Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/497D5F7ED6F421F88A03409BAE2F2CAC5EC1A50E.cer
File:                     497D5F7ED6F421F88A03409BAE2F2CAC5EC1A50E.cer (raw, json)
Hash identifier:          Qd2F2fFvYlV3H8BwtMcyDz3t+45Z+CBXcb3NZb+dR80=
Subject key identifier:   49:7D:5F:7E:D6:F4:21:F8:8A:03:40:9B:AE:2F:2C:AC:5E:C1:A5:0E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       23B93D9E66B536263D3364262F422E320E7CA3B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/1/497D5F7ED6F421F88A03409BAE2F2CAC5EC1A50E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Jul 2026 11:48:22 +0000
Certificate not after:    Tue 27 Jul 2027 11:53:22 +0000
Subordinate resources:    AS: 262649
                          IP: 138.219.204.0/22
                          IP: 170.238.92.0/22
                          IP: 177.105.176.0/20
                          IP: 2804:770::/32
Validation:               Failed, certificate revoked on Tue 28 Jul 2026 12:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b9:3d:9e:66:b5:36:26:3d:33:64:26:2f:42:2e:32:0e:7c:a3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 28 11:48:22 2026 GMT
            Not After : Jul 27 11:53:22 2027 GMT
        Subject: CN=497D5F7ED6F421F88A03409BAE2F2CAC5EC1A50E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:c8:2b:91:18:00:40:4d:e5:33:f9:3a:73:
                    53:42:e6:b1:70:ab:f5:6f:ab:d1:01:00:69:ca:10:
                    29:3e:8b:fd:8b:c8:2b:3e:ce:5b:f9:58:c4:f5:da:
                    04:a8:0b:2a:17:74:65:e5:87:f4:1e:1e:87:da:bc:
                    95:88:29:f7:29:00:be:d4:62:7c:25:ca:4d:47:2a:
                    99:91:dc:03:0a:fa:24:1e:39:ae:5a:ad:b1:fe:5f:
                    a4:a9:d2:15:76:6e:01:63:a5:63:14:ec:87:d3:0c:
                    f1:72:9f:50:a4:b1:84:ed:85:16:9c:7e:70:c0:f9:
                    ce:f8:52:86:42:82:f1:11:a2:95:f0:8b:59:3f:cc:
                    47:e7:98:51:63:ca:42:20:df:31:04:c8:0f:ae:74:
                    aa:64:36:bd:d0:7a:8a:f2:fa:50:48:5b:0b:44:e1:
                    0f:e9:be:07:cd:44:59:80:36:9e:87:58:cc:ab:b6:
                    2b:f7:35:53:54:0b:6e:a4:36:e2:b6:91:4a:71:28:
                    c5:fe:14:73:05:84:95:54:a5:2e:49:e8:fe:a5:cf:
                    be:4c:c2:e5:18:4b:9c:f2:d7:3a:d9:9d:3f:f7:bb:
                    aa:16:08:b9:59:65:01:3f:20:78:a3:67:a4:33:f8:
                    a9:e6:bc:1b:f0:62:1a:71:52:c0:fc:e1:e3:42:12:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:7D:5F:7E:D6:F4:21:F8:8A:03:40:9B:AE:2F:2C:AC:5E:C1:A5:0E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/1/497D5F7ED6F421F88A03409BAE2F2CAC5EC1A50E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.204.0/22
                  170.238.92.0/22
                  177.105.176.0/20
                IPv6:
                  2804:770::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262649

    Signature Algorithm: sha256WithRSAEncryption
         d4:cf:d5:5e:05:09:a6:f8:df:54:db:af:83:a4:32:c3:58:6e:
         29:3c:dc:fd:b2:9c:bc:35:26:66:68:0e:4d:74:5a:b9:5a:42:
         7b:8f:33:50:5b:bd:04:8b:f9:0c:0e:5a:39:97:32:cf:5d:5e:
         4f:a0:8b:69:85:a7:d8:43:e7:49:a9:e9:46:85:6b:9e:c7:3b:
         13:c7:af:58:9d:a3:03:75:8a:dc:55:0b:59:ba:98:b7:cf:29:
         ab:e8:a4:a8:5e:1c:a2:ad:48:f7:43:50:39:52:c1:c4:1e:a5:
         3d:d2:61:5c:50:9a:b5:3b:56:5a:20:93:84:45:8a:b7:b9:e0:
         76:46:63:8e:18:29:2e:37:d5:bb:67:84:aa:5c:46:b2:7f:cf:
         b8:c4:2b:bf:8f:9f:63:d5:da:b3:45:f2:c4:d3:19:66:e5:72:
         7a:82:0b:75:59:33:8f:18:01:b3:c3:2d:74:d6:b4:6d:5e:28:
         f4:49:35:3b:b9:e8:29:1c:08:30:cd:55:b5:96:49:56:c5:8b:
         3d:0b:65:d6:e0:05:81:69:7f:62:ed:9d:4f:f0:a7:88:69:2f:
         5c:6e:d9:16:81:85:b7:87:22:c8:9f:e1:73:0c:de:d5:09:ae:
         43:0c:1c:d3:7a:de:b9:99:98:a5:5e:35:81:08:1c:44:07:9d:
         a6:5c:8e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:53:58 2026 by rpki-client