Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.cer
File:                     1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.cer (raw, json)
Hash identifier:          91jppyu9ZlY8/oQbh/36RBUG2d76gGzs/k/8zpjc+Yg=
Subject key identifier:   1B:B5:40:69:7C:6A:86:FD:B0:EE:C3:1F:1C:4D:55:D4:99:F3:EC:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       479B1A990FC6F1CD4BB59D1862AE90BE20FB93FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Oct 2026 11:42:31 +0000
Certificate not after:    Thu 30 Sep 2027 11:47:31 +0000
Subordinate resources:    AS: 271429
                          IP: 45.181.76.0/24
                          IP: 164.163.4.0/24
                          IP: 177.128.174.0/24
                          IP: 2804:7b64::/32
Validation:               Failed, certificate revoked on Fri 02 Oct 2026 12:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9b:1a:99:0f:c6:f1:cd:4b:b5:9d:18:62:ae:90:be:20:fb:93:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  1 11:42:31 2026 GMT
            Not After : Sep 30 11:47:31 2027 GMT
        Subject: CN=1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:38:f4:a8:3f:02:65:90:fd:14:47:00:16:
                    d0:c5:2b:dd:e8:5e:12:2a:cd:f3:a8:54:97:b6:12:
                    0f:a4:4b:68:35:e8:8e:ee:91:f9:ec:10:6a:b3:6e:
                    d4:eb:bf:81:35:c8:f3:68:cd:8a:7c:1b:92:69:41:
                    3f:e1:50:e6:dc:2f:f7:d7:3b:77:6a:da:07:4b:8b:
                    11:be:21:cb:3b:1b:11:50:79:e5:45:74:b3:a1:8a:
                    d1:74:dc:09:3f:6c:40:ce:79:72:87:87:71:9d:a5:
                    92:c9:30:bb:97:c4:6c:ed:f6:d2:30:d7:b5:b0:07:
                    31:c5:ac:93:12:e7:bc:f7:69:ec:4e:4f:61:b5:7b:
                    15:f8:af:6f:d0:23:80:43:73:a9:09:98:4e:c8:99:
                    d1:f6:70:7b:6d:ba:11:06:23:5e:ea:5c:c5:ec:00:
                    c2:f0:27:bc:12:30:7c:b9:71:dd:44:d9:c4:3f:1d:
                    c3:34:a9:6c:e8:c4:61:97:f4:ca:07:01:23:ff:48:
                    c0:f6:09:ed:d6:a6:94:d7:91:02:e5:ec:45:11:fc:
                    e9:6d:39:b2:bc:7f:3a:53:00:6c:13:bf:9e:6b:fa:
                    7c:6d:24:c3:b2:b4:bb:83:62:bd:9b:f4:67:4c:bb:
                    ae:c0:d3:b7:40:3e:b9:7c:70:5b:ff:6a:d2:1c:6a:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:B5:40:69:7C:6A:86:FD:B0:EE:C3:1F:1C:4D:55:D4:99:F3:EC:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.76.0/24
                  164.163.4.0/24
                  177.128.174.0/24
                IPv6:
                  2804:7b64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271429

    Signature Algorithm: sha256WithRSAEncryption
         a1:2f:e6:86:32:2f:e2:b6:04:4d:15:7c:86:dd:c8:24:fd:b7:
         fd:06:70:ef:16:0c:9f:6b:fe:6c:67:db:fc:55:01:65:fc:14:
         3a:6d:f0:2a:ae:9b:36:c8:72:c2:b6:99:25:23:a0:df:7e:15:
         3e:96:11:33:3d:a0:ec:11:88:be:45:cf:ab:f4:f1:38:1f:85:
         79:b0:a2:2e:9c:c8:95:68:93:2c:2e:19:75:5b:4f:16:db:0e:
         2e:e3:52:57:79:ee:fb:98:e2:df:1b:87:96:89:41:0a:31:0d:
         9e:c3:6d:e8:ba:79:1a:c2:80:66:af:04:2a:ea:0c:fe:b7:2d:
         81:80:8a:25:7e:9b:e4:4b:2c:bd:ba:74:f8:d2:ac:95:83:60:
         5a:03:3f:59:6f:79:93:ea:c9:d0:82:bf:43:07:e3:c5:07:29:
         f3:68:d7:61:ee:9c:22:18:eb:87:c6:f0:10:3c:e8:9d:37:05:
         39:7c:9e:1d:2e:2d:57:b7:31:ef:60:a8:29:7c:51:84:6a:23:
         1b:70:53:43:8c:b6:a7:47:ca:94:f2:dd:d7:b1:14:5d:5d:26:
         29:84:20:0b:cd:d8:c0:38:75:0a:2d:cf:88:82:e0:43:7f:a1:
         d4:ae:ee:fa:12:ff:b0:a2:02:65:30:a8:09:3f:e6:d7:29:c2:
         85:66:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:07:31 2026 by rpki-client