This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA12FB62D4F53CB5136A67195B17917F37FA7160.cer
File:                     FA12FB62D4F53CB5136A67195B17917F37FA7160.cer (raw, json)
Hash identifier:          hb6etFpgA+GwhyB304htzKhF93uYojhI/xXu+e5qE/g=
Subject key identifier:   FA:12:FB:62:D4:F5:3C:B5:13:6A:67:19:5B:17:91:7F:37:FA:71:60
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0785D5234049EB46CAB8CC973C56D59BF529056B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/FA12FB62D4F53CB5136A67195B17917F37FA7160.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Jul 2025 14:25:57 +0000
Certificate not after:    Thu 09 Jul 2026 14:30:57 +0000
Subordinate resources:    AS: 265269
                          IP: 168.90.88.0/22
                          IP: 2804:2d40::/32
Validation:               Failed, certificate revoked on Thu 10 Jul 2025 15:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:85:d5:23:40:49:eb:46:ca:b8:cc:97:3c:56:d5:9b:f5:29:05:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 10 14:25:57 2025 GMT
            Not After : Jul  9 14:30:57 2026 GMT
        Subject: CN=FA12FB62D4F53CB5136A67195B17917F37FA7160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d1:48:58:ec:78:7d:09:62:07:0c:6f:b2:1e:
                    b4:1e:59:c9:bf:c8:6b:47:a1:ae:a4:e5:fc:2d:cc:
                    20:98:36:80:fb:1a:1e:8b:46:17:7f:06:38:5e:a3:
                    7c:4a:8d:c7:16:21:a1:cf:25:e5:62:4e:16:38:bd:
                    af:78:80:ff:71:15:61:73:48:e0:84:9b:e1:43:83:
                    71:40:b1:74:96:77:45:14:1e:e8:b8:c3:7d:a7:89:
                    9d:c7:df:07:55:90:5c:0a:8b:6e:cc:c7:e9:8f:7d:
                    47:7b:6d:6e:69:a6:c2:f8:85:34:f6:de:cc:40:05:
                    74:22:40:29:3f:81:de:87:7e:83:2e:ea:2a:0e:de:
                    cd:bb:62:a5:10:8e:42:a6:21:95:b4:bb:9a:62:59:
                    1a:1f:8e:c8:e0:15:6a:82:e2:da:56:91:60:0b:f0:
                    66:89:d6:47:49:30:45:d9:72:78:8e:1d:52:89:27:
                    e6:0b:54:e4:48:a6:b5:dc:7f:c8:38:11:d9:1b:af:
                    b8:59:b1:94:5d:cc:84:cd:71:f6:7a:d4:12:2e:e5:
                    8b:49:48:bb:8f:f6:4d:de:42:08:03:3e:c0:08:56:
                    5f:ef:9d:d8:02:10:0f:6e:f4:89:4c:f6:5f:08:e6:
                    6f:2c:10:8a:08:d8:86:9d:39:a1:ed:1a:25:3d:b5:
                    84:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:12:FB:62:D4:F5:3C:B5:13:6A:67:19:5B:17:91:7F:37:FA:71:60
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/FA12FB62D4F53CB5136A67195B17917F37FA7160.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.88.0/22
                IPv6:
                  2804:2d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265269

    Signature Algorithm: sha256WithRSAEncryption
         a5:9e:99:e8:63:ec:ad:1d:e3:ae:fc:48:0d:58:e3:6f:1c:55:
         a0:f1:b9:79:21:c0:fa:56:cf:f8:7d:35:0a:44:24:9a:e2:67:
         29:42:71:52:70:b9:40:7b:6a:2f:d1:ed:1f:f9:0d:3d:76:01:
         56:df:c7:aa:00:b4:d9:c1:92:b6:0f:0c:e8:2d:22:24:75:a3:
         51:67:aa:0c:b7:a4:da:a7:de:14:ee:22:4a:ce:3b:80:41:b6:
         23:74:9c:b8:6f:eb:90:19:84:7d:82:4a:a2:1b:f7:59:3d:d1:
         b0:cf:b5:6a:f3:5c:4f:b9:7e:77:8f:c8:b8:f3:38:4f:5e:66:
         6d:1c:1e:f2:3b:61:47:fe:35:74:b6:4a:f0:3a:8f:8d:a0:28:
         0a:bb:af:e8:13:05:4d:c9:9d:de:82:4e:ac:3e:ce:06:44:45:
         ac:df:0e:6c:b4:3e:97:c4:2d:4e:15:81:db:0c:37:63:b1:3f:
         16:ae:9a:ad:e5:f5:06:8a:61:ab:1e:04:f9:5e:90:a1:17:d2:
         93:6e:19:60:65:f3:de:6d:9d:0f:f2:27:26:be:1a:66:46:1f:
         c8:1f:df:81:7c:28:5f:a1:47:82:15:e2:bc:70:14:e5:e8:10:
         57:03:8f:09:6a:b6:93:db:fa:53:5b:dc:89:de:d4:26:d3:f3:
         df:88:db:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----