Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.cer
File:                     BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.cer (raw, json)
Hash identifier:          0Qg7jIH+ROAYdZaIKeeT5i7oVx8UAQrIpwfmK7aW/rk=
Subject key identifier:   BF:3B:3B:3C:1A:36:9F:D0:DD:F2:CE:20:59:CB:E4:C9:8C:B4:60:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11C07467EC4A0BA894CC4DE3FC7EC4535754C95C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Oct 2025 22:48:39 +0000
Certificate not after:    Wed 30 Sep 2026 22:53:39 +0000
Subordinate resources:    AS: 270579
                          IP: 189.126.84.0/22
                          IP: 2804:6e28::/32
Validation:               Failed, certificate revoked on Sun 02 Nov 2025 19:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c0:74:67:ec:4a:0b:a8:94:cc:4d:e3:fc:7e:c4:53:57:54:c9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  1 22:48:39 2025 GMT
            Not After : Sep 30 22:53:39 2026 GMT
        Subject: CN=BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:55:54:d0:ba:b1:b1:b9:1f:a9:61:b7:9a:
                    58:6a:43:0c:ea:67:9b:c1:95:a4:56:5a:2e:51:2b:
                    c7:0c:90:3a:36:b0:68:31:31:af:37:8d:99:03:ed:
                    aa:4a:ae:65:0b:6e:8d:e6:00:1a:d0:c4:8c:47:c0:
                    4e:5d:90:1f:fa:f6:40:ea:5f:89:7d:c3:d8:d5:0d:
                    e1:4b:cf:c5:c0:bb:8f:46:b3:26:f4:37:b6:0d:98:
                    93:ab:2f:6d:44:2a:11:48:d2:b6:10:12:51:81:66:
                    cd:bf:e5:e9:cb:3f:36:e5:4d:37:c0:ce:21:9c:4b:
                    5d:b0:8e:ee:ec:08:fe:85:ae:3c:13:7b:5a:d5:4f:
                    e4:75:76:c9:ec:ba:99:21:e9:e3:54:50:b4:a3:82:
                    99:d9:6e:8e:10:bc:93:1b:b5:95:45:00:f2:22:f2:
                    c5:ec:61:a7:4a:8a:af:34:1f:a4:6f:ea:2a:eb:50:
                    b0:c6:50:51:ee:ff:83:ac:78:91:bd:f7:11:c9:85:
                    c4:8e:dc:6c:da:d2:da:0d:ba:30:4f:47:f3:43:1c:
                    4e:8a:d0:3f:8a:f7:83:1d:e5:f7:0c:fc:70:28:02:
                    dd:14:d3:f3:85:91:45:47:51:be:53:b9:e5:7c:83:
                    1d:c4:94:f1:67:f9:99:d1:8f:2c:01:2d:e4:e0:f8:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:3B:3B:3C:1A:36:9F:D0:DD:F2:CE:20:59:CB:E4:C9:8C:B4:60:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.84.0/22
                IPv6:
                  2804:6e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270579

    Signature Algorithm: sha256WithRSAEncryption
         6d:56:7f:1f:19:bf:6e:e8:90:ec:f1:5c:3e:b3:09:54:4c:a2:
         39:7d:26:fa:e1:6f:71:e3:93:27:4b:aa:ad:78:48:0d:0f:20:
         d1:dd:be:c3:8d:a7:f9:ed:d8:c1:24:56:bc:97:16:f6:99:05:
         7c:7a:24:27:78:32:d4:cd:8d:63:de:d7:be:d4:78:ce:19:83:
         cc:c2:25:8e:02:e3:c1:f7:f3:11:50:ae:c6:39:66:5c:cb:b5:
         43:e8:31:a7:e9:8e:54:e4:02:e2:45:c8:83:9b:67:66:f9:14:
         b7:26:26:2c:90:0f:7c:83:1b:c2:38:62:d8:b5:1b:2a:8e:71:
         2e:47:f7:9a:be:64:19:b8:9e:bf:f3:d8:30:b4:0d:b3:6d:3e:
         b3:d3:5d:97:f8:42:8f:d8:43:b4:48:98:9b:42:bb:6a:11:c5:
         d6:61:23:bb:d8:eb:94:6b:fc:de:e1:ed:66:5a:c4:4c:3b:f6:
         c1:98:72:29:98:10:8b:8f:ea:9b:68:b4:af:1e:0a:a2:94:90:
         b2:ad:7d:49:69:41:34:35:78:30:69:a8:0b:a7:ef:7e:33:35:
         2a:8f:72:6e:10:a6:50:b7:50:d6:aa:40:64:83:36:ec:0d:8b:
         00:2b:90:2f:a1:00:d3:9e:69:db:ae:73:7a:4f:4d:2c:50:b4:
         f2:b0:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:20:38 2025 by rpki-client