This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer
File:                     E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer (raw, json)
Hash identifier:          osRt2orKwXESKyyKFlQBEj1JAsPCpMChaM6zT7rmhII=
Subject key identifier:   E3:9C:8B:A5:F3:D1:22:7D:86:25:CE:6F:02:FE:CB:FA:6E:3B:82:B1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       14E29D3AC4BA99080E31A52BA0AB3BDC901DAD34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Oct 2025 14:13:54 +0000
Certificate not after:    Mon 12 Oct 2026 14:18:54 +0000
Subordinate resources:    AS: 263623
                          IP: 143.255.44.0/22
                          IP: 177.185.240.0/20
                          IP: 2804:102c::/32
Validation:               Failed, certificate revoked on Mon 13 Oct 2025 14:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e2:9d:3a:c4:ba:99:08:0e:31:a5:2b:a0:ab:3b:dc:90:1d:ad:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 13 14:13:54 2025 GMT
            Not After : Oct 12 14:18:54 2026 GMT
        Subject: CN=E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:75:2a:1d:34:98:db:cd:1d:32:77:dd:87:
                    f6:2b:eb:fe:25:fc:50:c7:f7:cc:3f:62:2c:04:24:
                    83:f0:94:a7:b9:85:e4:0e:35:29:c7:78:bb:bf:da:
                    84:05:bf:af:cc:e4:d0:e5:43:5b:33:ae:b6:70:a1:
                    ed:ed:6f:10:7d:f5:61:48:91:f2:cd:5f:7e:90:a6:
                    91:05:47:00:5d:53:19:1e:b2:f2:a5:5a:59:d8:d1:
                    a3:a0:63:13:31:56:38:2c:5a:64:c0:71:16:92:3f:
                    14:ab:b9:3b:05:db:2f:44:5a:dc:01:25:d3:dd:62:
                    e9:15:e6:f3:55:b6:88:71:bf:55:e3:1f:4e:92:a5:
                    35:1b:1e:6c:a7:9d:10:fa:73:aa:f3:2e:40:0d:8c:
                    d8:27:6f:2a:b0:fb:00:61:69:d8:45:b2:df:39:3f:
                    fc:e9:1b:23:d2:56:84:98:b5:26:70:2d:97:2e:27:
                    2e:4a:8d:35:cd:56:e2:44:7c:8e:8b:9a:81:39:f0:
                    24:80:69:2d:2e:2d:83:d4:a6:49:9b:d8:15:23:b3:
                    1c:62:75:ea:05:e6:de:91:fc:9e:88:51:c6:e6:3e:
                    fc:62:e4:60:d6:2a:41:cf:da:f3:98:e9:23:91:66:
                    85:20:b1:b9:5a:c9:ee:5d:15:7b:e3:9b:6f:4a:13:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:9C:8B:A5:F3:D1:22:7D:86:25:CE:6F:02:FE:CB:FA:6E:3B:82:B1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.44.0/22
                  177.185.240.0/20
                IPv6:
                  2804:102c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263623

    Signature Algorithm: sha256WithRSAEncryption
         2e:72:1b:45:1b:28:7f:3a:75:6e:84:b3:33:ae:31:d6:c8:a6:
         4b:97:69:7c:29:ff:e8:33:af:bf:ea:68:9b:24:2c:61:31:12:
         43:80:5d:37:ae:ba:27:a3:3f:3a:b4:87:f8:5e:1b:23:b1:a9:
         cc:fc:d5:b0:28:56:c6:0d:37:d6:62:74:49:48:f0:ed:0d:e8:
         b3:aa:12:f9:80:d1:37:e9:95:ee:fb:53:46:9d:3b:f5:66:8f:
         8a:72:7c:d8:f7:ed:54:a8:b3:ec:2d:91:0c:67:00:ad:8c:1d:
         fa:59:e4:ee:da:79:e1:3d:2f:12:d1:58:10:72:13:9a:bf:c9:
         04:b9:21:d8:2e:76:8d:b7:dc:35:75:de:19:88:62:2a:4f:25:
         28:c2:d1:b8:39:32:4a:ab:be:25:e2:5d:d7:f6:99:e1:d8:6c:
         2c:e8:f8:a5:9f:eb:5d:81:e8:ba:29:a8:da:9c:f0:4a:7b:55:
         8f:c2:cf:d6:25:0e:e3:01:5d:c7:c8:3b:0e:d0:50:89:b1:12:
         c8:a2:3c:fe:98:66:7c:3b:94:0f:e3:46:41:39:32:4f:18:60:
         bc:5c:d7:a7:36:8e:e2:15:91:99:e6:a4:94:3b:86:b2:bb:14:
         aa:11:f0:dd:9d:e7:15:43:64:33:97:84:13:91:3a:36:2c:83:
         25:23:ca:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----