Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E4035FC57BB6AB74572D7C5C9E34CAC1F7D5978.cer
File: 3E4035FC57BB6AB74572D7C5C9E34CAC1F7D5978.cer (raw, json)
Hash identifier: KJowuFImaoRiPiAnjgFC3rA2XkBsegF3A9FlbO3T0TI=
Subject key identifier: 3E:40:35:FC:57:BB:6A:B7:45:72:D7:C5:C9:E3:4C:AC:1F:7D:59:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4A3ADB077FAEE2BAF1830B505A18DA6AA44CBAA1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/3E4035FC57BB6AB74572D7C5C9E34CAC1F7D5978.mft
caRepository: rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 22 Aug 2025 00:46:00 +0000
Certificate not after: Fri 21 Aug 2026 00:51:00 +0000
Subordinate resources: AS: 61686
IP: 131.100.232.0/22
IP: 2804:1cf8::/32
Validation: Failed, certificate revoked on Fri 22 Aug 2025 13:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:3a:db:07:7f:ae:e2:ba:f1:83:0b:50:5a:18:da:6a:a4:4c:ba:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 22 00:46:00 2025 GMT
Not After : Aug 21 00:51:00 2026 GMT
Subject: CN=3E4035FC57BB6AB74572D7C5C9E34CAC1F7D5978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:a0:ec:e9:ae:df:9d:92:30:f3:0f:5f:e1:
2b:cb:bd:36:dd:91:d0:79:72:8e:98:a8:67:7e:a6:
99:ee:7d:56:95:f9:c5:0d:c5:e7:be:f9:36:ae:83:
d1:e8:ce:5e:f7:58:48:52:67:10:e7:1e:9e:80:bb:
33:5f:0e:80:ab:3b:62:d5:32:0b:0f:9a:46:d0:b0:
3c:40:dc:e8:54:4c:b4:6f:9e:ac:f5:bf:2a:9d:83:
fd:56:55:20:ca:de:51:86:ac:c0:62:a8:52:76:36:
e5:78:18:be:a2:b4:ea:81:58:fe:6a:cd:22:3c:62:
0b:58:d8:50:f2:ca:bb:97:15:38:52:6a:d2:ad:e1:
5e:8d:ad:86:b4:0f:21:be:7a:27:70:34:e2:06:64:
6c:0d:05:95:48:3f:92:7b:09:36:d2:f1:65:e6:62:
30:1b:b5:cd:17:f3:ab:c9:f1:c8:92:74:29:0e:a8:
26:f4:99:db:ee:25:69:91:65:ee:74:45:f9:18:f7:
a9:f0:df:c5:45:5c:fa:fb:e1:a6:90:56:e0:54:6e:
1e:5e:4f:f3:43:66:23:70:64:8c:a2:ad:78:2d:4e:
d9:26:ad:de:b9:01:52:35:aa:c0:9c:97:61:5b:bb:
44:8c:02:18:c0:e8:2b:1a:33:bc:0d:d7:f9:15:e8:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3E:40:35:FC:57:BB:6A:B7:45:72:D7:C5:C9:E3:4C:AC:1F:7D:59:78
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/3E4035FC57BB6AB74572D7C5C9E34CAC1F7D5978.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.232.0/22
IPv6:
2804:1cf8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61686
Signature Algorithm: sha256WithRSAEncryption
0e:66:b9:b9:c9:f7:72:72:14:28:18:ee:2a:2e:f1:04:92:76:
