Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.cer
File:                     B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.cer (raw, json)
Hash identifier:          91uyeY+5o14vqWxhZanMlBHBFsWsLyMScD2T3dVGmlI=
Subject key identifier:   B8:31:32:53:BF:01:E4:DE:6E:DC:CC:6C:0C:41:4D:03:5A:F1:E8:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0EB6DAFBB15F31F81C755DA5B9CB731BD51C047F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 06 Jul 2025 14:47:06 +0000
Certificate not after:    Sun 05 Jul 2026 14:52:06 +0000
Subordinate resources:    AS: 61776
                          IP: 143.208.136.0/22
                          IP: 177.53.136.0/22
                          IP: 200.196.136.0/22
                          IP: 2804:192c::/32
Validation:               Failed, certificate revoked on Mon 14 Jul 2025 21:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b6:da:fb:b1:5f:31:f8:1c:75:5d:a5:b9:cb:73:1b:d5:1c:04:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  6 14:47:06 2025 GMT
            Not After : Jul  5 14:52:06 2026 GMT
        Subject: CN=B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b2:7a:ff:55:36:06:03:d7:12:5b:c7:33:37:
                    25:6b:25:32:15:75:64:e9:53:3a:01:f6:aa:c7:3f:
                    3e:63:e8:5d:69:73:19:7b:f2:f5:5b:f1:95:c2:97:
                    76:f2:f9:e9:d7:b7:2a:01:56:2e:0a:56:77:5a:b2:
                    77:9e:09:dc:94:82:09:80:11:86:ed:d3:f6:3c:4c:
                    91:6f:a8:c6:17:cd:1c:0f:d8:98:cb:2c:98:cd:53:
                    df:a3:48:a3:64:33:52:15:41:98:8f:03:06:1b:fe:
                    b3:87:75:93:3f:96:ea:b2:3c:77:9f:6a:87:8f:0a:
                    6d:ce:59:39:11:f5:af:26:67:0d:e2:05:fe:31:d8:
                    10:c0:07:59:3e:e8:62:b9:74:1c:ed:7c:94:a2:4d:
                    dd:55:fb:03:c1:1a:f5:b0:1d:52:4b:ad:72:4c:77:
                    bc:6d:32:39:ae:40:b1:9c:8a:d7:7e:91:45:e8:64:
                    ef:78:15:ba:00:20:89:8f:92:48:cf:54:6e:b8:f3:
                    3f:aa:b7:99:da:18:2f:ac:7c:b5:0c:83:d7:1d:88:
                    c8:e4:bd:c2:85:24:8b:fe:f9:fc:e4:34:3b:10:61:
                    0d:5b:6b:c5:3c:a0:8e:7b:81:2a:b6:7e:9a:a0:f7:
                    1b:eb:52:7f:b7:29:52:a6:36:65:9e:ac:73:ad:5d:
                    c3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:31:32:53:BF:01:E4:DE:6E:DC:CC:6C:0C:41:4D:03:5A:F1:E8:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.136.0/22
                  177.53.136.0/22
                  200.196.136.0/22
                IPv6:
                  2804:192c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61776

    Signature Algorithm: sha256WithRSAEncryption
         7e:45:2b:be:81:af:9b:ab:54:ff:d8:44:b1:93:70:0b:ae:5c:
         d9:f6:a4:ca:c6:1c:bc:c9:84:aa:e2:ea:94:1e:34:d9:13:c3:
         be:13:db:04:1a:0b:00:35:32:81:73:a9:e6:3f:e1:06:65:9d:
         2c:2b:c0:8a:43:53:be:0c:cc:bd:35:51:c1:e7:96:5d:54:18:
         6a:8a:fb:3e:b0:52:d3:68:cf:9e:ed:48:88:e0:ab:55:ee:b8:
         93:a7:2d:c8:e0:e3:67:94:f8:3d:60:9a:95:0f:43:68:8e:28:
         22:5e:28:31:21:01:b9:4e:3a:23:e9:96:af:28:77:09:64:95:
         64:9e:36:26:bc:96:a0:dc:73:e7:2b:79:a6:9e:7f:d9:00:7a:
         ca:7d:07:ba:8a:79:05:d9:1c:ea:f4:10:67:2c:c0:38:27:4d:
         06:6e:81:47:47:f8:4f:f5:7b:df:63:47:9a:5b:6e:dc:c3:de:
         7a:a4:84:49:7c:06:79:b9:ee:41:c9:f1:de:16:30:df:79:7c:
         38:7a:c4:68:cf:5a:bb:43:f0:a2:9d:38:15:ea:70:09:3b:7e:
         de:94:57:91:d8:b1:db:24:31:38:7b:df:6e:50:e9:4a:1b:e6:
         83:e2:e6:2c:a6:8b:34:8f:89:2f:fc:45:18:cf:7e:a8:77:2f:
         c8:25:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:37:35 2025 by rpki-client