Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/495F7F203409375C760F0961F1FD82C2C89541CC.cer
File:                     495F7F203409375C760F0961F1FD82C2C89541CC.cer (raw, json)
Hash identifier:          dIe91DFHSP5+w50spns2x/HB7OvAoEOgavPEMq+US5A=
Subject key identifier:   49:5F:7F:20:34:09:37:5C:76:0F:09:61:F1:FD:82:C2:C8:95:41:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11A781B9B910AE4FFDB2CEB32BC1CD85EB2037E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/495F7F203409375C760F0961F1FD82C2C89541CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Mar 2026 14:46:37 +0000
Certificate not after:    Wed 03 Mar 2027 14:51:37 +0000
Subordinate resources:    AS: 270358
                          IP: 190.89.72.0/22
                          IP: 2804:6ac8::/32
Validation:               Failed, certificate revoked on Tue 24 Mar 2026 18:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a7:81:b9:b9:10:ae:4f:fd:b2:ce:b3:2b:c1:cd:85:eb:20:37:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  4 14:46:37 2026 GMT
            Not After : Mar  3 14:51:37 2027 GMT
        Subject: CN=495F7F203409375C760F0961F1FD82C2C89541CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:f3:46:7f:d1:04:1d:69:04:7e:ac:fe:54:
                    9a:ae:af:ed:73:e7:3e:76:fa:ce:c8:f6:28:47:62:
                    7e:d9:48:7b:05:7c:fe:cb:d3:06:a6:93:ef:b7:5d:
                    6c:83:94:30:47:aa:2f:70:6d:f6:f2:f6:06:27:bf:
                    00:77:bc:aa:d7:91:de:e5:1e:f2:30:8e:73:a4:cd:
                    e9:94:dd:0d:61:2b:ee:29:b1:2d:df:16:79:0b:21:
                    20:63:5b:8a:ce:f6:f0:1d:b6:35:9b:8c:45:50:d8:
                    bb:46:13:36:80:8e:39:d8:b8:86:eb:65:5f:71:da:
                    46:2c:fc:07:46:23:d8:e7:ad:2d:20:8a:6d:4f:83:
                    57:66:4a:aa:f0:7b:b1:24:0f:61:93:22:29:ad:ed:
                    13:a3:8f:7a:95:da:04:61:73:41:cc:ab:e7:98:f1:
                    43:00:d3:5b:4d:04:5d:4c:89:aa:85:c5:c5:5f:26:
                    5a:74:ac:97:fe:ee:07:5e:42:d7:01:0c:79:2d:bd:
                    3f:15:1e:80:66:e2:d0:f0:1c:e6:18:8e:95:d0:66:
                    d0:f7:01:ea:83:56:6d:bc:d8:99:32:59:28:fe:a5:
                    c8:d5:4e:82:dd:35:6b:5e:81:c1:ab:ba:37:e6:c9:
                    c0:04:96:27:30:78:88:07:b3:94:e8:64:3d:ad:55:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:5F:7F:20:34:09:37:5C:76:0F:09:61:F1:FD:82:C2:C8:95:41:CC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/495F7F203409375C760F0961F1FD82C2C89541CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.72.0/22
                IPv6:
                  2804:6ac8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270358

    Signature Algorithm: sha256WithRSAEncryption
         96:c3:cd:38:4b:72:30:28:ba:69:da:ec:9c:a7:15:fb:80:3d:
         a6:19:2b:7c:1a:48:73:34:50:30:0e:b4:e1:b4:2c:97:8c:a7:
         7e:3e:bb:9d:f0:69:18:cd:2c:89:02:c6:06:0e:5b:db:98:05:
         d0:a6:a2:31:b7:f6:12:33:f7:67:a1:43:20:62:72:5e:3a:a3:
         37:21:1b:ad:8d:42:6d:e8:79:0a:ef:e4:1c:a7:35:2a:c2:19:
         da:a1:eb:e5:2d:60:f6:e6:e7:45:88:b4:46:c9:8e:53:27:32:
         38:23:70:c2:97:4f:3a:e1:8d:80:e1:df:57:0a:2d:df:74:8d:
         42:7e:13:4f:a9:85:49:f6:b5:27:d5:80:d1:90:f1:81:c5:65:
         74:6e:3e:ed:26:58:b1:53:54:4a:8e:9f:09:c6:77:b5:6f:a6:
         72:b9:05:80:1d:2f:de:9a:24:eb:6b:df:97:00:38:c7:e0:39:
         df:9b:e7:e0:a4:b5:59:b1:7f:65:68:a0:56:0f:f1:86:75:7e:
         7e:70:73:79:16:1c:87:e0:e5:21:ee:0d:8b:ea:77:25:27:57:
         e5:68:6e:ba:da:ff:39:36:20:05:12:0b:fe:10:a8:da:4e:a3:
         e1:42:8f:94:cc:cc:00:01:6e:58:ef:e9:ae:81:71:d0:d8:9d:
         5c:1c:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 11:12:15 2026 by rpki-client