Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/69DD5B45F4C78A4D25F8A9A1F36172BDC268A058.cer
File:                     69DD5B45F4C78A4D25F8A9A1F36172BDC268A058.cer (raw, json)
Hash identifier:          KxxPrEwTiOelHgq1ERTnPDSyib8BcL2Bv2IaGAuzy+0=
Subject key identifier:   69:DD:5B:45:F4:C7:8A:4D:25:F8:A9:A1:F3:61:72:BD:C2:68:A0:58
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6019F90EF5A7A4B59173C549D8F86C9A2BC27C7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/69DD5B45F4C78A4D25F8A9A1F36172BDC268A058.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Jul 2025 18:18:31 +0000
Certificate not after:    Mon 13 Jul 2026 18:23:31 +0000
Subordinate resources:    AS: 267552
                          IP: 45.70.60.0/22
                          IP: 45.163.200.0/22
                          IP: 2804:4328::/32
Validation:               Failed, certificate revoked on Mon 14 Jul 2025 19:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:19:f9:0e:f5:a7:a4:b5:91:73:c5:49:d8:f8:6c:9a:2b:c2:7c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 14 18:18:31 2025 GMT
            Not After : Jul 13 18:23:31 2026 GMT
        Subject: CN=69DD5B45F4C78A4D25F8A9A1F36172BDC268A058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:90:26:d7:95:b3:bc:be:56:65:17:bf:8b:
                    3f:4e:2f:7b:f7:82:f1:40:a0:60:87:85:a1:74:a8:
                    a8:46:59:49:79:ad:3c:73:76:bf:36:8e:14:bf:0c:
                    73:ef:97:6c:19:14:6e:f2:03:6e:3a:d6:2b:aa:a1:
                    cf:32:a2:e3:30:11:50:e3:be:48:72:2c:e7:69:3b:
                    c0:e2:a2:3d:43:2c:46:83:e9:05:0f:6b:3a:ed:5c:
                    a2:0e:59:94:80:48:17:71:d3:a0:4a:75:23:6c:54:
                    7f:49:47:d0:f8:a5:55:9e:79:9a:92:fa:e0:1f:a0:
                    5a:6e:7c:12:aa:31:34:72:78:ec:0a:b1:20:48:9e:
                    04:c0:0d:b7:f0:7f:1d:62:c1:6f:d8:39:c9:ce:07:
                    65:e8:34:d5:b4:e5:36:c8:4e:74:fb:e6:2d:e7:2c:
                    92:9a:f1:13:18:2e:d9:58:a9:12:52:8e:6b:e1:d4:
                    0f:ad:ce:9a:0a:75:9a:ae:b4:67:5f:88:23:ff:fb:
                    56:1a:db:22:79:c3:0b:4e:7d:3c:c9:f5:98:bf:69:
                    6c:d6:f9:06:32:22:34:84:14:e9:66:b8:ba:00:d8:
                    89:8b:6a:e6:98:55:de:69:2f:55:a0:05:ae:b1:06:
                    00:d8:98:32:83:6d:06:06:3c:53:20:34:7f:99:68:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:DD:5B:45:F4:C7:8A:4D:25:F8:A9:A1:F3:61:72:BD:C2:68:A0:58
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/69DD5B45F4C78A4D25F8A9A1F36172BDC268A058.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.60.0/22
                  45.163.200.0/22
                IPv6:
