1:a6:08:7f:b9:7a:ce:88:e6:c9:fc:05:e5:03:2b:78:74:17:
         79:4b:dc:92:a9:49:fc:54:53:5a:c9:73:96:0b:90:b0:a3:4e:
         32:4d:85:5a:23:05:b5:66:c2:59:d9:2e:83:00:e4:5d:5a:e5:
         be:3d:ff:05:e8:e4:6f:48:59:91:36:7a:9b:55:d7:90:3c:23:
         32:ff:45:fa:cd:a1:c9:c3:3a:15:ad:96:e9:9f:6b:dc:5a:ca:
         d6:67:c6:b7:02:59:83:a3:3c:a6:6c:db:bc:f2:15:c3:7b:ea:
         b9:2a:9b:a6:c9:3a:25:59:b2:80:23:86:8f:37:97:93:8b:ab:
         df:eb:e6:63:af:2e:f1:84:f7:85:f2:13:75:cb:c0:84:98:41:
         d4:fa:40:3f:f2:e7:60:22:20:89:72:65:29:eb:98:b1:9b:72:
         63:fa:4b:a7:7d:bd:27:72:b5:e2:68:54:ad:63:ba:78:6f:89:
         79:b3:eb:de:bb:23:78:d9:e7:e9:ee:74:ac:48:27:8e:19:f9:
         c9:91:da:fc:b6:80:04:d0:6d:27:df:e9:ab:fa:33:dc:ab:0a:
         01:28:bc:58:3e:29:95:15:02:cb:e3:3f:24:26:a2:12:0b:e3:
         77:6a:4a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----