Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
File:                     AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer (raw, json)
Hash identifier:          3TKkTMLLD2TIdfn9+F2A/Qd3ALl8NzuEj4+T3u3MnAM=
Subject key identifier:   AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F0EC00CC4CCEAF39B1F014484F6FC9CF6A9E700
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Feb 2026 03:29:44 +0000
Certificate not after:    Mon 22 Feb 2027 03:34:44 +0000
Subordinate resources:    AS: 269566
                          IP: 45.188.8.0/22
                          IP: 2804:6688::/32
Validation:               Failed, certificate revoked on Mon 02 Mar 2026 07:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:0e:c0:0c:c4:cc:ea:f3:9b:1f:01:44:84:f6:fc:9c:f6:a9:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 23 03:29:44 2026 GMT
            Not After : Feb 22 03:34:44 2027 GMT
        Subject: CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:a9:6f:29:b2:d8:22:8e:13:0f:6e:70:5c:
                    39:5e:ae:54:80:0b:5d:9f:ce:b3:e7:a2:a8:77:e2:
                    ee:9d:cc:f3:3d:03:ee:b2:89:f6:a0:d1:12:c6:26:
                    45:aa:c6:8f:9c:e9:19:79:ea:8a:59:53:00:11:46:
                    c7:dd:97:b9:70:ff:71:a4:97:48:0e:e6:fd:4d:92:
                    15:53:4f:96:c2:5d:eb:ce:40:43:dd:23:69:89:ad:
                    23:a2:06:d4:2e:2c:96:be:69:ca:e2:b6:84:52:f4:
                    48:e0:de:33:33:33:96:3a:8a:05:c9:77:3d:89:db:
                    60:58:d4:1a:f0:3e:4a:a0:e5:91:9d:71:b2:32:c3:
                    6e:e1:3d:b6:b3:a5:16:1c:ef:22:e1:cc:27:92:ba:
                    0c:5b:56:a8:ce:05:19:1d:1c:9e:c5:bd:18:08:6a:
                    d0:e6:f3:ae:e3:24:fa:19:41:da:67:5d:ae:94:df:
                    56:17:f6:8a:9a:46:59:48:35:55:32:95:0a:6b:36:
                    96:3a:7a:e2:dd:29:85:f2:3f:c4:47:d5:f3:89:59:
                    45:71:82:08:d4:f8:83:3b:da:03:b9:89:2f:d2:61:
                    c6:01:17:e3:8b:8f:39:c2:4e:17:7c:89:8e:88:09:
                    4e:ee:74:45:9d:2c:e9:2c:0e:dd:de:ca:9f:ff:23:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.8.0/22
                IPv6:
                  2804:6688::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269566

    Signature Algorithm: sha256WithRSAEncryption
         69:58:af:38:29:98:31:f2:9d:29:31:ba:bb:ed:39:38:af:d7:
         98:c6:36:31:f8:d9:c3:9a:33:83:a1:dc:32:96:76:29:1f:dc:
         01:8e:25:e4:a1:2b:8a:87:9e:fb:c4:4a:84:c9:e3:d5:f1:88:
         95:9f:fe:98:0b:c4:f9:0a:a7:20:0d:39:0e:4e:26:ee:01:be:
         03:4a:57:b6:c2:14:ed:da:e1:ec:01:ab:ef:6a:bf:62:42:c0:
         8e:e4:40:4b:bc:e0:fb:f7:f6:8d:b4:87:d0:46:17:b4:91:d5:
         27:d1:e7:e8:fd:f5:e6:a4:24:22:9b:30:8a:89:d7:af:f9:c2:
         45:9c:33:a9:d7:21:a4:ca:6e:6b:22:44:97:b2:cc:09:07:4e:
         e2:bb:58:1d:ad:17:a6:c2:12:02:76:17:71:d0:be:6c:8e:d4:
         e3:ce:12:34:dd:36:09:f5:20:9a:ab:38:84:76:ae:41:6d:e0:
         ae:e7:63:ab:bf:e2:92:69:5e:da:19:1c:bc:c7:bd:78:0c:2c:
         8d:fe:0e:86:26:92:b0:db:1c:75:e2:19:1d:23:ef:d6:aa:50:
         de:bf:de:91:ca:3f:6b:7a:72:1b:54:98:7c:a6:b0:1c:71:96:
         02:14:f1:c1:be:77:29:02:30:9b:55:54:2b:51:95:bb:90:80:
         44:87:d9:15
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDw7ADMTM6vObHwFEhPb8nPap5wAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAyMjMwMzI5NDRaFw0yNzAyMjIwMzM0NDRaMDMxMTAvBgNV
BAMTKEFGNzAzNTk3Q0VBRDhFQzlFNjlFMkEyMkU5QkVBNUQ2REYxNDdBRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OqlvKbLYIo4TD25wXDlerlSA
C12fzrPnoqh34u6dzPM9A+6yifag0RLGJkWqxo+c6Rl56opZUwARRsfdl7lw/3Gk
l0gO5v1NkhVTT5bCXevOQEPdI2mJrSOiBtQuLJa+acritoRS9Ejg3jMzM5Y6igXJ
dz2J22BY1BrwPkqg5ZGdcbIyw27hPbazpRYc7yLhzCeSugxbVqjOBRkdHJ7FvRgI
atDm867jJPoZQdpnXa6U31YX9oqaRllINVUylQprNpY6euLdKYXyP8RH1fOJWUVx
ggjU+IM72gO5iS/SYcYBF+OLjznCThd8iY6ICU7udEWdLOksDt3eyp//I64xAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvcDWXzq2Oyeae
KiLpvqXW3xR65jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWZW
N0cxb2tUMXZRdEZiTVFwZ2F0REM5cHRod0FNVWQ4SFVydnVFb3ZFNEsvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vm
VjdHMW9rVDF2UXRGYk1RcGdhdERDOXB0aHdBTVVkOEhVcnZ1RW92RTRLLzAvQUY3
MDM1OTdDRUFEOEVDOUU2OUUyQTIyRTlCRUE1RDZERjE0N0FFNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbwIMA0EAgACMAcDBQAoBGaIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQc/jANBgkqhkiG9w0BAQsFAAOCAQEAaVivOCmYMfKdKTG6
u+05OK/XmMY2MfjZw5ozg6HcMpZ2KR/cAY4l5KErioee+8RKhMnj1fGIlZ/+mAvE
+QqnIA05Dk4m7gG+A0pXtsIU7drh7AGr72q/YkLAjuRAS7zg+/f2jbSH0EYXtJHV
J9Hn6P315qQkIpswionXr/nCRZwzqdchpMpuayJEl7LMCQdO4rtYHa0XpsISAnYX
cdC+bI7U484SNN02CfUgmqs4hHauQW3grudjq7/ikmle2hkcvMe9eAwsjf4OhiaS
sNscdeIZHSPv1qpQ3r/ekco/a3pyG1SYfKawHHGWAhTxwb53KQIwm1VUK1GVu5CA
RIfZFQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:45:45 2026 by rpki-client