Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/053D74E9BF1F0C52107831B1B5BF2CBBE7A2F0FE.cer
File:                     053D74E9BF1F0C52107831B1B5BF2CBBE7A2F0FE.cer (raw, json)
Hash identifier:          wbXF1OL4pkz3FygTy3kX62KCEe+lvspHVV/RwunKi/M=
Subject key identifier:   05:3D:74:E9:BF:1F:0C:52:10:78:31:B1:B5:BF:2C:BB:E7:A2:F0:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4BD9D0DF786F834D0EAC72B6F732D49819B010B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6PzVQGyBtccM5D2HNZu82V1VPcjHKWHeYC33fcdWWaYc/0/053D74E9BF1F0C52107831B1B5BF2CBBE7A2F0FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6PzVQGyBtccM5D2HNZu82V1VPcjHKWHeYC33fcdWWaYc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Sep 2026 17:28:45 +0000
Certificate not after:    Wed 15 Sep 2027 17:33:45 +0000
Subordinate resources:    AS: 265250
                          IP: 168.0.116.0/22
                          IP: 2804:2ce8::/32
Validation:               Failed, certificate revoked on Wed 30 Sep 2026 14:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d9:d0:df:78:6f:83:4d:0e:ac:72:b6:f7:32:d4:98:19:b0:10:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 16 17:28:45 2026 GMT
            Not After : Sep 15 17:33:45 2027 GMT
        Subject: CN=053D74E9BF1F0C52107831B1B5BF2CBBE7A2F0FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d8:c3:3b:f7:b1:72:41:19:23:8c:f3:e7:27:
                    76:ff:57:9c:3c:31:d7:f5:a1:3b:66:7f:a6:8c:49:
                    06:f2:dd:7e:9a:fb:bf:cc:30:ef:16:a5:e1:a0:a5:
                    e7:9c:96:8e:ab:50:b2:dd:e1:99:f5:c7:b5:b9:28:
                    cc:51:24:07:89:ff:ec:6c:f5:01:e7:47:ef:06:b8:
                    24:96:4a:be:dd:65:f0:25:22:91:8d:e7:94:be:81:
                    e3:95:e4:a6:4a:2a:c6:d2:e3:19:03:a0:0f:d7:80:
                    6e:95:d6:61:97:7b:13:3a:4f:1e:6c:fd:4e:e7:a5:
                    1d:7d:e1:69:13:0d:54:00:a9:55:0d:39:30:77:9e:
                    11:c2:51:72:d1:9e:d6:da:06:63:b2:42:83:31:43:
                    7d:a8:39:01:d7:64:7d:a1:74:aa:22:52:22:5b:ce:
                    f5:13:bd:5d:5c:ae:e0:8e:8f:6a:f6:c7:cb:53:b0:
                    25:d8:bb:d2:d7:3e:33:29:0d:ce:3b:8d:32:00:9e:
                    04:9f:70:10:20:09:83:f5:89:c7:15:16:42:9d:4b:
                    97:40:0e:bc:3d:af:b9:cc:b0:14:d3:5c:62:ee:4c:
                    2d:23:da:3e:fd:d4:80:96:20:5b:be:ed:48:35:b6:
                    6b:9a:8a:b5:22:06:9d:44:41:6e:cb:c7:47:47:2a:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:3D:74:E9:BF:1F:0C:52:10:78:31:B1:B5:BF:2C:BB:E7:A2:F0:FE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6PzVQGyBtccM5D2HNZu82V1VPcjHKWHeYC33fcdWWaYc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6PzVQGyBtccM5D2HNZu82V1VPcjHKWHeYC33fcdWWaYc/0/053D74E9BF1F0C52107831B1B5BF2CBBE7A2F0FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.116.0/22
                IPv6:
                  2804:2ce8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265250

    Signature Algorithm: sha256WithRSAEncryption
         2c:6d:71:99:b4:7f:36:2f:36:5f:4d:48:8a:58:a8:48:a0:81:
         b1:a0:5a:4b:73:f6:34:88:7d:85:05:46:74:88:95:f8:d8:09:
         50:a9:f8:a0:cd:ad:ea:1f:83:d2:3f:f0:ac:7c:3c:8a:f9:8f:
         f2:e4:08:8f:bb:92:55:2d:7b:f8:67:cf:af:79:17:e6:98:54:
         2a:7a:2b:26:8e:88:38:ca:2a:87:f4:40:08:c4:7a:ad:84:7f:
         34:c4:3c:81:ac:a6:6d:ec:04:50:b5:25:41:d6:ce:4b:0b:c1:
         ae:7f:76:d5:6d:8d:3d:e1:91:bc:ad:c1:e4:7a:79:79:fe:69:
         ec:ea:cc:b0:91:0a:c2:ba:0d:0d:f5:83:b4:4f:9b:18:dc:1f:
         74:a6:20:b1:45:40:35:a6:68:ae:ea:e5:ad:a9:8b:c3:3b:74:
         07:89:79:c5:69:24:b6:e7:33:fb:eb:2c:e9:94:c9:45:fc:a3:
         b7:c0:cf:dc:4a:f0:6f:50:af:f2:c2:f9:bb:f7:b4:4c:20:8f:
         30:39:8a:2e:2d:cb:3d:63:33:84:a1:73:7e:b8:70:df:57:66:
         ce:85:ab:95:11:2d:d1:e7:32:5d:06:31:29:10:99:e9:c2:87:
         02:0e:64:9b:55:3f:b3:24:7b:e6:e1:74:4f:19:4e:c3:4f:9f:
         a6:5e:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:28:44 2026 by rpki-client