This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.cer
File:                     E9BD4A328B09F70063C93430A11B2332DB5EE4BB.cer (raw, json)
Hash identifier:          xFYVq9NLWw+48nDNcINccvfESm3bNDKmi0E2R+5WgF4=
Subject key identifier:   E9:BD:4A:32:8B:09:F7:00:63:C9:34:30:A1:1B:23:32:DB:5E:E4:BB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       632461479C79B681C8EE5EA655B640C3E70CC6D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Nov 2025 11:36:26 +0000
Certificate not after:    Thu 05 Nov 2026 11:41:26 +0000
Subordinate resources:    AS: 265098
                          IP: 170.233.236.0/22
                          IP: 2804:32cc::/32
Validation:               Failed, certificate revoked on Tue 11 Nov 2025 12:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:24:61:47:9c:79:b6:81:c8:ee:5e:a6:55:b6:40:c3:e7:0c:c6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  6 11:36:26 2025 GMT
            Not After : Nov  5 11:41:26 2026 GMT
        Subject: CN=E9BD4A328B09F70063C93430A11B2332DB5EE4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:83:ea:60:44:cb:37:80:97:c1:8d:a0:f6:53:
                    16:db:fa:a6:a5:17:6a:4f:a0:cc:54:97:1e:1e:7d:
                    0e:68:7f:a7:63:a2:ac:9c:10:fb:7b:f5:6a:e5:88:
                    49:e6:77:41:38:16:40:0d:b9:3b:f8:ee:bf:0e:72:
                    7a:8a:0d:0f:75:e6:7d:8d:cb:88:76:46:a3:8e:03:
                    56:63:dc:d5:bf:27:24:4d:2f:c4:18:7e:7a:cd:a4:
                    8e:6d:f8:96:55:77:ca:fb:81:78:9d:f2:eb:03:07:
                    8f:ab:7b:78:1f:8e:6f:21:6b:8b:bb:5a:1e:93:52:
                    b1:06:23:26:52:69:13:95:08:b0:a6:2a:0e:98:f7:
                    55:b4:01:bc:e6:de:5b:fb:d5:68:cc:43:1f:3c:3b:
                    e6:c5:9e:f3:3e:36:77:2a:5f:10:4e:b6:65:53:2e:
                    92:24:6b:57:44:1b:9a:7a:18:01:3a:56:43:82:b7:
                    8b:d3:58:83:49:09:36:4a:15:b4:94:73:03:b6:2a:
                    dd:f0:f9:a4:91:92:18:f8:cd:f7:57:f8:ae:47:b4:
                    66:0f:98:ce:40:5e:7e:2c:d1:c6:e8:5a:c2:1e:15:
                    c3:9a:9a:59:8d:30:18:6a:43:a4:02:58:83:a7:60:
                    38:c4:74:61:af:69:50:08:ac:05:87:f6:8d:6f:4e:
                    57:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:BD:4A:32:8B:09:F7:00:63:C9:34:30:A1:1B:23:32:DB:5E:E4:BB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.236.0/22
                IPv6:
                  2804:32cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265098

    Signature Algorithm: sha256WithRSAEncryption
         2d:8e:f7:20:43:21:08:e9:b2:f8:73:37:04:53:d2:e3:1d:58:
         79:1c:6d:2c:17:48:b4:d5:1c:59:71:e3:15:c0:c2:ae:1b:40:
         5d:88:b1:a2:77:ff:d6:56:0f:73:e2:49:57:cf:f2:33:1c:90:
         3a:3f:cd:9a:27:3b:8e:44:46:c1:bb:2d:b9:12:2a:e5:c6:4d:
         7a:d3:03:fd:51:09:c2:f3:30:ec:99:2d:c8:4f:59:1c:8b:f1:
         6d:87:1e:a0:03:57:bd:90:5b:0e:84:da:bd:08:0e:e7:d9:4a:
         5e:a5:ff:59:b9:cc:55:e4:0f:08:0a:fa:bd:3d:19:76:c9:73:
         50:61:78:09:b5:0d:77:27:8f:a0:b4:2d:4c:58:b9:52:32:d2:
         bb:41:26:00:28:5e:ec:ef:ff:52:00:6f:5b:27:59:d6:31:58:
         d9:fe:21:ce:28:19:df:5c:03:89:c7:7c:3e:db:b9:fe:30:33:
         4f:6d:06:8c:a4:dc:71:81:8c:60:70:a8:81:5f:ba:88:a4:15:
         ad:0d:88:2e:76:60:ac:6e:18:84:08:a7:16:81:1e:ba:7a:42:
         3d:05:a6:f5:d4:dd:b7:1c:61:3f:a7:fd:44:c8:1f:32:42:c9:
         2c:51:39:c6:d8:88:ec:ab:f9:c9:b1:52:1f:99:5a:e4:89:45:
         4c:9f:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----