Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer
File:                     208F84112F1A4B695E56F4EB839321D9C18D523D.cer (raw, json)
Hash identifier:          iXGOjLfr8T6DMpXDQL3l8/e2ETS4rrFXakqPh0Q8vn8=
Subject key identifier:   20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62ABE9392042913561E1210F3F0D9BE4B0494745
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 May 2026 21:40:28 +0000
Certificate not after:    Thu 13 May 2027 21:45:28 +0000
Subordinate resources:    AS: 270258
                          IP: 45.191.12.0/22
                          IP: 2804:6940::/32
Validation:               Failed, certificate revoked on Thu 21 May 2026 05:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ab:e9:39:20:42:91:35:61:e1:21:0f:3f:0d:9b:e4:b0:49:47:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 14 21:40:28 2026 GMT
            Not After : May 13 21:45:28 2027 GMT
        Subject: CN=208F84112F1A4B695E56F4EB839321D9C18D523D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:7a:46:b7:e8:55:07:95:f3:3b:fe:9a:ed:
                    3a:63:d5:7e:9c:17:91:38:ea:19:30:5e:7a:28:fc:
                    e0:f3:af:bc:58:9c:db:2d:0c:f0:10:f8:7c:4f:aa:
                    a5:90:f4:77:27:06:d0:90:75:3f:67:03:40:97:06:
                    53:d2:ab:fd:e3:6b:65:6b:96:15:80:c5:2e:29:ed:
                    75:7f:5c:6b:5a:2c:0b:f1:d5:5c:6d:7f:1b:e1:ab:
                    fa:f5:3f:2a:2c:11:14:7d:3c:e5:10:af:a3:66:10:
                    20:4a:98:63:81:5c:da:af:b7:ba:b4:01:99:9b:f4:
                    65:75:18:44:4d:16:c3:be:7b:ef:e7:7b:f2:fc:1f:
                    f2:0f:f0:c1:e5:12:cf:56:ab:49:8f:a2:a2:52:6b:
                    6f:26:b8:77:e8:79:08:cd:af:82:72:bd:0f:b2:07:
                    ea:bd:2d:d7:b5:2a:65:ba:b6:52:07:a4:ac:21:61:
                    94:c0:47:cc:81:6a:d2:57:0a:12:c7:13:17:bf:2b:
                    97:2f:85:45:eb:c8:f5:f0:fa:7b:64:3e:7d:75:c5:
                    0c:45:b7:65:44:22:b8:69:c9:60:3c:31:69:7a:fe:
                    0d:dd:81:9d:27:57:ad:57:fe:da:72:3c:0b:0e:87:
                    6e:85:3c:67:94:6f:c8:aa:88:f2:03:32:9c:72:ff:
                    57:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.12.0/22
                IPv6:
                  2804:6940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270258

    Signature Algorithm: sha256WithRSAEncryption
         af:07:de:ce:39:55:37:9c:c4:81:6c:d2:f5:44:39:40:9a:ec:
         d6:f3:c1:14:5f:4e:c4:a3:5f:73:2d:fe:e2:1c:38:bb:f3:a2:
         28:65:24:59:cd:23:ea:1c:89:7a:e1:59:f6:51:61:f3:a6:62:
         5a:bb:a2:e6:ed:4f:ba:b5:89:4f:30:d5:93:3b:13:03:ad:9a:
         59:ee:2b:6b:f2:fb:e2:69:e7:04:61:5d:75:82:d9:e4:8f:62:
         4c:73:16:dd:69:a0:29:a1:26:27:76:c2:da:93:ea:1f:e1:36:
         11:bb:86:75:11:b0:90:df:0d:c3:da:1e:c5:9b:a2:46:5c:19:
         4d:1a:1f:5a:36:46:08:42:f8:a5:79:d9:3b:ef:04:25:b7:df:
         1f:cd:cd:b3:99:35:95:39:a3:48:96:70:08:c7:10:46:6e:b3:
         d3:54:0f:1a:dc:ab:fc:e1:4e:2a:c7:df:cb:08:17:16:20:12:
         74:09:4f:19:bf:70:f5:55:5c:2a:ea:32:7c:d0:02:24:c2:b8:
         d3:58:0d:06:e1:b3:4d:03:91:91:78:9a:ae:0f:79:b9:c8:8b:
         d7:6b:1a:bd:c8:b6:2a:c5:27:07:7f:3b:92:c8:d2:bc:7e:d5:
         3c:c9:05:92:34:c3:c6:5c:c0:23:83:3a:08:6a:80:fe:43:84:
         9b:9b:b1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:28:24 2026 by rpki-client