Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DBCF56AB055BE9E72AC73599B36098BD418CD9DF.cer
File:                     DBCF56AB055BE9E72AC73599B36098BD418CD9DF.cer (raw, json)
Hash identifier:          bMg00z2rfkdP61/vLyQCc7dgVlCT6+BMg7bhlMPGSxE=
Subject key identifier:   DB:CF:56:AB:05:5B:E9:E7:2A:C7:35:99:B3:60:98:BD:41:8C:D9:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3DB1AE8F1AC308632A73CC9E1043D19FDFA226FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/2/DBCF56AB055BE9E72AC73599B36098BD418CD9DF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Aug 2025 16:14:46 +0000
Certificate not after:    Wed 26 Aug 2026 16:19:46 +0000
Subordinate resources:    AS: 270664
                          IP: 186.65.92.0/22
                          IP: 2804:6f80::/32
Validation:               Failed, certificate revoked on Thu 11 Sep 2025 22:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b1:ae:8f:1a:c3:08:63:2a:73:cc:9e:10:43:d1:9f:df:a2:26:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 27 16:14:46 2025 GMT
            Not After : Aug 26 16:19:46 2026 GMT
        Subject: CN=DBCF56AB055BE9E72AC73599B36098BD418CD9DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2b:62:64:d3:82:19:e0:ca:fe:87:cf:22:c0:
                    75:99:b9:ad:1e:f3:69:cb:7b:14:9a:b1:1d:5a:1c:
                    eb:c8:9c:1e:71:3e:8c:67:b5:17:6b:1b:cb:3b:f4:
                    14:69:de:87:e4:2c:1d:6a:a0:d0:02:2b:05:e7:d6:
                    8c:3b:e2:1c:b1:22:28:e8:86:0d:34:e2:48:b6:c7:
                    9f:6e:fb:78:36:d6:12:8a:70:7a:98:5b:b1:7c:43:
                    b8:3a:d8:7c:a3:cf:a1:8c:c4:1d:cb:b0:08:e0:18:
                    85:6b:1c:19:bd:f9:c4:62:79:4a:eb:7a:57:83:c9:
                    de:5d:91:27:66:95:87:73:d8:08:8c:db:48:13:0e:
                    73:5f:36:e5:8c:8b:68:11:54:c1:da:c2:8b:c1:46:
                    94:7d:a2:4b:38:9a:64:4c:37:09:b3:12:63:3b:75:
                    f8:52:18:a1:cf:e3:6f:eb:18:f0:f3:b5:cb:be:ff:
                    2a:2d:c6:26:33:b0:c3:9a:0d:e8:02:68:32:6f:0e:
                    b1:93:a5:70:40:be:35:80:ab:94:11:0f:f7:eb:2e:
                    94:63:e4:6f:56:fc:ab:ca:9d:cd:cf:39:84:9a:8c:
                    85:b8:47:4d:d6:2e:1a:82:79:df:ed:a8:32:1d:ea:
                    98:41:a5:fa:0e:42:a0:fa:64:17:4f:1f:2d:a1:ec:
                    11:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:CF:56:AB:05:5B:E9:E7:2A:C7:35:99:B3:60:98:BD:41:8C:D9:DF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/2/DBCF56AB055BE9E72AC73599B36098BD418CD9DF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.92.0/22
                IPv6:
                  2804:6f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270664

    Signature Algorithm: sha256WithRSAEncryption
         86:b0:5d:eb:2f:95:ca:79:95:96:99:a7:e6:b5:3c:6c:0b:3d:
         98:b8:a6:03:fd:aa:71:20:ec:85:e7:99:10:97:77:20:38:fc:
         73:8d:81:ee:d6:b7:a9:6b:a9:f6:74:9e:b6:4b:3d:ca:24:67:
         eb:d2:98:9e:a1:2d:1e:9a:17:d6:3c:2d:6c:d5:5d:01:6b:7d:
         c5:19:3f:b1:a8:55:fd:8a:0f:47:86:76:d2:e2:a5:8e:90:6f:
         61:6a:be:17:07:1f:04:9c:0b:4e:f2:1d:09:94:38:e4:de:7c:
         99:65:e6:b3:cb:eb:d6:06:92:44:f4:79:4f:d8:87:1a:1b:99:
         f8:f9:34:fc:81:93:c1:8c:21:0c:68:53:19:6b:93:3f:40:22:
         f9:e7:fc:89:18:e0:6d:47:76:62:c6:7b:34:c9:34:51:f9:b0:
         96:82:a0:22:0c:ce:23:3a:6a:20:9f:ad:c3:45:61:54:a7:df:
         61:5c:74:24:2a:ff:16:29:32:86:2a:fd:f1:29:73:dd:4a:8e:
         84:0b:df:74:88:30:e1:49:3a:d5:ee:75:6c:cd:cd:0a:c1:06:
         48:d1:20:fb:1b:82:0d:c6:f0:dd:21:3f:df:8f:69:07:db:66:
         ff:de:88:b4:e4:ab:4c:6d:cc:e1:6d:f1:c0:c8:3c:c8:5b:97:
         33:ca:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 23:14:50 2025 by rpki-client