Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.cer
File:                     AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.cer (raw, json)
Hash identifier:          8f5L5QcF+P416klGDg9RjhLkK51ofUafCixkdGdkbaA=
Subject key identifier:   AF:30:B7:45:AA:AF:3F:76:FC:89:35:B2:EB:95:38:0C:4E:E8:24:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       745EEAD062E8A215D8368DF7E13A89FFCBA29110
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Oct 2026 12:41:45 +0000
Certificate not after:    Wed 06 Oct 2027 12:46:45 +0000
Subordinate resources:    AS: 52594
                          IP: 177.87.108.0/22
                          IP: 2804:8a04::/32
Validation:               Failed, certificate revoked on Fri 09 Oct 2026 18:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5e:ea:d0:62:e8:a2:15:d8:36:8d:f7:e1:3a:89:ff:cb:a2:91:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  7 12:41:45 2026 GMT
            Not After : Oct  6 12:46:45 2027 GMT
        Subject: CN=AF30B745AAAF3F76FC8935B2EB95380C4EE824E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:81:72:44:fc:bc:4c:c1:5d:9a:a5:74:25:
                    4b:67:8a:46:11:6d:e8:aa:75:19:f8:70:85:ff:01:
                    bf:ce:67:33:0d:6f:17:3d:9a:1f:c5:b6:66:10:43:
                    cd:f1:31:65:1b:c8:8b:8c:2f:94:8c:97:66:33:81:
                    c6:73:5b:e0:25:7d:76:23:4d:fa:6d:02:b1:43:5a:
                    5b:ad:7c:3e:ae:61:37:a5:44:c0:cd:78:16:7e:d4:
                    08:6f:4b:12:ce:11:85:70:e6:3d:ef:36:8a:3c:2c:
                    5c:d0:e6:3a:68:10:71:21:92:b1:21:71:ff:33:af:
                    23:1d:54:ea:4d:cc:a4:32:98:f7:64:40:37:69:b5:
                    33:ca:ef:87:de:50:5f:76:d4:0b:3b:47:02:72:2c:
                    58:b0:b1:2c:f5:02:6c:c2:70:1b:7f:50:d4:3c:07:
                    db:79:2c:cf:73:3d:b1:7d:15:f7:0c:6c:d6:3a:2f:
                    67:52:64:d3:5f:89:70:5b:7e:8d:b1:31:9a:a9:8c:
                    87:8f:ae:60:3a:45:ba:2e:76:33:d6:b0:e4:b7:d2:
                    a1:17:80:9a:e5:77:a7:1b:51:7c:b6:89:29:b9:c9:
                    6f:3b:a8:0b:ad:9a:de:d8:27:d0:3e:90:19:9d:b4:
                    bf:65:a1:1c:1a:1c:9e:b4:6c:0d:20:e9:f6:71:80:
                    b8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:30:B7:45:AA:AF:3F:76:FC:89:35:B2:EB:95:38:0C:4E:E8:24:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.108.0/22
                IPv6:
                  2804:8a04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52594

    Signature Algorithm: sha256WithRSAEncryption
         41:a4:98:08:ea:57:6f:48:fa:f4:8b:10:16:c2:b4:68:80:a4:
         ed:51:bd:c0:cd:b5:f2:a5:b4:e9:bc:d6:f9:78:f2:c6:59:fd:
         27:96:2f:67:2f:b4:d5:ee:ba:2a:92:8f:ee:75:9e:71:f1:d3:
         a1:99:05:08:90:85:df:a7:99:53:c5:61:42:70:f1:8a:71:6e:
         3a:09:c0:4a:2e:83:a0:a5:81:ef:ca:49:18:3f:30:a5:5c:f3:
         e7:f4:4c:29:a4:6e:6e:aa:1a:7c:81:0d:8c:b8:77:e7:a4:3e:
         7a:eb:7d:88:98:12:12:c7:1f:69:a1:4c:0f:30:e7:8b:2e:ba:
         9f:c1:09:0e:27:1a:bd:05:eb:da:4d:36:bd:6b:fe:36:df:ab:
         55:6d:dd:ee:e1:19:ef:6b:97:01:fc:59:39:fe:a8:90:1c:b2:
         37:bf:5c:45:29:dc:c9:3b:d2:cb:23:a7:86:6b:0a:46:3a:df:
         42:f5:bd:61:f8:7e:34:c5:8f:0a:92:66:55:d3:a5:9e:96:82:
         d0:a1:a7:0c:35:b3:eb:20:7d:95:78:81:28:f2:b8:94:af:9c:
         c2:c6:34:4a:ba:c6:8e:f7:43:fe:69:76:72:7b:36:9d:80:5f:
         55:06:da:a3:c9:45:80:be:e7:27:cf:0b:ff:0c:bd:bf:de:63:
         66:02:cb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:46:51 2026 by rpki-client