Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/181ECDE4C70AFD827E75184D7AA9A4D1359BFE59.cer
File:                     181ECDE4C70AFD827E75184D7AA9A4D1359BFE59.cer (raw, json)
Hash identifier:          A+QOlPulS/a9RStfHLRpnY9Ig41PKGtjtY6KLvMswKs=
Subject key identifier:   18:1E:CD:E4:C7:0A:FD:82:7E:75:18:4D:7A:A9:A4:D1:35:9B:FE:59
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2EDB51EAF936C061394CC958B1AADDA1211FE815
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/181ECDE4C70AFD827E75184D7AA9A4D1359BFE59.mft
caRepository:             rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Mar 2026 20:31:46 +0000
Certificate not after:    Mon 01 Mar 2027 20:36:46 +0000
Subordinate resources:    AS: 268199
                          IP: 45.235.196.0/22
                          IP: 2804:4d7c::/32
Validation:               Failed, certificate revoked on Tue 24 Mar 2026 06:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:db:51:ea:f9:36:c0:61:39:4c:c9:58:b1:aa:dd:a1:21:1f:e8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  2 20:31:46 2026 GMT
            Not After : Mar  1 20:36:46 2027 GMT
        Subject: CN=181ECDE4C70AFD827E75184D7AA9A4D1359BFE59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:f6:88:43:ee:00:42:d7:c0:ee:ae:31:dd:
                    ce:69:79:d9:46:ea:56:3c:89:34:51:54:75:a3:81:
                    30:17:cc:b1:fb:2a:35:eb:70:a7:55:f3:0b:c2:ef:
                    cf:b9:ef:a0:ec:30:d9:64:24:af:e1:bc:26:19:bc:
                    50:e6:2e:69:ec:65:bd:59:05:8e:b4:1a:81:fc:7c:
                    f6:69:ce:20:d4:b6:ad:50:57:6f:c7:ad:8f:bb:8f:
                    40:4f:26:7a:4f:28:8e:5f:96:29:09:3b:73:2f:ed:
                    d2:7d:dc:fe:72:59:19:d2:c0:0f:32:35:54:4a:36:
                    b1:f0:e9:5c:f3:57:4b:f3:b9:3e:db:2f:eb:6c:02:
                    29:3a:6d:f8:1c:9e:b7:06:7a:4c:f7:a7:98:b7:a3:
                    42:8e:09:d5:70:4f:7d:b4:7e:87:0d:34:a5:74:77:
                    7c:31:4b:7f:49:72:cf:8d:a1:cf:4b:82:63:3b:2e:
                    41:d9:9f:c1:84:bb:9f:d9:fb:2f:fd:cf:c4:15:45:
                    bc:93:38:6e:e4:97:50:e2:52:c9:d9:31:45:4e:57:
                    b0:ba:37:b7:5e:7c:1f:0b:85:da:2a:8d:c1:39:a9:
                    5d:e5:0e:aa:07:fc:ea:d9:d0:a3:9b:e4:d3:3f:39:
                    32:ce:38:96:c9:c7:70:1a:69:cd:c3:7d:16:61:64:
                    8a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:1E:CD:E4:C7:0A:FD:82:7E:75:18:4D:7A:A9:A4:D1:35:9B:FE:59
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/181ECDE4C70AFD827E75184D7AA9A4D1359BFE59.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.196.0/22
                IPv6:
                  2804:4d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268199

    Signature Algorithm: sha256WithRSAEncryption
         9c:9d:ea:9c:10:25:7e:be:db:57:92:58:13:dc:4e:13:23:21:
         fb:ed:94:5e:f1:54:59:7b:0a:6b:26:57:30:83:00:13:a7:7f:
         1b:f8:94:ba:ec:ec:11:74:22:d3:b0:9c:e2:e5:81:c9:46:71:
         1c:e8:65:22:bd:74:6f:31:64:63:38:cd:5b:48:d1:85:e6:c5:
         57:83:7b:12:6a:41:e5:d9:8b:53:91:69:1c:2a:0f:45:f4:c4:
         d6:40:81:a0:78:fe:be:55:7b:59:14:f7:df:d4:67:3f:2b:62:
         e9:19:3f:9d:25:dc:82:58:40:73:69:75:94:db:cd:77:15:f5:
         45:f2:b9:bf:87:51:9c:38:b7:d8:46:9c:9f:43:49:13:db:5e:
         73:d9:11:a0:c7:77:b3:d7:78:0b:95:2a:a0:be:0c:39:52:64:
         f3:6b:f3:1c:ee:fa:5b:fa:36:27:78:04:2d:95:05:94:57:c0:
         96:f4:3d:0a:8a:5a:9e:55:a5:c9:e9:51:66:e0:96:68:5d:54:
         0a:ea:9c:ab:01:a6:86:03:80:22:34:ff:65:86:c3:3f:d1:0b:
         dc:fa:8a:16:2a:ad:85:4d:1a:f1:85:37:c4:8a:1b:ec:80:8a:
         55:d2:b0:8b:df:be:20:be:c8:fa:1a:c2:46:ab:2e:65:81:c7:
         f2:0f:57:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:06:17 2026 by rpki-client