Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.cer
File:                     9856E6EC431EB6EF91607E2865CCEFB48EC91E18.cer (raw, json)
Hash identifier:          gYp52KF2flyGBuRjvzGruyZ+3NJNID4D00QRimGlZwM=
Subject key identifier:   98:56:E6:EC:43:1E:B6:EF:91:60:7E:28:65:CC:EF:B4:8E:C9:1E:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       109E269B0BC99948B44CD6188CD1763B6BB5C812
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Aug 2026 14:08:01 +0000
Certificate not after:    Wed 25 Aug 2027 14:13:01 +0000
Subordinate resources:    AS: 270863
                          IP: 186.250.32.0/22
                          IP: 2804:7298::/32
Validation:               Failed, certificate revoked on Thu 01 Oct 2026 16:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9e:26:9b:0b:c9:99:48:b4:4c:d6:18:8c:d1:76:3b:6b:b5:c8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 26 14:08:01 2026 GMT
            Not After : Aug 25 14:13:01 2027 GMT
        Subject: CN=9856E6EC431EB6EF91607E2865CCEFB48EC91E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:77:4b:d8:e5:9e:e9:1d:66:3f:19:dd:a7:df:
                    70:db:03:20:af:c2:72:7f:b6:dd:c3:48:3b:9e:41:
                    9f:02:6f:c7:76:7e:d1:e0:68:dd:ee:8a:fa:8d:1f:
                    2d:d8:d8:93:82:99:6c:b4:2c:75:a8:4d:a8:8d:9f:
                    90:20:9b:0a:5e:ef:04:2c:88:6f:22:50:57:59:9b:
                    64:c4:15:e4:e2:be:5a:51:9f:ba:b4:9e:42:05:ae:
                    34:07:1c:9c:9a:57:d1:4e:10:e9:b3:99:82:ca:99:
                    c5:51:9a:7f:85:c9:eb:66:93:b1:a3:5d:5f:77:c5:
                    97:6f:86:8a:cd:7e:da:95:89:f2:c3:d7:6b:7a:2c:
                    bc:8b:04:c0:df:1c:0c:65:43:f8:18:0a:45:dc:87:
                    79:cc:45:a2:df:9f:6c:70:a3:3b:d9:b0:54:8f:43:
                    5d:f8:ab:45:bb:e8:4a:6e:b4:91:72:a2:a1:1a:d5:
                    7a:72:68:ce:8c:49:a9:8a:05:41:6a:42:4a:4a:a9:
                    b9:79:e9:d1:84:46:bf:8a:d4:fc:34:fc:fe:9e:34:
                    b2:7b:07:a3:25:c6:ee:0b:d2:73:4f:57:5b:ed:bb:
                    75:3e:b3:6f:ee:ad:f0:e5:87:e4:95:43:c6:e0:62:
                    fd:a1:e8:7b:82:cd:93:45:07:89:cd:2a:0f:ad:51:
                    fa:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:56:E6:EC:43:1E:B6:EF:91:60:7E:28:65:CC:EF:B4:8E:C9:1E:18
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.32.0/22
                IPv6:
                  2804:7298::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270863

    Signature Algorithm: sha256WithRSAEncryption
         a1:0a:1e:46:03:6f:14:e9:13:1f:35:9e:be:30:43:83:94:7e:
         83:bc:9b:57:c0:ee:be:68:44:24:41:22:0a:0a:08:61:dd:f4:
         f8:bf:72:08:d8:b1:9c:52:33:f3:f3:80:78:00:a5:0f:e0:40:
         da:ad:54:ac:70:eb:32:db:ad:cd:77:50:7a:40:3c:4f:20:19:
         37:80:68:07:32:89:30:3b:be:af:60:c8:01:fb:50:db:85:fb:
         d9:a2:47:5c:d5:44:ca:39:44:1e:1c:9c:e9:4f:f9:c7:6d:20:
         4d:a5:16:53:41:80:5a:a3:be:b7:bb:16:58:0b:7f:3f:71:fe:
         10:0a:6a:25:9c:58:e3:73:59:fa:b6:00:5b:71:07:e7:0c:c2:
         3e:ae:74:8f:cd:c3:5e:11:65:7b:d7:5e:2d:94:08:ea:29:33:
         7b:b1:09:84:16:94:e1:8d:7b:f2:8f:e2:b8:9b:ca:e3:7d:f5:
         15:47:83:1d:23:a6:00:6d:d6:64:a4:5d:06:f5:04:fa:d6:0f:
         1d:1e:cb:0d:c6:b1:1b:68:ff:39:b3:0a:9d:f0:89:36:ed:38:
         27:cf:d7:a6:60:50:9c:d6:d0:b6:f9:94:29:84:7a:91:8c:bc:
         ce:53:38:b0:51:89:3c:fe:d3:e8:d3:6b:b8:9a:20:49:71:28:
         4c:d6:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:48:32 2026 by rpki-client