Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer
File:                     AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer (raw, json)
Hash identifier:          OxKLWEgqf7K6WPUnwe1d5fKS8Kne0BbFsUZe5J2y6q8=
Subject key identifier:   AF:4C:19:7F:36:65:20:5A:2C:9E:DF:8E:68:0E:8A:E5:75:AF:97:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E5E6FA20AE62DE0FA852A2A7472A3ECF9DD085C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Jun 2025 19:36:09 +0000
Certificate not after:    Mon 29 Jun 2026 19:41:09 +0000
Subordinate resources:    AS: 267188
                          IP: 45.231.28.0/22
                          IP: 2804:4984::/32
Validation:               Failed, certificate revoked on Mon 21 Jul 2025 16:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5e:6f:a2:0a:e6:2d:e0:fa:85:2a:2a:74:72:a3:ec:f9:dd:08:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 30 19:36:09 2025 GMT
            Not After : Jun 29 19:41:09 2026 GMT
        Subject: CN=AF4C197F3665205A2C9EDF8E680E8AE575AF97D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:da:70:dd:d5:b7:21:d6:9d:b4:a6:aa:65:
                    84:a8:ec:58:2f:ef:1e:ba:59:b8:0d:e7:f1:f9:ac:
                    d9:97:08:12:2b:50:9b:26:bf:d1:c0:06:cc:7f:db:
                    80:95:6e:fc:1e:7b:fb:34:87:46:76:7e:9f:f9:f8:
                    b7:80:2b:4a:e0:93:7b:5d:da:54:85:34:39:88:c8:
                    f3:cf:17:34:40:01:f5:bc:fc:df:3e:dc:1b:c7:da:
                    28:3b:c5:84:5d:e2:8e:eb:ce:59:5b:a3:0a:78:96:
                    ec:b6:f3:0b:c1:a5:a2:8a:27:5d:b5:52:f7:d1:d6:
                    fc:8c:6d:92:61:64:43:a5:6b:04:e1:9a:c3:a4:07:
                    16:38:0c:68:4e:ad:6f:14:20:fa:aa:4b:3b:12:b0:
                    d5:c1:e2:ed:9a:d0:48:f0:42:d8:da:5a:59:49:3d:
                    93:f0:4a:d2:ec:1d:c8:e4:a0:d9:c9:c1:95:42:f6:
                    bd:c0:d0:ad:76:66:5f:88:9d:74:9d:59:91:56:17:
                    73:a3:44:fd:d9:dd:5a:8e:98:d6:f2:73:e7:5f:79:
                    08:9d:bd:1e:74:2e:56:51:f5:79:83:b4:6c:43:64:
                    18:39:8f:9c:74:22:b1:53:4b:8c:32:15:d8:61:96:
                    49:89:61:6c:b2:7d:fc:e1:83:b8:cf:40:3c:47:6c:
                    4a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:4C:19:7F:36:65:20:5A:2C:9E:DF:8E:68:0E:8A:E5:75:AF:97:D9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.28.0/22
                IPv6:
                  2804:4984::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267188

    Signature Algorithm: sha256WithRSAEncryption
         6d:e1:21:40:4c:ab:5b:0d:b3:87:de:b3:cd:9d:49:e8:bf:35:
         49:45:f4:e1:8a:7a:d3:ac:3b:7a:e1:48:7f:07:25:0a:76:ee:
         10:eb:b0:de:67:c3:27:2d:6e:4d:8b:a1:83:48:2b:c0:52:c0:
         22:f1:e8:4e:02:b8:7f:9a:dd:ac:b2:ea:28:4c:e4:7c:ea:59:
         7d:4b:61:d2:bf:95:e1:74:35:57:63:13:4b:e3:da:54:47:65:
         f2:bd:9b:72:2e:01:8f:1d:eb:19:7b:84:04:ee:1f:24:7d:e0:
         0d:ce:3c:e4:0e:dc:82:c5:4d:84:02:af:5e:fe:c7:5c:68:ae:
         f0:3b:e1:63:41:38:82:83:54:cf:4b:d3:79:54:7e:50:7d:cd:
         2b:43:1b:37:04:8e:97:89:18:02:0a:70:1e:6a:77:b4:6b:c5:
         b9:48:b4:fa:22:cc:56:e9:23:60:1b:fb:a5:89:ce:4c:8c:d1:
         c1:f9:79:a6:d2:5c:6e:39:79:24:bb:f8:50:24:81:9f:e5:4f:
         b1:62:95:b4:d9:53:49:4a:25:06:ca:e5:f7:ea:8f:bf:8b:4b:
         b8:77:62:f1:2e:2b:21:2a:63:f9:a3:c8:86:fe:56:31:08:35:
         ec:ee:13:22:f0:b2:1b:0d:9e:c1:2a:da:2e:d2:91:40:32:7e:
         95:69:5b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:58:28 2025 by rpki-client