Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3BB50D05BD75C9460B4134F1F7C08D374D2FA08B.cer
File:                     3BB50D05BD75C9460B4134F1F7C08D374D2FA08B.cer (raw, json)
Hash identifier:          ul5b0M9BhOAKMZrTjiG5CqnBE052kBlmUBq/jUkjEG0=
Subject key identifier:   3B:B5:0D:05:BD:75:C9:46:0B:41:34:F1:F7:C0:8D:37:4D:2F:A0:8B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       216EF47BD93B7A584CBB4E12ED4D1B92A58C50D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/3BB50D05BD75C9460B4134F1F7C08D374D2FA08B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Oct 2025 18:56:09 +0000
Certificate not after:    Mon 26 Oct 2026 19:01:09 +0000
Subordinate resources:    AS: 271630
                          IP: 179.63.140.0/22
                          IP: 2804:7e88::/32
Validation:               Failed, certificate revoked on Sun 02 Nov 2025 16:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6e:f4:7b:d9:3b:7a:58:4c:bb:4e:12:ed:4d:1b:92:a5:8c:50:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 27 18:56:09 2025 GMT
            Not After : Oct 26 19:01:09 2026 GMT
        Subject: CN=3BB50D05BD75C9460B4134F1F7C08D374D2FA08B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:45:f8:4e:12:54:a2:0a:4d:68:b2:d5:4a:
                    0b:16:07:b8:8a:40:48:49:15:d9:e1:7f:83:5f:07:
                    19:e1:8d:c8:6d:d7:76:b6:f7:48:41:bc:6f:ba:ad:
                    76:4b:5b:94:2d:f8:47:65:2c:e5:04:13:f7:d7:de:
                    87:64:88:78:18:96:46:a4:43:29:b1:0c:0f:fe:53:
                    5b:e3:bd:59:c0:8e:ae:dd:7d:67:6e:38:58:1f:a8:
                    72:6b:3a:2f:cd:e0:6c:f5:b2:c3:ce:5f:b2:cf:48:
                    27:91:11:5b:a1:80:b2:f5:6f:ad:c8:12:f2:31:5d:
                    6a:8f:11:12:94:c2:66:02:70:30:40:65:d9:5a:1f:
                    63:52:01:9c:d6:aa:e9:d2:f1:09:73:1f:1b:bf:94:
                    71:62:85:57:f5:79:f3:2e:2c:d3:d0:72:ea:fc:f1:
                    aa:d2:5b:0c:47:a7:0b:c7:db:3f:85:fb:d9:be:11:
                    e6:34:92:b1:ef:75:ca:2e:45:43:d7:4c:1a:f9:08:
                    8c:8e:7a:d0:c8:c4:97:b5:98:50:c6:1e:08:45:f5:
                    1f:72:6a:ae:25:a0:a0:31:54:bb:e5:64:23:47:cf:
                    5e:af:31:d3:38:09:98:bd:72:79:b6:52:85:23:6c:
                    59:cd:0c:fe:e7:9b:bc:22:66:1f:20:a1:9e:54:74:
                    1f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:B5:0D:05:BD:75:C9:46:0B:41:34:F1:F7:C0:8D:37:4D:2F:A0:8B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/3BB50D05BD75C9460B4134F1F7C08D374D2FA08B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.140.0/22
                IPv6:
