Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
File:                     838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer (raw, json)
Hash identifier:          bXBhGcEo3oOI5JoXeG0Sb5vP+9JZVThirZrEfSz3I5Y=
Subject key identifier:   83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25361B4CC6DA9D81623138CFCD8E9132322F8963
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Aug 2026 14:25:19 +0000
Certificate not after:    Thu 05 Aug 2027 14:30:19 +0000
Subordinate resources:    AS: 269359
                          IP: 45.184.68.0/22
                          IP: 45.230.84.0/23
                          IP: 168.194.248.0/22
                          IP: 2804:6368::/32
Validation:               Failed, certificate revoked on Fri 14 Aug 2026 20:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:36:1b:4c:c6:da:9d:81:62:31:38:cf:cd:8e:91:32:32:2f:89:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  6 14:25:19 2026 GMT
            Not After : Aug  5 14:30:19 2027 GMT
        Subject: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:2d:d7:2a:d2:01:b8:1a:b0:0c:11:45:64:
                    54:50:8b:2a:2c:a6:03:d6:3c:5e:7d:cc:0a:0c:eb:
                    31:1e:41:50:1b:14:a5:b4:75:4b:3d:d2:c5:c1:cc:
                    30:a4:c5:e0:79:29:f8:b7:ee:bb:4e:7e:49:fd:f4:
                    60:ab:1c:2d:31:db:cb:d6:f6:ec:b7:b8:e7:4b:7c:
                    81:50:b2:a3:83:f7:69:bb:64:fc:24:30:7a:14:3a:
                    cc:b4:34:23:37:36:0d:c5:c1:38:c5:5b:08:7d:e5:
                    6e:84:94:a2:8c:a4:59:8b:3f:29:36:1e:b3:ff:03:
                    71:08:5e:9d:97:e5:e6:e8:6b:70:08:a8:67:f2:75:
                    5f:7e:f7:6d:64:df:48:fd:ab:0f:d7:4d:42:2c:11:
                    fb:d3:68:d8:22:0a:42:0c:62:e0:23:08:cb:48:35:
                    52:ba:a4:1a:01:80:77:0a:07:28:8b:51:75:82:03:
                    8d:aa:00:b3:0d:2f:88:47:84:4b:98:72:df:8d:0c:
                    e7:49:ef:6a:71:7a:11:c7:33:92:1c:b4:7f:c4:f6:
                    07:eb:74:8b:0a:b5:a4:2f:97:fd:1c:1e:11:41:68:
                    5f:85:b6:bc:1e:be:52:29:3f:99:3e:13:b2:9a:f8:
                    9f:ab:9d:32:e1:64:86:d3:f9:27:87:7e:9a:80:f1:
                    11:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22
                  45.230.84.0/23
                  168.194.248.0/22
                IPv6:
                  2804:6368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269359

    Signature Algorithm: sha256WithRSAEncryption
         9f:ba:26:5a:9f:cf:da:a8:82:d7:f6:ee:62:cb:c7:e6:40:88:
         57:b4:0d:b4:b6:1d:e7:85:ef:51:62:34:7a:f8:db:67:93:fd:
         6a:da:e9:24:24:35:62:81:f9:b3:72:0c:a6:be:99:5a:a7:9d:
         d9:a9:33:cf:03:d0:b4:74:28:2d:d8:c0:0d:b2:bd:99:5e:ca:
         18:cf:74:4a:d4:dd:68:01:86:84:2c:63:a9:a6:8b:e2:bb:46:
         b7:36:0b:01:34:af:ba:7e:b6:bf:e9:7d:70:e2:52:33:e4:46:
         b7:a8:34:e5:20:d6:af:37:f7:70:af:5e:b6:e9:19:05:02:0d:
         db:89:91:4e:19:2a:0c:d4:ab:9b:91:c7:45:3b:ea:66:bc:f2:
         4a:33:41:e8:37:f5:30:57:86:ee:7c:d0:99:9e:f7:4d:a9:8f:
         f6:5e:93:5f:a6:78:f8:38:e9:b9:0b:b9:d6:a9:29:a6:1b:2f:
         d5:eb:b0:16:9e:1f:13:43:89:9a:58:e2:81:ef:4b:61:90:59:
         1e:02:a2:7c:15:41:35:7e:21:6e:4a:93:87:bb:ff:1c:e3:e0:
         35:e1:85:11:37:eb:ef:46:aa:cf:0f:ff:7f:90:50:82:fa:79:
         a5:10:58:34:59:27:c4:6d:0a:f4:62:b6:84:4f:f2:b1:26:28:
         55:80:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 21:59:36 2026 by rpki-client