Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
File:                     9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer (raw, json)
Hash identifier:          mCzH65BbkSmGXzMaTIvLIOn7PVUM3U7kv1qWBByWcEA=
Subject key identifier:   9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B28EA2E7F2BA0B08CE674BAED8091360163073B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jun 2026 23:27:00 +0000
Certificate not after:    Tue 15 Jun 2027 23:32:00 +0000
Subordinate resources:    AS: 266140
                          IP: 45.6.164.0/22
                          IP: 2804:3b4c::/32
Validation:               Failed, certificate revoked on Mon 22 Jun 2026 19:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:28:ea:2e:7f:2b:a0:b0:8c:e6:74:ba:ed:80:91:36:01:63:07:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 16 23:27:00 2026 GMT
            Not After : Jun 15 23:32:00 2027 GMT
        Subject: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:bc:31:f9:44:5b:c5:6a:17:e7:0d:9d:0f:
                    ab:13:c6:b6:ad:ac:aa:c3:fe:ed:57:94:d8:ed:1e:
                    05:8d:5d:37:b3:03:6b:ae:eb:9c:96:ae:c9:31:e4:
                    9b:e6:53:08:d4:bb:ed:50:fa:a1:12:51:a4:0f:77:
                    d8:48:6f:be:a6:5f:42:cb:21:08:0d:37:92:82:98:
                    38:b2:25:86:35:d9:f2:5c:95:b6:01:16:95:9d:b0:
                    03:7a:0c:77:8d:c6:62:e2:b1:22:99:d8:9e:32:64:
                    d2:06:bf:0f:9f:ba:d0:ca:2f:c8:44:93:ef:a8:87:
                    2f:af:90:d9:f7:5d:24:29:6b:75:fd:fe:7e:ae:79:
                    b6:d9:39:f2:cc:83:58:61:62:f6:a2:80:8a:41:7e:
                    50:db:0c:7d:13:4b:09:a3:f2:dc:1a:57:76:02:13:
                    c7:ab:87:f7:94:62:0a:0a:37:5f:d8:d6:f4:30:ee:
                    a0:bd:9f:f3:07:46:63:8a:89:44:17:7c:c9:84:93:
                    42:9d:20:a3:9e:0b:ed:64:a0:5c:2d:48:9a:94:a6:
                    c3:32:d8:35:b3:bc:1c:2f:8e:e2:09:f9:11:22:af:
                    c0:9f:ce:f5:27:8b:9c:30:d3:7e:a4:1e:cd:13:5d:
                    c3:68:2f:60:5c:56:62:fc:66:95:91:83:55:95:4a:
                    ed:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.164.0/22
                IPv6:
                  2804:3b4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266140

    Signature Algorithm: sha256WithRSAEncryption
         ca:1d:e1:b9:32:03:6e:47:57:9a:f6:e0:91:c9:93:ad:c3:46:
         4f:bf:cf:b3:5e:8d:4a:b3:fc:8b:d8:b6:3d:19:67:86:49:8f:
         e5:d5:b3:90:45:2c:aa:ec:65:b2:9c:50:74:9c:f3:7d:63:7f:
         19:85:4b:a1:62:38:0d:fc:1a:9a:64:43:43:0e:c2:a1:72:31:
         15:c1:b9:72:41:2d:eb:da:3e:38:61:36:80:cd:35:fa:7b:94:
         23:67:f0:d5:f2:f5:c8:9d:85:a6:61:80:3d:64:b1:b4:e6:47:
         4b:c1:9b:ec:69:2e:36:a1:76:32:27:7c:31:ec:be:e6:5a:77:
         89:f1:cd:1b:93:ca:ab:60:73:19:4c:c5:d4:15:59:bd:7d:66:
         fc:aa:ae:fe:ec:1c:46:74:62:b9:05:1f:91:95:0b:9d:95:d9:
         9e:7b:92:ae:96:d7:51:44:da:b5:87:ac:bc:41:0e:a5:2c:3b:
         fb:95:c0:73:78:72:4d:ee:38:37:0b:27:1c:a8:41:0d:e0:77:
         26:8d:10:ef:df:af:47:f6:5c:93:83:72:6e:69:1c:a0:70:c2:
         30:a4:11:72:53:7e:ca:72:90:cc:98:ad:af:db:bc:31:3c:45:
         eb:db:a8:ed:95:21:31:24:53:22:a1:f7:ef:2f:52:70:fe:d0:
         c1:ba:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:32:46 2026 by rpki-client