Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.cer
File:                     284EEA8E6EDB94AF9793A26E511B4993CF092BCA.cer (raw, json)
Hash identifier:          xYQuDc5taLaUU36gnqh9GCXuMzgtd1sIWfunNDzZwZA=
Subject key identifier:   28:4E:EA:8E:6E:DB:94:AF:97:93:A2:6E:51:1B:49:93:CF:09:2B:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       72F8D0E2F096AFB028B4632B2BFC462A6C28F098
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Jul 2026 08:20:27 +0000
Certificate not after:    Thu 29 Jul 2027 08:25:27 +0000
Subordinate resources:    AS: 268020
                          IP: 45.167.8.0/22
                          IP: 2804:56bc::/32
Validation:               Failed, certificate revoked on Fri 21 Aug 2026 17:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f8:d0:e2:f0:96:af:b0:28:b4:63:2b:2b:fc:46:2a:6c:28:f0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 30 08:20:27 2026 GMT
            Not After : Jul 29 08:25:27 2027 GMT
        Subject: CN=284EEA8E6EDB94AF9793A26E511B4993CF092BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:57:74:6d:48:4c:24:b9:50:ba:cf:ed:98:
                    ab:7c:1f:89:64:67:b4:87:62:25:29:7e:b8:dd:8e:
                    e9:8d:ae:a5:40:43:4d:d5:2c:11:3a:ec:4a:e3:f4:
                    dd:b7:13:ac:b3:e7:d7:c5:4b:71:06:29:b8:14:a8:
                    cc:dc:5c:3c:eb:2d:38:0e:d6:7e:86:90:fe:fd:04:
                    69:27:81:d9:47:7f:48:a3:83:9d:39:23:34:35:61:
                    c5:ca:d8:fe:fd:0c:67:5e:e5:45:2a:92:01:11:32:
                    ce:40:ab:01:fa:dd:ba:b5:ef:04:f1:d4:88:a3:26:
                    b9:0c:52:8f:49:70:f3:fb:9d:e0:86:80:a7:af:8a:
                    1d:f7:82:d9:19:0e:85:64:5c:b7:d1:41:13:2f:f9:
                    a8:36:63:9c:3c:f9:78:01:d0:ab:e7:5e:50:c2:d5:
                    78:74:58:0f:cc:cc:70:cd:ee:63:07:c9:f2:26:69:
                    7a:76:3a:ca:5a:06:f6:20:ca:e2:61:64:f8:a5:fb:
                    7d:a4:46:ce:7f:0f:e7:74:30:25:a5:4e:06:5c:1d:
                    3d:f2:13:11:05:a7:23:e4:32:49:53:38:70:d6:47:
                    d7:fb:36:d2:44:62:c2:db:8d:59:af:e3:1a:6a:53:
                    1b:a9:38:b5:a3:c6:f2:06:14:b5:7d:e3:c5:89:3a:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:4E:EA:8E:6E:DB:94:AF:97:93:A2:6E:51:1B:49:93:CF:09:2B:CA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.8.0/22
                IPv6:
                  2804:56bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268020

    Signature Algorithm: sha256WithRSAEncryption
         b9:46:29:5c:39:1c:c1:4d:46:b6:cb:1f:7e:2d:c3:cd:bb:48:
         df:6c:a9:b9:ed:76:2a:86:73:d1:a4:0f:d3:cd:52:92:95:f8:
         ca:a8:d0:f5:1b:81:6f:c8:29:33:b7:98:86:6b:5b:29:48:43:
         ce:d2:a7:ad:25:85:2e:40:69:f5:9b:8e:df:41:e6:9e:fa:4e:
         1c:df:b5:d3:c7:b2:4f:04:04:27:38:6b:ce:f7:b8:c5:3d:6b:
         87:2d:7d:bc:f1:b2:63:66:c7:c4:ae:06:33:3f:7c:8c:d2:a3:
         ba:07:58:2b:49:e7:43:f9:b8:33:d8:3d:e3:65:77:39:a8:39:
         01:a8:e4:e5:c6:fd:0f:e2:f1:d4:d6:9b:1a:cd:a4:d1:bc:e2:
         7f:9c:83:18:e8:59:f9:5e:c8:77:49:48:f8:9c:c8:ad:d2:bd:
         b2:83:67:48:bc:af:e2:b7:11:9f:11:ec:92:50:ed:a2:33:31:
         cd:c1:39:28:1d:37:48:71:34:92:61:b0:d2:53:16:72:04:78:
         66:7f:d9:66:3c:3c:bf:b3:24:e2:f7:92:87:e4:e2:8e:f0:1b:
         60:af:e3:82:93:76:17:ec:aa:8b:ba:27:ca:f8:98:ea:97:af:
         31:05:78:08:5b:f7:53:81:b3:95:9d:c1:39:6b:e2:e6:a6:7e:
         10:05:cc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:26:24 2026 by rpki-client