This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD35E26267D462E77D45761F566B9714993F96A0.cer
File:                     FD35E26267D462E77D45761F566B9714993F96A0.cer (raw, json)
Hash identifier:          4TmcAofeMMNuEZqacS+4xOswgdThjMyYZzGK/ldL5no=
Subject key identifier:   FD:35:E2:62:67:D4:62:E7:7D:45:76:1F:56:6B:97:14:99:3F:96:A0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5069BEB98250092040DF66065A7E3033BDD845BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/FD35E26267D462E77D45761F566B9714993F96A0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 02 Aug 2025 19:21:29 +0000
Certificate not after:    Sat 01 Aug 2026 19:26:29 +0000
Subordinate resources:    AS: 264195
                          IP: 138.97.196.0/22
                          IP: 2804:2400::/32
Validation:               Failed, certificate revoked on Tue 05 Aug 2025 15:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:69:be:b9:82:50:09:20:40:df:66:06:5a:7e:30:33:bd:d8:45:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  2 19:21:29 2025 GMT
            Not After : Aug  1 19:26:29 2026 GMT
        Subject: CN=FD35E26267D462E77D45761F566B9714993F96A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1e:3a:45:21:0c:dd:a6:2a:c8:9d:44:ae:38:
                    16:fe:5c:a6:96:c0:67:c2:ef:94:29:aa:da:10:3c:
                    e3:5d:e0:cd:86:9c:8e:ee:0f:17:41:11:23:0d:62:
                    53:f5:93:76:ed:a4:45:f3:ba:75:ce:b4:e5:ef:4f:
                    99:e7:6c:7f:02:d8:0c:64:0a:c6:88:35:97:d2:c9:
                    73:96:d6:48:ab:1d:c1:de:ae:d0:7c:f6:a8:7f:d7:
                    99:be:c3:12:91:a2:23:6b:2e:9b:b4:19:83:c5:f9:
                    b4:82:e2:42:40:87:fa:af:9f:ed:f7:ac:65:dd:6b:
                    67:83:8a:0a:80:34:69:f2:85:77:28:10:06:8d:34:
                    52:ba:db:e6:1e:58:64:c8:bd:3f:d2:fe:3f:2e:81:
                    14:5f:46:ef:4b:39:ef:7f:67:05:59:5e:46:9f:9f:
                    2a:e6:64:40:70:31:d4:ef:62:e8:83:32:65:d0:f0:
                    09:98:67:a3:76:16:82:5a:0c:ab:0c:d6:c0:59:dc:
                    bf:45:6f:d5:7c:3d:05:5e:7f:b0:27:27:e4:23:be:
                    d6:a9:57:a2:3b:10:96:5b:73:76:d1:d7:3f:4d:3b:
                    24:e8:5f:52:f8:6c:cb:47:9e:59:77:79:2c:1d:22:
                    97:af:fb:05:52:81:77:e1:9b:65:df:b6:14:8c:fd:
                    95:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:35:E2:62:67:D4:62:E7:7D:45:76:1F:56:6B:97:14:99:3F:96:A0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/FD35E26267D462E77D45761F566B9714993F96A0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.196.0/22
                IPv6:
                  2804:2400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264195

    Signature Algorithm: sha256WithRSAEncryption
         83:40:4c:ee:28:b9:a7:ae:f2:44:a8:3b:68:66:8c:08:3b:a7:
         25:e4:35:cf:6f:26:21:59:eb:78:ee:b4:c8:04:41:69:c3:11:
         e7:4b:b7:aa:d8:78:d9:74:cd:f0:48:01:e1:53:b1:e0:10:81:
         ab:ff:be:29:39:5a:64:0c:9c:05:27:7f:1e:71:e6:e1:b5:56:
         2f:eb:bd:13:f9:93:5f:54:7c:f4:cc:f1:e5:33:3c:28:2f:3f:
         52:42:39:1e:b4:0c:7d:94:66:ed:74:b8:6a:50:47:89:74:96:
         fb:2f:d5:23:f6:c9:a3:ad:d4:be:0c:7c:a4:31:4a:cb:66:96:
         36:05:4a:de:13:03:15:42:e6:bf:61:d8:54:f3:4d:ce:53:20:
         31:f4:2f:a6:03:c7:04:b9:37:62:74:9e:be:26:b7:a4:f1:3b:
         1f:8e:64:73:1f:2e:15:97:d4:74:43:fc:ed:99:a2:95:82:92:
         7f:87:2a:1e:ab:45:5f:36:6f:ba:fa:64:cd:09:bf:2d:65:2d:
         9a:ab:d1:f9:d8:9f:63:4e:11:68:50:35:c2:b4:ac:c2:3a:47:
         0e:6b:24:28:4a:15:6f:da:dd:61:08:70:64:a2:2a:22:ef:9e:
         30:36:d0:e2:97:01:9f:37:62:af:35:8f:bc:30:fe:82:c8:d5:
         05:63:b9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----