
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.cer
File: BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.cer (raw, json)
Hash identifier: 0Qg7jIH+ROAYdZaIKeeT5i7oVx8UAQrIpwfmK7aW/rk=
Subject key identifier: BF:3B:3B:3C:1A:36:9F:D0:DD:F2:CE:20:59:CB:E4:C9:8C:B4:60:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 11C07467EC4A0BA894CC4DE3FC7EC4535754C95C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.mft
caRepository: rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 01 Oct 2025 22:48:39 +0000
Certificate not after: Wed 30 Sep 2026 22:53:39 +0000
Subordinate resources: AS: 270579
IP: 189.126.84.0/22
IP: 2804:6e28::/32
Validation: Failed, certificate revoked on Sun 02 Nov 2025 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c0:74:67:ec:4a:0b:a8:94:cc:4d:e3:fc:7e:c4:53:57:54:c9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 1 22:48:39 2025 GMT
Not After : Sep 30 22:53:39 2026 GMT
Subject: CN=BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:55:54:d0:ba:b1:b1:b9:1f:a9:61:b7:9a:
58:6a:43:0c:ea:67:9b:c1:95:a4:56:5a:2e:51:2b:
c7:0c:90:3a:36:b0:68:31:31:af:37:8d:99:03:ed:
aa:4a:ae:65:0b:6e:8d:e6:00:1a:d0:c4:8c:47:c0:
4e:5d:90:1f:fa:f6:40:ea:5f:89:7d:c3:d8:d5:0d:
e1:4b:cf:c5:c0:bb:8f:46:b3:26:f4:37:b6:0d:98:
93:ab:2f:6d:44:2a:11:48:d2:b6:10:12:51:81:66:
cd:bf:e5:e9:cb:3f:36:e5:4d:37:c0:ce:21:9c:4b:
5d:b0:8e:ee:ec:08:fe:85:ae:3c:13:7b:5a:d5:4f:
e4:75:76:c9:ec:ba:99:21:e9:e3:54:50:b4:a3:82:
99:d9:6e:8e:10:bc:93:1b:b5:95:45:00:f2:22:f2:
c5:ec:61:a7:4a:8a:af:34:1f:a4:6f:ea:2a:eb:50:
b0:c6:50:51:ee:ff:83:ac:78:91:bd:f7:11:c9:85:
c4:8e:dc:6c:da:d2:da:0d:ba:30:4f:47:f3:43:1c:
4e:8a:d0:3f:8a:f7:83:1d:e5:f7:0c:fc:70:28:02:
dd:14:d3:f3:85:91:45:47:51:be:53:b9:e5:7c:83:
1d:c4:94:f1:67:f9:99:d1:8f:2c:01:2d:e4:e0:f8:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BF:3B:3B:3C:1A:36:9F:D0:DD:F2:CE:20:59:CB:E4:C9:8C:B4:60:92
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.84.0/22
IPv6:
2804:6e28::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270579
Signature Algorithm: sha256WithRSAEncryption
6d:56:7f:1f:19:bf:6e:e8:90:ec:f1:5c:3e:b3:09:54:4c:a2:
39:7d:26:fa:e1:6f:71:e3:93:27:4b:aa:ad:78:48:0d:0f:20:
d1:dd:be:c3:8d:a7:f9:ed:d8:c1:24:56:bc:97:16:f6:99:05:
7c:7a:24:27:78:32:d4:cd:8d:63:de:d7:be:d4:78:ce:19:83:
cc:c2:25:8e:02:e3:c1:f7:f3:11:50:ae:c6:39:66:5c:cb:b5:
43:e8:31:a7:e9:8e:54:e4:02:e2:45:c8:83:9b:67:66:f9:14:
b7:26:26:2c:90:0f:7c:83:1b:c2:38:62:d8:b5:1b:2a:8e:71:
2e:47:f7:9a:be:64:19:b8:9e:bf:f3:d8:30:b4:0d:b3:6d:3e:
b3:d3:5d:97:f8:42:8f:d8:43:b4:48:98:9b:42:bb:6a:11:c5:
d6:61:23:bb:d8:eb:94:6b:fc:de:e1:ed:66:5a:c4:4c:3b:f6:
c1:98:72:29:98:10:8b:8f:ea:9b:68:b4:af:1e:0a:a2:94:90:
b2:ad:7d:49:69:41:34:35:78:30:69:a8:0b:a7:ef:7e:33:35:
2a:8f:72:6e:10:a6:50:b7:50:d6:aa:40:64:83:36:ec:0d:8b:
00:2b:90:2f:a1:00:d3:9e:69:db:ae:73:7a:4f:4d:2c:50:b4:
f2:b0:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:20:38 2025 by rpki-client