This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer
File:                     FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer (raw, json)
Hash identifier:          YdJPBHWVWRNcoZTxLNpyH4/Z9YwKqxGR67A/plCnmKQ=
Subject key identifier:   FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7EAE53A86D59901D5C6FF748411DA1C3C9033C2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Jul 2025 12:20:46 +0000
Certificate not after:    Tue 30 Jun 2026 12:25:46 +0000
Subordinate resources:    AS: 270758
                          IP: 200.39.144.0/22
                          IP: 2804:70f4::/32
Validation:               Failed, certificate revoked on Thu 21 Aug 2025 20:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ae:53:a8:6d:59:90:1d:5c:6f:f7:48:41:1d:a1:c3:c9:03:3c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  1 12:20:46 2025 GMT
            Not After : Jun 30 12:25:46 2026 GMT
        Subject: CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e4:bc:50:90:5d:04:1a:fb:41:10:8a:ce:42:
                    98:15:22:19:2e:20:bc:44:e8:eb:7e:4b:c9:dd:4b:
                    d2:ae:79:30:a0:c2:c4:bb:24:25:59:74:a9:b3:85:
                    ac:a8:ea:7b:e6:48:cc:9c:ca:e9:9f:3f:e3:3a:43:
                    eb:8b:01:39:1c:2d:87:4c:81:84:af:c1:9f:bd:da:
                    a9:62:ce:45:ae:62:7d:63:8b:f4:dc:1e:1f:c0:de:
                    83:b1:79:6b:b0:80:7e:cc:30:28:4e:ac:2f:33:31:
                    c9:24:62:81:0d:64:96:d2:16:40:c8:40:1c:34:b8:
                    f1:be:b2:e3:c7:4a:8e:11:a7:ec:ef:b7:44:d6:02:
                    84:c1:de:61:8a:5c:4b:85:d7:34:bd:45:fa:9d:93:
                    1d:c8:f1:98:ab:cb:bc:54:05:a1:4e:aa:5c:ed:98:
                    e6:52:b4:28:7c:2b:da:3c:3c:6f:da:2d:cb:88:c4:
                    28:de:f1:1e:5b:c3:40:30:8f:74:03:61:f5:4a:a8:
                    cb:b9:7e:c3:f1:11:c1:b2:be:d0:3b:ff:aa:4b:9a:
                    48:ff:36:5d:46:dd:7a:e8:59:1c:a7:78:b0:c4:f8:
                    71:ff:83:b9:82:4d:e1:0f:cf:e7:3a:82:ad:81:4b:
                    20:20:bd:59:9e:ad:6a:c3:cb:2b:fa:86:c6:cc:ec:
                    bd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.144.0/22
                IPv6:
                  2804:70f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270758

    Signature Algorithm: sha256WithRSAEncryption
         3c:2d:71:18:6b:dd:f2:c9:73:56:ed:33:05:25:9e:d0:b5:85:
         90:3d:99:cf:7f:ac:7a:01:c8:74:f1:9a:46:2f:dd:40:de:47:
         a3:2b:e2:24:10:ef:10:73:11:c5:0e:08:b5:d0:55:e3:2b:b2:
         3e:b8:96:d3:9b:52:3c:55:6a:bf:32:8b:c4:a5:85:46:b2:61:
         04:d4:1a:82:88:a9:a7:d8:b9:35:6b:3c:9c:fd:64:92:d1:07:
         9a:93:81:42:33:a6:1b:9d:e8:4f:9a:c1:b5:87:6b:2f:16:83:
         47:67:27:26:49:5a:b7:2a:9a:ae:83:3b:6b:80:ad:ff:1f:f6:
         1e:99:f1:ca:29:d0:e6:7d:42:2d:f6:ae:30:de:a7:b7:ee:5b:
         38:80:c3:8c:4d:d9:42:17:1b:1f:12:23:3d:a5:19:af:d2:c6:
         ff:17:01:a8:91:60:ef:ab:ee:f2:88:72:b0:17:83:a9:ac:10:
         19:f3:10:a1:cb:dd:86:96:67:09:50:f5:ce:d3:67:24:b0:30:
         a9:17:38:37:a6:06:dc:30:58:7f:b0:f2:dd:a4:0b:88:18:03:
         72:1f:6d:17:f0:14:23:42:ba:b7:9d:64:2c:a0:d6:a7:93:50:
         38:1e:10:80:7f:4c:28:d7:54:3c:96:65:46:64:01:79:e7:6b:
         f1:ac:a8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----