Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CFB25BBA6022E063C402CB54BDDA1038EA8A1DDF.cer
File:                     CFB25BBA6022E063C402CB54BDDA1038EA8A1DDF.cer (raw, json)
Hash identifier:          uNINyZW4OS9D4agNa9iLiFS6+vJhtLMMw6Sa7XGLvG4=
Subject key identifier:   CF:B2:5B:BA:60:22:E0:63:C4:02:CB:54:BD:DA:10:38:EA:8A:1D:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2C4AC1B74CD8E9896955AC4C5FAB0FEA0F99DC4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/CFB25BBA6022E063C402CB54BDDA1038EA8A1DDF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Apr 2026 14:14:53 +0000
Certificate not after:    Tue 13 Apr 2027 14:19:53 +0000
Subordinate resources:    AS: 269595
                          IP: 45.188.236.0/22
                          IP: 2804:66f8::/32
Validation:               Failed, certificate revoked on Fri 17 Apr 2026 18:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4a:c1:b7:4c:d8:e9:89:69:55:ac:4c:5f:ab:0f:ea:0f:99:dc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 14 14:14:53 2026 GMT
            Not After : Apr 13 14:19:53 2027 GMT
        Subject: CN=CFB25BBA6022E063C402CB54BDDA1038EA8A1DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:42:86:5a:51:47:56:3b:f3:eb:8d:6c:fb:d5:
                    15:95:b1:83:b6:db:22:a4:ff:87:7d:c8:6f:f9:69:
                    21:10:fd:6b:2f:c1:5a:7c:56:cd:59:3b:8f:ea:e3:
                    8b:75:ba:27:e1:2b:b5:97:fa:eb:09:7c:45:45:72:
                    83:92:f5:e7:96:35:52:9b:cb:6c:cb:36:6b:d5:ba:
                    9f:ab:5e:1f:e0:5b:ab:37:e2:76:09:b0:9f:ed:c9:
                    53:95:77:63:9d:6d:f2:40:21:16:86:56:1b:3a:fe:
                    6b:a0:8b:d4:ea:ab:c4:f7:3f:d1:e8:78:b1:f8:74:
                    08:fa:2b:21:35:ae:23:e8:7c:be:6d:0f:c1:18:01:
                    dc:d2:ae:a1:17:88:20:27:f8:2b:ab:5f:d5:f6:65:
                    93:61:8f:84:45:4f:ff:ac:65:3b:88:c7:67:67:e6:
                    06:b7:1b:ea:f6:cf:b1:43:7d:e8:f1:70:87:73:25:
                    a3:9a:7e:68:dc:68:3e:f4:bb:54:0e:71:29:b2:f3:
                    f5:cb:09:f4:5b:66:8a:47:50:ab:a3:09:8d:95:b5:
                    aa:76:0f:e5:75:b7:de:dd:50:5d:57:13:f8:53:53:
                    24:d2:ec:c8:f1:c2:ca:67:86:f8:dd:3e:26:f8:bb:
                    b6:01:46:68:9a:b5:65:34:d8:c3:75:70:36:34:12:
                    fe:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:B2:5B:BA:60:22:E0:63:C4:02:CB:54:BD:DA:10:38:EA:8A:1D:DF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/CFB25BBA6022E063C402CB54BDDA1038EA8A1DDF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.236.0/22
                IPv6:
                  2804:66f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269595

    Signature Algorithm: sha256WithRSAEncryption
         93:b0:f9:34:79:b2:fa:53:84:f6:38:f3:0d:d8:ed:c2:8a:45:
         19:2b:d7:90:49:a4:88:e9:8d:29:61:89:c9:13:71:1d:91:15:
         c7:bc:3c:88:ac:60:4a:0b:5d:7d:8b:59:19:3b:15:75:fd:50:
         c4:97:cb:69:b1:6d:d4:a8:49:99:bf:7a:ca:c1:71:32:ac:b7:
         f5:2f:d8:b3:41:71:4d:db:a7:79:a1:39:a6:04:8f:c8:40:fd:
         6c:5a:e2:ff:87:12:f1:1c:8e:a7:51:84:63:e4:5d:d2:90:5b:
         26:3d:b4:a4:15:1b:6a:9e:52:d2:7b:d9:53:d7:b4:85:c1:73:
         40:81:02:57:ab:c8:da:4b:1f:23:a0:38:53:04:69:a3:15:23:
         3c:47:b0:42:2f:ce:aa:38:1f:a5:8e:d4:0e:e5:08:94:ef:26:
         e6:c2:de:dc:ab:c6:58:e8:92:61:8e:ed:88:46:cc:15:89:4c:
         48:85:54:10:d0:41:4a:0e:ad:00:34:b5:a4:ff:b1:92:af:20:
         0c:b8:19:86:dc:9a:1e:bf:c3:8b:21:a0:f2:ca:63:53:73:51:
         f7:b6:90:03:79:09:cb:a4:9b:3e:7b:93:b6:91:89:40:6c:43:
         47:c7:07:4b:68:32:ef:69:16:5e:ee:5b:45:e3:38:4c:44:0b:
         cd:d2:0c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:13 2026 by rpki-client