Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
File: DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer (raw, json)
Hash identifier: X1ssJbgSZXiHFcGwo2d9/2VHoSgwACyv+SgcGkdAl8k=
Subject key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4133A5B797A183AA618A20F544A9C2F667837015
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
caRepository: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 12 Jan 2026 11:34:20 +0000
Certificate not after: Mon 11 Jan 2027 11:39:20 +0000
Subordinate resources: AS: 28270
IP: 131.196.76.0/22
IP: 138.117.124.0/22
IP: 138.121.220.0/22
IP: 138.122.236.0/22
IP: 143.255.112.0/22
IP: 160.238.220.0/22
IP: 168.121.52.0/22
IP: 168.227.44.0/22
IP: 168.228.128.0/22
IP: 168.232.116.0/22
IP: 170.0.204.0/22
IP: 170.245.100.0/22
IP: 170.247.52.0/22
IP: 177.66.64.0/21
IP: 177.67.0.0/21
IP: 177.70.128.0/20
IP: 177.87.144.0/21
IP: 186.219.144.0/20
IP: 186.233.72.0/21
IP: 187.108.96.0/20
IP: 191.6.80.0/21
IP: 200.94.240.0/22
IP: 201.149.120.0/22
IP: 2804:880::/32
Validation: Failed, certificate revoked on Mon 12 Jan 2026 11:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:33:a5:b7:97:a1:83:aa:61:8a:20:f5:44:a9:c2:f6:67:83:70:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 12 11:34:20 2026 GMT
Not After : Jan 11 11:39:20 2027 GMT
Subject: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:5b:b0:60:83:ba:69:2f:6e:2b:e2:50:4c:
a6:d8:5a:28:df:56:a7:09:94:9b:95:a0:16:4e:20:
9e:1c:76:20:dd:ed:73:66:4d:c1:88:1e:fb:39:13:
d0:10:72:23:ea:b1:d5:9f:87:d2:66:bc:30:d1:39:
af:da:3f:55:9c:2b:5d:e6:fc:28:84:e4:c7:4d:f4:
bf:20:84:f5:66:77:d1:2f:68:c6:a0:65:bf:f9:79:
35:1c:8d:f5:57:7f:99:19:7b:3c:f2:fb:ce:f0:f5:
6c:11:bd:48:e6:b0:41:ce:c3:fb:ab:86:5b:f7:a8:
be:26:b1:b3:7d:ae:ca:b3:39:78:09:ca:52:77:2a:
0f:4d:4b:a4:e3:41:00:56:b7:cc:76:4b:74:b6:27:
42:b5:07:20:82:44:97:48:3a:01:7e:6c:f0:03:ca:
f3:e5:1d:68:f3:20:47:45:26:ac:df:ce:ee:07:ae:
a6:4b:5e:5f:a2:2d:db:e5:0e:83:12:e1:2d:63:4f:
2e:51:a8:e3:0f:8f:b4:ca:ba:bd:f9:ed:ae:01:fb:
be:72:7e:64:71:70:82:14:a0:11:b5:b1:11:3d:a3:
b3:ac:0a:58:84:ea:8b:b9:61:4c:34:9c:47:1d:3c:
cc:cd:f1:98:51:fa:7e:96:fa:68:e7:89:ba:bb:09:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.76.0/22
138.117.124.0/22
138.121.220.0/22
138.122.236.0/22
143.255.112.0/22
160.238.220.0/22
168.121.52.0/22
168.227.44.0/22
168.228.128.0/22
168.232.116.0/22
170.0.204.0/22
170.245.100.0/22
170.247.52.0/22
177.66.64.0/21
177.67.0.0/21
177.70.128.0/20
177.87.144.0/21
186.219.144.0/20
186.233.72.0/21
187.108.96.0/20
191.6.80.0/21
200.94.240.0/22
201.149.120.0/22
IPv6:
2804:880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28270
Signature Algorithm: sha256WithRSAEncryption
50:a2:f2:49:84:4c:99:7b:91:84:fa:f3:03:95:75:77:d4:d0:
b3:85:97:ef:bb:81:54:e6:18:9b:6f:79:70:04:f0:ce:c1:99:
77:5a:12:26:2f:b2:28:2d:02:d7:75:77:4b:8b:ba:f6:f3:52:
d2:7a:d4:e9:11:a1:d7:bb:d4:61:95:d9:8b:09:e2:59:5f:70:
ab:bb:09:86:fe:6b:ee:2a:55:a3:96:85:ee:90:bc:26:a0:04:
54:d0:15:8c:a9:43:1e:be:75:d8:12:95:7f:16:25:be:dd:db:
f7:f1:95:f8:d8:e1:a1:94:2e:a8:98:4d:ff:7e:bb:0e:09:a5:
99:62:1c:d3:43:88:4d:e1:02:c1:42:e7:8c:3a:ed:f7:ed:e3:
e4:6a:60:7f:72:8a:6f:ba:b1:c9:69:c4:36:c4:c2:9a:b1:ab:
94:a9:02:6d:67:80:b0:c3:6b:28:98:bf:7a:29:d5:61:65:c5:
b0:92:63:32:84:5b:0e:05:71:91:b3:7b:1b:a7:16:05:d5:8b:
ab:cc:bc:76:9a:0d:d8:fb:aa:8d:b1:56:a3:71:c4:96:0a:c4:
00:cd:33:e3:0b:45:ff:0c:43:7d:a8:42:ca:98:c8:36:7e:67:
bb:68:d0:d1:1c:f7:45:2f:c3:54:a3:31:2c:d7:d3:fa:fb:4a:
38:9c:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:08 2026 by rpki-client