Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/034C2E595CC320161758AA025C6E30E2C62D7D64.cer
File:                     034C2E595CC320161758AA025C6E30E2C62D7D64.cer (raw, json)
Hash identifier:          oTegyD3BtaGyjRzz0we/YEqD5cJZcPdXIfcZNS0JAXY=
Subject key identifier:   03:4C:2E:59:5C:C3:20:16:17:58:AA:02:5C:6E:30:E2:C6:2D:7D:64
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       457E7B3F4F99B7D4C0C3D19BBD57AD1CFA92E530
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/034C2E595CC320161758AA025C6E30E2C62D7D64.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Dec 2024 18:42:40 +0000
Certificate not after:    Fri 12 Dec 2025 18:47:40 +0000
Subordinate resources:    AS: 273714
                          IP: 2804:8b24::/32
Validation:               Failed, certificate revoked on Sun 26 Jan 2025 04:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7e:7b:3f:4f:99:b7:d4:c0:c3:d1:9b:bd:57:ad:1c:fa:92:e5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 13 18:42:40 2024 GMT
            Not After : Dec 12 18:47:40 2025 GMT
        Subject: CN=034C2E595CC320161758AA025C6E30E2C62D7D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:56:af:e6:ec:59:56:62:05:92:ee:dc:ce:56:
                    6c:27:d6:52:23:bc:69:63:65:1d:2e:ec:e7:d7:1e:
                    a8:4d:9e:9d:de:f7:4d:d7:3e:33:b2:38:3e:01:60:
                    83:35:ce:70:b3:42:0e:79:5c:22:85:ef:c2:17:9f:
                    32:e3:24:6e:36:b8:e0:2d:b6:36:88:cf:47:1e:c0:
                    5b:e9:85:eb:23:fd:21:c0:5b:94:ec:06:78:3d:6a:
                    71:b6:49:04:2c:b0:0e:e1:bc:1f:e3:d5:03:7c:ba:
                    af:26:b5:06:00:4d:67:ca:1c:df:b0:80:d6:f8:5f:
                    82:af:db:2a:53:1e:ec:cf:84:cc:90:e2:3a:8e:47:
                    02:62:85:11:ef:50:de:ce:bb:00:64:13:3a:0c:a6:
                    75:75:b7:c4:00:6a:9d:02:2d:f9:f9:71:91:2d:2d:
                    7e:38:76:0a:44:36:a0:b0:2f:35:69:c0:6c:4b:6d:
                    1c:2d:e1:9f:55:7d:fd:fe:75:05:28:03:ea:af:0d:
                    d8:93:e7:1e:85:8d:92:62:0d:e1:93:ff:c0:e4:a3:
                    2d:af:b5:9c:66:f8:d2:f4:83:fa:7d:84:15:08:df:
                    68:e5:77:46:c6:4b:78:ac:24:17:f6:58:2b:b4:13:
                    aa:71:d7:6e:45:0d:9c:bf:70:96:77:17:9e:ea:92:
                    a0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:4C:2E:59:5C:C3:20:16:17:58:AA:02:5C:6E:30:E2:C6:2D:7D:64
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/034C2E595CC320161758AA025C6E30E2C62D7D64.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273714

    Signature Algorithm: sha256WithRSAEncryption
         87:6c:36:21:c3:ea:7d:67:0d:dd:27:d4:46:b4:91:29:fa:9b:
         5e:01:50:f2:ca:ec:bf:4a:1b:dc:04:4c:04:4b:d3:fa:4d:a7:
         46:f4:f3:8f:f7:86:c5:24:ad:cd:ee:a3:6f:85:4b:ed:5c:46:
         1b:16:f9:f4:65:4d:8e:2b:27:ce:8b:f3:73:29:e2:5b:1f:41:
         77:d9:40:6e:ba:47:a9:86:cc:dc:65:96:84:aa:fb:be:cd:26:
         c9:7d:e9:ae:40:46:f5:08:f9:96:38:b7:a7:55:a8:39:9e:13:
         79:ef:17:3d:c3:4d:fe:e5:b1:ce:26:7f:7f:88:47:2f:6c:b6:
         d8:f4:f7:64:54:84:8d:53:61:31:b7:de:45:43:94:2a:7f:46:
         aa:30:f7:6e:c0:e4:b2:01:7d:9f:aa:01:91:9e:44:ff:54:99:
         6f:5b:5d:40:b8:a5:e7:ab:2b:1a:a0:e7:86:23:15:f9:02:06:
         00:5a:18:27:97:80:4e:90:55:12:78:91:f7:f7:5a:0a:9d:5e:
         4b:60:d3:41:4f:62:be:91:fd:68:fc:b5:c7:a0:ef:2a:e1:24:
         4e:0d:cc:bd:52:07:09:99:b3:10:48:c7:5d:4d:2d:8b:dd:f1:
         47:20:20:ad:cc:66:a9:6b:50:4b:02:fe:63:2c:f4:9b:4c:8b:
         6d:c1:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:41:10 2025 by rpki-client