Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
File:                     11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer (raw, json)
Hash identifier:          qaia1VGv9/DAwr8jzXop7oMWJvc94ak4tzACplS/7jk=
Subject key identifier:   11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       12FE53638DFAD99C29104E898654C509AEF2A1C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Jul 2026 19:35:29 +0000
Certificate not after:    Thu 08 Jul 2027 19:40:29 +0000
Subordinate resources:    AS: 269597
                          IP: 45.71.208.0/22
                          IP: 45.181.36.0/22
                          IP: 45.189.176.0/22
                          IP: 2804:6700::/32
Validation:               Failed, certificate revoked on Fri 17 Jul 2026 01:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fe:53:63:8d:fa:d9:9c:29:10:4e:89:86:54:c5:09:ae:f2:a1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  9 19:35:29 2026 GMT
            Not After : Jul  8 19:40:29 2027 GMT
        Subject: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fe:fd:ca:d2:cc:ea:11:6b:a5:da:92:c5:dd:
                    17:0a:47:e8:9b:a1:c4:70:64:77:c3:bc:68:6c:e6:
                    e0:89:4d:fd:98:c3:84:59:5b:72:1a:1d:a9:df:4d:
                    c2:b8:72:7a:2e:6e:98:ff:f4:09:59:68:e8:23:0a:
                    85:60:33:3a:69:92:2d:f2:85:fb:80:90:c8:07:00:
                    fa:2f:77:4e:e1:28:4b:c0:6c:b2:29:39:c5:1f:5f:
                    71:7c:99:a4:09:0d:10:6d:15:ec:9c:e1:a6:02:4b:
                    97:c4:2c:1b:8a:df:56:0f:3c:8b:fb:eb:a4:a6:93:
                    c1:a8:95:bf:0a:3f:7e:10:f8:23:f4:62:ac:e3:8e:
                    6f:fd:0e:b1:63:eb:7e:63:e0:10:80:ed:a4:8f:4b:
                    00:9c:96:f9:09:7b:4e:6e:38:cd:f6:b8:f0:87:e4:
                    01:7f:ba:e3:3d:2a:e8:1f:64:51:23:4d:94:3e:c7:
                    c8:c8:cc:8b:02:29:1f:a9:46:f8:c3:93:67:1c:93:
                    a2:ad:1f:c7:31:df:57:38:ef:fe:45:a9:02:a7:da:
                    09:9b:d7:0c:bb:4e:c0:27:5b:3f:bb:a2:b1:2f:cf:
                    85:97:67:3f:51:b1:2c:65:32:37:27:7e:8a:c4:e5:
                    b7:4a:9c:7d:4d:c0:a5:4e:16:90:22:ae:e2:32:bc:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.208.0/22
                  45.181.36.0/22
                  45.189.176.0/22
                IPv6:
                  2804:6700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269597

    Signature Algorithm: sha256WithRSAEncryption
         73:55:a8:8a:09:7c:eb:9a:ed:c7:ce:8c:6f:82:80:3b:3d:a4:
         b6:0f:1b:3a:3a:b2:64:48:31:ee:dd:63:37:85:e3:be:1d:55:
         24:9c:39:0e:60:11:dd:02:31:fa:54:e9:f4:9e:9e:a7:34:47:
         20:c7:b5:1a:84:f2:14:b0:b8:60:ce:fc:b8:f6:c9:ef:e7:34:
         16:88:ea:08:43:ea:4a:9f:38:51:38:7c:76:67:09:f4:c0:2b:
         2b:59:17:62:f0:69:d7:e2:e0:ef:6a:ac:f4:66:0e:db:61:a1:
         0f:f8:7a:6e:06:9a:de:98:5a:f4:74:b4:b5:80:93:16:00:b3:
         3a:f9:e1:3a:05:a8:af:a1:58:b1:40:7e:e5:67:1d:bc:09:25:
         d5:3e:24:30:2a:c8:ee:d9:45:02:3f:67:5f:05:5a:d5:d7:be:
         fe:71:e6:51:a4:21:05:3f:a2:e2:11:3b:82:bc:40:06:44:78:
         2c:86:9d:cf:be:18:88:bf:55:d6:ef:32:83:13:39:bb:d1:be:
         2f:7c:47:77:a5:9b:a1:de:e7:90:76:71:02:ec:88:8a:33:99:
         fb:0e:65:57:72:14:cc:10:2e:25:fb:a6:5e:f7:d3:23:3e:9f:
         17:9e:91:45:99:25:5b:32:17:a2:6e:80:4c:f2:62:9d:2e:07:
         07:d2:fe:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 21:04:46 2026 by rpki-client