Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4D50CC6156147AA39474DCFF014FE478639F7DD3.cer
File:                     4D50CC6156147AA39474DCFF014FE478639F7DD3.cer (raw, json)
Hash identifier:          qqXSQ9Aj5clNVdnbQc3cVS4RamPslhMJrpeB+HrXdN0=
Subject key identifier:   4D:50:CC:61:56:14:7A:A3:94:74:DC:FF:01:4F:E4:78:63:9F:7D:D3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E110471870E652291241F3AA2B99779D280EBDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/4D50CC6156147AA39474DCFF014FE478639F7DD3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Jul 2025 13:42:53 +0000
Certificate not after:    Tue 07 Jul 2026 13:47:53 +0000
Subordinate resources:    AS: 266021
                          IP: 170.245.36.0/22
                          IP: 2804:3940::/32
Validation:               Failed, certificate revoked on Mon 14 Jul 2025 08:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:11:04:71:87:0e:65:22:91:24:1f:3a:a2:b9:97:79:d2:80:eb:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  8 13:42:53 2025 GMT
            Not After : Jul  7 13:47:53 2026 GMT
        Subject: CN=4D50CC6156147AA39474DCFF014FE478639F7DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:6c:7d:bb:a5:a8:73:14:f2:b0:76:2a:4d:
                    9a:50:ad:5e:04:ed:5a:fd:94:5b:35:a1:44:53:35:
                    f5:3c:65:11:c6:8b:61:5d:8b:66:55:ff:92:36:39:
                    26:fd:6e:cd:e9:40:c9:4b:8c:e7:1a:f7:1f:b9:be:
                    4c:9d:dc:58:28:31:2b:bc:a6:c2:49:23:5e:7e:24:
                    91:02:d9:17:24:b1:9f:cf:4b:1f:e5:a8:71:a5:53:
                    31:01:86:c2:15:34:50:a6:69:6f:e2:0e:41:df:c4:
                    58:bb:e8:fd:61:ad:60:5e:c4:55:ee:24:0c:86:a6:
                    73:98:ca:e0:da:ae:82:87:51:6c:5b:95:c8:a1:3f:
                    39:67:4b:5b:e7:66:93:1f:80:fc:ab:26:85:bc:85:
                    35:28:59:8b:f8:71:b3:06:09:61:51:6f:42:29:a9:
                    1b:8a:01:54:64:66:77:26:8d:2d:0c:c5:ae:7f:7f:
                    14:9b:f0:ea:e5:ad:1f:89:f3:e6:8c:18:dc:70:f6:
                    04:41:2d:24:ec:c5:33:07:be:a4:01:2c:62:06:c4:
                    32:3c:f0:f4:39:91:40:38:23:6b:12:13:1a:54:16:
                    ff:40:01:1a:85:28:2b:aa:1e:e1:e9:ab:32:3e:ce:
                    9c:16:bb:89:eb:74:bc:c1:62:15:fc:9b:2b:af:8e:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:50:CC:61:56:14:7A:A3:94:74:DC:FF:01:4F:E4:78:63:9F:7D:D3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/4D50CC6156147AA39474DCFF014FE478639F7DD3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.36.0/22
                IPv6:
                  2804:3940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266021

    Signature Algorithm: sha256WithRSAEncryption
         6a:a8:f9:95:06:41:12:aa:64:7b:e8:dd:cd:70:83:02:2e:b6:
         5a:84:6d:22:2c:ad:54:97:09:d1:dd:6c:38:bf:9c:06:58:66:
         63:74:ae:f6:7b:73:35:50:bd:8a:4b:ee:8b:bd:cb:36:0b:57:
         87:98:b5:05:a8:75:61:6d:37:27:c9:a8:9a:09:d9:2b:f2:4a:
         91:00:e0:30:59:21:27:0a:28:e0:44:7b:a7:c9:b3:97:9e:fe:
         5e:c5:70:ec:c1:21:f4:1f:07:2f:84:eb:19:28:26:ab:31:bc:
         9a:4d:a8:11:5f:27:0d:4f:39:88:24:f8:7d:b4:a2:b0:2f:03:
         f2:7b:d3:94:e9:30:e0:14:66:c9:93:7a:aa:40:31:1f:96:02:
         da:47:71:81:2e:04:d7:a0:78:88:17:5e:cd:fc:c9:90:a6:2b:
         6b:f1:2b:e9:c3:fb:95:e0:8f:84:84:f3:bb:16:60:89:1d:14:
         52:c4:2c:60:99:55:77:a0:00:11:01:4e:56:85:ee:47:e0:c9:
         12:34:0a:cb:2b:c8:0d:5a:54:69:78:57:ff:a9:30:2a:b3:f8:
         17:64:07:a1:8a:12:1c:0a:02:f4:b4:d2:b2:50:de:d0:50:38:
         4c:e1:7e:72:52:49:f5:a5:41:13:41:69:d7:ed:34:c4:89:91:
         c3:36:7e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:34:20 2025 by rpki-client