                  2804:4328::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267552

    Signature Algorithm: sha256WithRSAEncryption
         bf:dd:aa:bd:24:89:b5:a6:21:72:fa:13:10:76:3e:35:85:a9:
         31:e4:0f:b0:e9:1b:03:14:bd:f6:fc:6e:fa:1d:c2:f5:b0:46:
         83:87:1d:15:8c:96:77:04:f9:c6:1a:4b:f4:6e:91:ab:3d:b4:
         d9:0d:86:11:16:26:d1:67:70:ae:d4:fd:96:88:5d:bf:71:d3:
         9e:86:c1:e0:52:59:e5:0c:0f:aa:e6:0c:59:28:4b:d2:90:0f:
         d6:99:3d:88:45:34:79:96:f5:fd:04:36:ca:88:97:9f:e5:b9:
         b2:2e:81:76:45:8c:23:2b:8c:87:92:60:3f:78:fe:e0:2d:20:
         52:f9:47:04:a2:ef:92:95:23:b1:ec:45:66:af:ec:60:ef:ea:
         0f:17:54:1b:9a:b4:40:ad:91:04:b3:ab:56:3a:1e:7b:80:12:
         64:3f:f2:24:31:64:37:67:f0:f7:92:08:47:f2:9a:41:62:ba:
         45:da:1a:70:bf:10:82:cf:a0:48:a1:c7:38:df:4e:55:18:63:
         41:b6:03:05:c1:81:d1:da:04:69:53:88:d2:e3:e4:9b:30:20:
         91:56:8b:98:a6:be:03:d2:e7:02:d6:62:57:24:37:58:1f:38:
         a9:bd:74:8a:05:22:b8:ad:d1:8a:a3:31:4a:4d:e8:f2:8c:2c:
         26:c6:f8:c0
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUYBn5DvWnpLWRc8VJ2PhsmivCfH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA3MTQxODE4MzFaFw0yNjA3MTMxODIzMzFaMDMxMTAvBgNV
BAMTKDY5REQ1QjQ1RjRDNzhBNEQyNUY4QTlBMUYzNjE3MkJEQzI2OEEwNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZGJAm15WzvL5WZRe/iz9OL3v3
gvFAoGCHhaF0qKhGWUl5rTxzdr82jhS/DHPvl2wZFG7yA2461iuqoc8youMwEVDj
vkhyLOdpO8Dioj1DLEaD6QUPazrtXKIOWZSASBdx06BKdSNsVH9JR9D4pVWeeZqS
+uAfoFpufBKqMTRyeOwKsSBIngTADbfwfx1iwW/YOcnOB2XoNNW05TbITnT75i3n
LJKa8RMYLtlYqRJSjmvh1A+tzpoKdZqutGdfiCP/+1Ya2yJ5wwtOfTzJ9Zi/aWzW
+QYyIjSEFOlmuLoA2ImLauaYVd5pL1WgBa6xBgDYmDKDbQYGPFMgNH+ZaJVtAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRp3VtF9MeKTSX4
qaHzYXK9wmigWDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmNz
UnRTOGtzOTRVMnNnMWV3QnBxQVJ2Y21zRDhDZUhRcnozQ3FlRW5aaHAvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jj
c1J0Uzhrczk0VTJzZzFld0JwcUFSdmNtc0Q4Q2VIUXJ6M0NxZUVuWmhwLzAvNjlE
RDVCNDVGNEM3OEE0RDI1RjhBOUExRjM2MTcyQkRDMjY4QTA1OC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCLUY8AwQCLaPIMA0EAgACMAcDBQAoBEMoMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQVIDANBgkqhkiG9w0BAQsFAAOCAQEAv92qvSSJ
taYhcvoTEHY+NYWpMeQPsOkbAxS99vxu+h3C9bBGg4cdFYyWdwT5xhpL9G6Rqz20
2Q2GERYm0WdwrtT9lohdv3HTnobB4FJZ5QwPquYMWShL0pAP1pk9iEU0eZb1/QQ2
yoiXn+W5si6BdkWMIyuMh5JgP3j+4C0gUvlHBKLvkpUjsexFZq/sYO/qDxdUG5q0
QK2RBLOrVjoee4ASZD/yJDFkN2fw95IIR/KaQWK6RdoacL8Qgs+gSKHHON9OVRhj
QbYDBcGB0doEaVOI0uPkmzAgkVaLmKa+A9LnAtZiVyQ3WB84qb10igUiuK3RiqMx
Sk3o8owsJsb4wA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:42:56 2025 by rpki-client