28:6f:c5:74:24:f7:d9:6c:70:af:15:da:15:93:23:f7:5f:5e:
93:83:05:e9:72:34:f2:ad:96:38:6d:23:75:a9:94:b0:5c:79:
4b:55:b5:3c:75:d6:5c:1c:64:cb:ad:90:b7:0d:11:a8:dc:c6:
ec:b3:a8:e5:e4:fe:03:72:55:5a:a5:a4:cd:10:ef:69:eb:15:
18:d6:9e:3b:2e:55:82:6e:da:e6:63:3a:33:f2:53:5b:bf:68:
2a:ee:6e:3d:06:81:6c:cb:bd:6f:5b:db:b3:54:4c:f0:78:01:
70:a2:2c:48:ca:5b:11:52:68:da:e5:96:4e:2e:1b:00:97:f5:
cb:7c:bf:8b:05:98:01:c1:24:cd:f1:7b:d2:67:67:43:e1:2c:
a9:40:c4:c0:a9:42:af:1f:b6:02:de:89:2a:ed:fe:7e:ac:29:
86:fa:e6:6a:ab:9d:07:39:8d:7d:38:da:9b:54:20:f8:a3:be:
53:4a:c9:a5:18:92:79:93:53:a2:06:f6:6e:2c:ff:e2:a5:84:
b5:dc:4d:04:dd:3f:c2:03:24:ac:6a:4e:3b:7b:28:e3:17:af:
fe:f0:c2:d5:8c:bb:dc:98:0d:f5:5c:03:a0:e6:ce:b6:2d:a4:
c8:c5:b7:8b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUSjrbB3+u4rrxgwtQWhjaaqRMuqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA4MjIwMDQ2MDBaFw0yNjA4MjEwMDUxMDBaMDMxMTAvBgNV
BAMTKDNFNDAzNUZDNTdCQjZBQjc0NTcyRDdDNUM5RTM0Q0FDMUY3RDU5NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8pKDs6a7fnZIw8w9f4SvLvTbd
kdB5co6YqGd+ppnufVaV+cUNxee++Taug9Hozl73WEhSZxDnHp6AuzNfDoCrO2LV
MgsPmkbQsDxA3OhUTLRvnqz1vyqdg/1WVSDK3lGGrMBiqFJ2NuV4GL6itOqBWP5q
zSI8YgtY2FDyyruXFThSatKt4V6NrYa0DyG+eidwNOIGZGwNBZVIP5J7CTbS8WXm
YjAbtc0X86vJ8ciSdCkOqCb0mdvuJWmRZe50RfkY96nw38VFXPr74aaQVuBUbh5e
T/NDZiNwZIyirXgtTtkmrd65AVI1qsCcl2Fbu0SMAhjA6CsaM7wN1/kV6DhJAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+QDX8V7tqt0Vy
18XJ40ysH31ZeDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2RX
U2tmVEFjQk4xREFBYTdWbjdBYXkzenZzclQxam5TUVlEYVM5ZXhWOGcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdk
V1NrZlRBY0JOMURBQWE3Vm43QWF5M3p2c3JUMWpuU1FZRGFTOWV4VjhnLzAvM0U0
MDM1RkM1N0JCNkFCNzQ1NzJEN0M1QzlFMzRDQUMxRjdENTk3OC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCg2ToMA0EAgACMAcDBQAoBBz4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDw9jANBgkqhkiG9w0BAQsFAAOCAQEADma5ucn3cnIUKBju
Ki7xBJJ2KG/FdCT32WxwrxXaFZMj919ek4MF6XI08q2WOG0jdamUsFx5S1W1PHXW
XBxky62Qtw0RqNzG7LOo5eT+A3JVWqWkzRDvaesVGNaeOy5Vgm7a5mM6M/JTW79o
Ku5uPQaBbMu9b1vbs1RM8HgBcKIsSMpbEVJo2uWWTi4bAJf1y3y/iwWYAcEkzfF7
0mdnQ+EsqUDEwKlCrx+2At6JKu3+fqwphvrmaqudBzmNfTjam1Qg+KO+U0rJpRiS
eZNTogb2biz/4qWEtdxNBN0/wgMkrGpOO3so4xev/vDC1Yy73JgN9VwDoObOti2k
yMW3iw==
-----END CERTIFICATE-----
Generated at Fri Sep 19 15:01:31 2025 by rpki-client