Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3BC92D05F6FE10F792EDA381A9E0C5F475079875.cer
File:                     3BC92D05F6FE10F792EDA381A9E0C5F475079875.cer (raw, json)
Hash identifier:          Cjq6AIXjt74OuaRpV5VxyY3pvHJpXkoTQZjozlKa/+s=
Subject key identifier:   3B:C9:2D:05:F6:FE:10:F7:92:ED:A3:81:A9:E0:C5:F4:75:07:98:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A1838A284BB8840F46CE45EA68B896320A4F2B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BuvW1gXckLBDc6aWZpcGACao5uSNMeTKgycopDtLdtYt/0/3BC92D05F6FE10F792EDA381A9E0C5F475079875.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BuvW1gXckLBDc6aWZpcGACao5uSNMeTKgycopDtLdtYt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Jul 2025 18:35:58 +0000
Certificate not after:    Mon 13 Jul 2026 18:40:58 +0000
Subordinate resources:    AS: 267274
                          IP: 45.232.160.0/22
                          IP: 2804:4af4::/32
Validation:               Failed, certificate revoked on Fri 18 Jul 2025 15:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:18:38:a2:84:bb:88:40:f4:6c:e4:5e:a6:8b:89:63:20:a4:f2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 14 18:35:58 2025 GMT
            Not After : Jul 13 18:40:58 2026 GMT
        Subject: CN=3BC92D05F6FE10F792EDA381A9E0C5F475079875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ed:a8:a5:8b:43:bd:ec:0c:03:5a:03:84:f4:
                    c7:e8:be:b6:57:90:5d:99:1c:b5:bf:62:36:1f:6d:
                    a7:3d:fa:2a:34:0b:0d:ce:5b:8b:f7:4d:e8:2d:8d:
                    c1:2b:a0:0e:db:07:bb:59:4f:bf:37:9b:c6:78:0b:
                    3c:74:7a:83:0d:b7:d6:a6:0b:18:8b:77:00:3a:66:
                    d6:06:5c:ef:67:2c:e3:60:3e:d1:fc:f1:0c:47:69:
                    f2:65:64:50:ff:90:2d:d5:6b:aa:59:1b:fc:00:9b:
                    ee:a2:8f:f3:4e:54:7d:c1:cb:1b:f4:4b:12:ce:29:
                    77:f6:5e:38:1e:23:72:0c:cc:74:ab:4e:22:4c:3e:
                    f7:1b:79:95:0f:b2:74:e7:1d:78:f8:1b:d0:00:66:
                    e9:08:bb:28:35:5d:e0:94:42:9c:62:9b:d8:9b:04:
                    b7:5b:83:71:b7:8e:de:4d:61:d1:9a:6a:df:15:48:
                    f6:c4:e9:6e:e9:73:14:8c:28:b3:4a:57:19:84:ae:
                    fa:66:79:7e:c4:91:1d:36:b2:7b:45:2e:7a:d7:56:
                    b0:a8:b5:05:7a:b1:9a:58:13:35:77:da:37:fb:e8:
                    ff:d9:30:43:16:c1:4c:36:11:18:fa:90:f0:89:25:
                    00:36:3c:2d:08:1d:2b:16:69:5e:17:68:9d:bb:b2:
                    af:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:C9:2D:05:F6:FE:10:F7:92:ED:A3:81:A9:E0:C5:F4:75:07:98:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BuvW1gXckLBDc6aWZpcGACao5uSNMeTKgycopDtLdtYt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BuvW1gXckLBDc6aWZpcGACao5uSNMeTKgycopDtLdtYt/0/3BC92D05F6FE10F792EDA381A9E0C5F475079875.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.160.0/22
                IPv6:
                  2804:4af4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267274

    Signature Algorithm: sha256WithRSAEncryption
         61:ee:83:d4:64:b8:b0:54:98:b4:d0:74:65:26:0d:61:1e:9d:
         55:0b:e8:56:ab:05:7e:ab:11:a9:7e:08:9d:b3:cf:b9:bf:9c:
         fe:c0:bb:ba:4a:3d:40:4f:16:54:83:1e:bd:0e:65:4a:9b:dc:
         c2:d9:a2:4a:1e:14:94:17:af:04:3f:57:76:41:13:cc:2e:40:
         45:29:54:05:30:f8:97:c8:6f:d1:a5:00:9e:2f:f7:44:e4:ca:
         cc:74:49:b0:83:6d:1d:bd:bd:3b:28:1a:b7:8b:cb:1b:71:9b:
         82:8a:d9:98:ce:d7:fe:b0:49:7d:5c:e6:73:0a:56:38:bf:a1:
         b0:74:e8:4d:40:c9:9a:d2:9b:24:45:fd:f3:d8:ed:63:49:3c:
         50:7c:e2:08:ff:18:8b:4d:1c:f9:68:22:52:b8:c2:1d:a9:af:
         ec:f5:6c:77:bf:23:d1:c5:15:a7:ce:ab:1d:85:3c:96:5e:99:
         16:af:28:e5:7c:0b:b3:54:58:a4:b6:d2:10:42:12:12:05:b3:
         ba:19:2d:4b:9a:c8:21:d2:7d:bb:52:17:79:f4:b9:c3:fb:de:
         54:96:fa:df:86:98:5f:30:0b:d6:f0:9d:d7:03:46:2f:21:51:
         da:85:52:48:60:cf:a4:7a:b5:26:3e:9b:a3:9b:07:8f:32:72:
         2a:a4:08:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:01:08 2025 by rpki-client