Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A8AD964EDA548CEE2FC2E4167108758168B1F2B7.cer
File:                     A8AD964EDA548CEE2FC2E4167108758168B1F2B7.cer (raw, json)
Hash identifier:          fWjt1QRA9IRLjRraCyT2BJhhKiEkEylVWQr8pa+wV8U=
Subject key identifier:   A8:AD:96:4E:DA:54:8C:EE:2F:C2:E4:16:71:08:75:81:68:B1:F2:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       66D5E4AF73B158E75C39B509DCF1A6FC9C31CF02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/A8AD964EDA548CEE2FC2E4167108758168B1F2B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Jul 2025 18:44:02 +0000
Certificate not after:    Mon 13 Jul 2026 18:49:02 +0000
Subordinate resources:    AS: 266021
                          IP: 170.245.36.0/22
                          IP: 2804:3940::/32
Validation:               Failed, certificate revoked on Sat 19 Jul 2025 16:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d5:e4:af:73:b1:58:e7:5c:39:b5:09:dc:f1:a6:fc:9c:31:cf:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 14 18:44:02 2025 GMT
            Not After : Jul 13 18:49:02 2026 GMT
        Subject: CN=A8AD964EDA548CEE2FC2E4167108758168B1F2B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:10:d5:76:12:c1:7c:fd:9d:b6:5a:c3:70:
                    7b:71:5a:f3:3c:e0:f6:6d:25:07:9a:54:d5:d5:19:
                    c2:d7:7d:8f:90:3c:44:a5:6d:1f:13:36:5a:bd:64:
                    cb:f1:20:ef:01:f2:4b:48:52:6a:68:60:05:c3:41:
                    ad:86:1e:d5:3b:a1:56:26:85:50:25:4c:b0:39:7a:
                    92:a6:a1:3a:db:0d:42:90:8c:0d:0c:75:04:ae:29:
                    21:09:d7:34:e2:a4:8d:60:10:38:2e:2d:c2:af:47:
                    b8:5c:92:7b:c6:b3:fd:28:93:a6:50:db:ac:74:9c:
                    ce:75:d1:bc:a1:30:ea:a3:c2:19:ee:6e:43:2e:94:
                    bb:80:4b:00:11:e0:b7:c3:18:b7:08:3c:ea:a4:3d:
                    28:d8:a0:14:3b:9d:e1:41:c9:a4:30:ef:fe:d2:17:
                    92:82:4a:82:06:04:90:71:dc:77:ad:db:9a:3d:b9:
                    85:7d:8f:4a:d5:d9:e0:05:97:82:57:c5:42:df:eb:
                    d4:ef:b1:ba:60:38:e9:a0:2a:40:58:4d:ca:45:74:
                    e6:d1:13:de:5c:ef:c7:fb:36:37:07:8d:5f:d0:ce:
                    95:35:21:32:c9:30:cd:bc:e6:03:c2:95:8c:ad:02:
                    68:3c:e5:a2:88:af:b0:fc:a1:51:f3:94:9b:b3:cf:
                    18:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:AD:96:4E:DA:54:8C:EE:2F:C2:E4:16:71:08:75:81:68:B1:F2:B7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/A8AD964EDA548CEE2FC2E4167108758168B1F2B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.36.0/22
                IPv6:
                  2804:3940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266021

    Signature Algorithm: sha256WithRSAEncryption
         97:1e:62:8e:63:ae:60:b0:63:e3:52:52:ed:46:66:7f:ce:5e:
         1a:df:23:f9:0e:85:e1:96:c5:04:6d:17:ac:07:81:a0:1b:03:
         50:4a:ec:f6:d6:3a:bd:b6:41:1a:0a:66:42:1c:ee:bf:d8:06:
         b6:24:da:80:44:6f:65:e6:7a:16:2b:1f:6c:d6:68:5c:c1:a6:
         d4:67:a9:4f:a7:cc:4f:b0:91:cb:31:e0:b8:66:2f:92:39:4e:
         ea:88:5d:0d:ab:35:7b:4d:16:83:c4:f7:7f:ac:7f:af:2b:32:
         6a:40:21:0a:40:4a:22:bd:aa:bb:ea:c5:cb:68:ee:8f:99:dc:
         d9:ca:e5:2a:ec:b1:62:b6:5c:c1:0e:c2:91:53:b4:4e:c1:86:
         e8:6a:4c:57:11:17:ed:c7:b8:05:4b:93:53:03:e5:4a:f5:95:
         e0:93:84:43:a4:c8:9f:b0:75:84:ee:c6:47:90:76:05:cc:39:
         c5:5d:59:04:e6:20:60:e3:0c:94:33:07:41:43:f7:f0:91:d5:
         91:f9:0d:d6:35:8f:e8:73:55:7e:c6:94:23:44:ad:52:3d:25:
         dc:60:ae:9a:2b:b0:82:59:b4:70:ad:46:04:45:3d:77:96:e2:
         ea:8e:53:3c:af:63:66:b4:2e:9d:50:fe:72:9d:c6:a5:22:37:
         ad:76:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:46:43 2025 by rpki-client