                  2804:7e88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271630

    Signature Algorithm: sha256WithRSAEncryption
         ab:6d:19:b3:bc:9f:41:29:a8:12:fe:77:c3:ad:cd:30:44:6a:
         77:36:89:a0:5a:07:ef:bd:2a:dd:72:80:64:ad:dc:eb:71:49:
         f8:12:67:bf:48:8f:52:68:94:26:3b:92:a7:c8:86:76:f1:10:
         a1:70:b9:b2:f4:c2:46:a4:a0:85:15:ad:85:74:4f:ed:4c:2e:
         de:2b:b2:de:a1:87:76:17:db:f2:24:91:a8:e5:dd:41:3c:a1:
         e6:d0:02:19:b4:42:01:35:10:d2:29:b3:a1:f8:9a:2f:81:57:
         1f:2d:54:3c:6c:7f:70:0b:94:91:5a:07:83:c6:eb:83:66:37:
         3d:5d:5d:a2:e2:ff:13:ed:00:cf:3f:26:74:b0:7e:34:dc:f9:
         21:5c:7b:18:ec:cc:60:3b:75:37:79:7d:4d:e2:d3:94:3d:15:
         79:03:33:70:1a:1b:8c:2f:a1:f6:d8:9c:64:d5:91:78:8d:8a:
         d1:73:68:5a:88:bc:9a:8a:c7:e6:36:ad:1d:af:93:f7:01:a4:
         73:c3:cf:6b:55:a5:6f:d9:e4:c5:bf:6b:9e:9c:c3:a4:11:ae:
         ba:6e:3f:60:60:37:43:ac:b7:85:c3:53:f2:be:9b:42:f6:3a:
         2f:37:f6:de:2f:65:23:43:3d:2e:40:15:d0:26:35:2e:45:47:
         10:e8:37:5e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUIW70e9k7elhMu04S7U0bkqWMUNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMjcxODU2MDlaFw0yNjEwMjYxOTAxMDlaMDMxMTAvBgNV
BAMTKDNCQjUwRDA1QkQ3NUM5NDYwQjQxMzRGMUY3QzA4RDM3NEQyRkEwOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDEX4ThJUogpNaLLVSgsWB7iK
QEhJFdnhf4NfBxnhjcht13a290hBvG+6rXZLW5Qt+EdlLOUEE/fX3odkiHgYlkak
QymxDA/+U1vjvVnAjq7dfWduOFgfqHJrOi/N4Gz1ssPOX7LPSCeREVuhgLL1b63I
EvIxXWqPERKUwmYCcDBAZdlaH2NSAZzWqunS8QlzHxu/lHFihVf1efMuLNPQcur8
8arSWwxHpwvH2z+F+9m+EeY0krHvdcouRUPXTBr5CIyOetDIxJe1mFDGHghF9R9y
aq4loKAxVLvlZCNHz16vMdM4CZi9cnm2UoUjbFnNDP7nm7wiZh8goZ5UdB/fAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ7tQ0FvXXJRgtB
NPH3wI03TS+gizAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0RF
bUdVeWR6dHRvdlpqMXNXcG93ejkyc3RrQ1k1SGNReHUyREduWnIycngvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NE
RW1HVXlkenR0b3ZaajFzV3Bvd3o5MnN0a0NZNUhjUXh1MkRHblpyMnJ4LzAvM0JC
NTBEMDVCRDc1Qzk0NjBCNDEzNEYxRjdDMDhEMzc0RDJGQTA4Qi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsz+MMA0EAgACMAcDBQAoBH6IMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQlDjANBgkqhkiG9w0BAQsFAAOCAQEAq20Zs7yfQSmoEv53
w63NMERqdzaJoFoH770q3XKAZK3c63FJ+BJnv0iPUmiUJjuSp8iGdvEQoXC5svTC
RqSghRWthXRP7Uwu3iuy3qGHdhfb8iSRqOXdQTyh5tACGbRCATUQ0imzofiaL4FX
Hy1UPGx/cAuUkVoHg8brg2Y3PV1douL/E+0Azz8mdLB+NNz5IVx7GOzMYDt1N3l9
TeLTlD0VeQMzcBobjC+h9ticZNWReI2K0XNoWoi8morH5jatHa+T9wGkc8PPa1Wl
b9nkxb9rnpzDpBGuum4/YGA3Q6y3hcNT8r6bQvY6Lzf23i9lI0M9LkAV0CY1LkVH
EOg3Xg==
-----END CERTIFICATE-----
Generated at Sun Nov 2 23:00:26 2025 by rpki-client