Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4BDF84FC21F1098668A6623C8310F7CB397FD86A.cer
File:                     4BDF84FC21F1098668A6623C8310F7CB397FD86A.cer (raw, json)
Hash identifier:          clFCYKun5Q6JttNSo0fczt2oalsGaxDi9uCqvY1OBnk=
Subject key identifier:   4B:DF:84:FC:21:F1:09:86:68:A6:62:3C:83:10:F7:CB:39:7F:D8:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       705D6EB00BB3F537948CB21DA219D30F91DE069F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/4BDF84FC21F1098668A6623C8310F7CB397FD86A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 Jan 2026 23:26:39 +0000
Certificate not after:    Fri 29 Jan 2027 23:31:39 +0000
Subordinate resources:    AS: 266545
                          IP: 45.6.192.0/22
                          IP: 2804:3da8::/32
Validation:               Failed, certificate revoked on Thu 05 Feb 2026 18:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5d:6e:b0:0b:b3:f5:37:94:8c:b2:1d:a2:19:d3:0f:91:de:06:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 30 23:26:39 2026 GMT
            Not After : Jan 29 23:31:39 2027 GMT
        Subject: CN=4BDF84FC21F1098668A6623C8310F7CB397FD86A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:46:92:fc:ea:14:93:16:2f:5d:ce:d4:3d:4d:
                    ef:d5:51:df:a6:fb:ce:d6:9f:5a:da:84:a4:25:47:
                    a5:e3:20:71:a3:e8:1a:00:b0:47:b6:ec:df:c6:2f:
                    20:4f:ce:02:9d:b9:fd:5e:79:b3:27:d3:ae:c6:da:
                    ef:fa:a1:64:66:fe:3c:59:c4:bb:12:6a:c6:a8:16:
                    87:d4:80:1c:5b:fb:c1:57:ae:8d:ab:6d:2b:aa:43:
                    d0:69:f8:96:8e:0e:8c:f9:3e:1a:2e:35:b4:84:9a:
                    bd:b6:4c:86:4b:b8:08:b3:e5:92:8a:85:53:05:f9:
                    1f:af:a9:c5:43:a0:91:e0:1f:86:a3:a2:47:74:a2:
                    f7:90:54:92:12:1d:23:fc:e0:d6:29:25:b4:e6:11:
                    6b:7e:4d:f6:22:d1:50:c8:e9:67:fe:20:24:89:ab:
                    b8:dd:77:17:af:a0:8d:e7:58:ef:ed:fc:80:8a:0f:
                    08:b6:5d:63:f0:c5:94:7f:0c:b5:ca:3f:76:09:8c:
                    ba:fa:df:ed:af:00:9b:a4:ba:b6:8b:5f:80:b8:3a:
                    2f:7e:cb:12:7a:4e:ec:53:13:d6:6b:ed:32:83:8a:
                    95:10:9a:1e:8a:29:8b:a9:b1:19:f7:a9:d9:90:d8:
                    77:62:fa:0e:ec:4d:01:32:06:0f:9c:81:e7:e2:18:
                    21:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:DF:84:FC:21:F1:09:86:68:A6:62:3C:83:10:F7:CB:39:7F:D8:6A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/4BDF84FC21F1098668A6623C8310F7CB397FD86A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.192.0/22
                IPv6:
                  2804:3da8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266545

    Signature Algorithm: sha256WithRSAEncryption
         42:00:85:c3:92:10:00:82:9f:b0:73:d5:58:6c:bd:e4:a1:3d:
         89:59:96:92:29:43:71:16:ee:21:cd:24:62:bb:07:1a:8d:dd:
         81:2a:8f:72:93:5c:a8:53:8a:fd:86:fc:8e:80:8d:32:14:c2:
         fc:1e:e1:55:4a:36:3e:7e:4d:af:a8:2a:67:ba:09:cf:32:5d:
         9c:a6:8c:a0:ef:2a:44:6e:f0:5a:5b:a3:04:71:40:ce:8a:8e:
         a7:34:c4:2e:85:2b:fa:ce:01:65:58:ff:73:8a:97:7c:fc:12:
         cf:04:3f:22:e9:2f:78:36:50:81:fa:b0:38:d7:18:f7:63:bb:
         1d:61:e1:84:79:6e:2f:78:1e:f9:f2:d4:22:db:4d:cd:4d:46:
         dc:35:89:5b:ee:48:46:ac:56:24:fb:c6:cf:19:c2:55:55:ce:
         a3:9d:3a:58:01:67:a8:f7:af:14:2e:da:f2:2e:ac:6c:6d:fb:
         54:24:9e:4f:34:08:64:24:ce:e6:8c:08:ab:92:22:5c:aa:50:
         12:e0:2d:72:44:87:09:31:4a:ad:c9:ed:50:61:a5:24:fa:27:
         fd:85:d3:e6:8d:1f:2d:9c:2b:40:e1:b8:16:ce:a4:a2:90:19:
         d9:e8:e6:68:6e:60:1f:c3:89:27:8d:f7:2e:37:44:58:49:f1:
         33:1b:3b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:40:29 2026 by rpki-client