Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
File:                     93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer (raw, json)
Hash identifier:          Kerp/U81TD4jOwsb37Kpniwup1DZAMipJWrp5IZuaqE=
Subject key identifier:   93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7E0B19607079006506749D5A6CEC9A1D37B89C3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Apr 2026 22:11:19 +0000
Certificate not after:    Fri 23 Apr 2027 22:16:19 +0000
Subordinate resources:    AS: 262300
                          IP: 138.36.168.0/22
                          IP: 168.181.112.0/22
                          IP: 177.87.104.0/22
                          IP: 179.0.32.0/22
                          IP: 2804:788::/32
Validation:               Failed, certificate revoked on Sat 25 Apr 2026 18:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0b:19:60:70:79:00:65:06:74:9d:5a:6c:ec:9a:1d:37:b8:9c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 22:11:19 2026 GMT
            Not After : Apr 23 22:16:19 2027 GMT
        Subject: CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:67:13:89:23:6d:cb:dc:34:96:bd:0a:36:fa:
                    89:10:8d:a2:18:64:21:d9:14:a9:5a:a8:ea:06:db:
                    33:ee:04:78:6e:99:2c:85:2d:cd:af:a9:50:25:a8:
                    0c:c3:0b:0c:ee:cf:c3:91:23:cd:7f:a7:31:70:6c:
                    ba:14:70:8a:ef:24:7c:d0:99:9a:0d:7b:f6:96:3f:
                    8a:7f:33:e9:78:87:fb:5b:60:63:e3:87:c8:1f:6f:
                    df:2e:1e:22:ed:7a:9a:ae:4d:65:ff:00:04:2c:77:
                    12:fe:e4:4c:11:69:5a:2d:1c:fc:0c:73:d7:8f:ff:
                    12:d9:d3:3d:a9:06:e8:05:7d:2c:e4:43:ec:2e:ce:
                    df:63:6d:76:79:51:bc:62:7c:d8:0c:d4:fa:aa:78:
                    54:c6:42:3b:b2:d1:d1:e0:56:0e:aa:ff:a3:c5:68:
                    91:0e:49:c8:9d:f4:bf:9a:b5:69:1d:7f:bd:d3:72:
                    21:62:38:0a:d4:48:db:33:98:c8:ed:ff:94:d4:34:
                    a6:23:3f:ec:b1:6a:cc:19:89:cf:c9:c4:a3:65:ab:
                    e8:8f:dd:f7:ef:36:02:10:2e:da:9f:76:cb:f5:ed:
                    8f:28:06:77:0a:98:8b:54:b8:0e:af:3e:4a:3e:fb:
                    03:6a:ea:3d:14:91:af:26:9d:f9:df:83:5d:b7:8f:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.168.0/22
                  168.181.112.0/22
                  177.87.104.0/22
                  179.0.32.0/22
                IPv6:
                  2804:788::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262300

    Signature Algorithm: sha256WithRSAEncryption
         98:24:71:0c:0d:1f:3a:a7:99:97:5e:db:83:ac:69:84:fa:2e:
         ec:96:a7:17:a7:3f:23:44:f4:bd:c7:31:64:04:38:ec:9e:e9:
         9e:a3:cc:a8:28:0a:03:d0:44:42:a3:fb:a3:b9:75:6b:6e:7b:
         8c:d0:e9:e4:de:aa:9a:82:ef:9e:06:ec:d2:36:66:19:02:f1:
         b5:e8:fa:22:35:e1:b9:6b:79:3c:ed:65:81:74:c0:9e:8c:62:
         7a:95:9c:e2:0b:d5:17:7d:00:cd:16:3e:d3:86:d8:7e:32:53:
         ee:c4:77:2d:13:50:1b:fa:b9:85:9e:43:e7:bf:ed:4d:ce:4e:
         cc:85:d1:fc:75:d4:55:91:cc:5e:2f:d1:14:85:6b:74:aa:fa:
         8a:29:4a:ea:b4:3f:cb:6f:40:d3:55:c0:57:58:d7:58:8e:0b:
         dd:c4:1d:29:22:f5:38:78:f4:16:4f:c5:3c:57:a0:82:1e:de:
         7e:30:6c:4d:d8:71:ff:a3:36:62:fb:cd:ea:57:d1:26:c4:f8:
         68:b4:e2:9b:cc:80:11:9e:9c:17:58:5f:56:88:86:e4:75:b6:
         ce:d0:e5:0a:ba:8c:99:95:3f:8d:90:ad:87:ba:54:38:5a:59:
         3e:1e:a2:4c:4f:dd:4f:b9:25:4a:f8:0e:a4:74:f6:74:a4:79:
         af:ce:49:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:56:04 2026 by rpki-client