Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/038BE8318FD3D7C7FB94CE07A5A03B4AA15CCC6C.cer
File:                     038BE8318FD3D7C7FB94CE07A5A03B4AA15CCC6C.cer (raw, json)
Hash identifier:          /nS4N01X1bEsKGglh6xLKUxqPfmjUPjbWEQbwxd8gR0=
Subject key identifier:   03:8B:E8:31:8F:D3:D7:C7:FB:94:CE:07:A5:A0:3B:4A:A1:5C:CC:6C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A99405EDEB1D2AA06C42F150274C02128E1C336
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/038BE8318FD3D7C7FB94CE07A5A03B4AA15CCC6C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Feb 2025 18:09:01 +0000
Certificate not after:    Thu 19 Feb 2026 18:14:01 +0000
Subordinate resources:    AS: 271437
                          IP: 45.225.80.0/22
                          IP: 2804:7b88::/32
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 01:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:99:40:5e:de:b1:d2:aa:06:c4:2f:15:02:74:c0:21:28:e1:c3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 20 18:09:01 2025 GMT
            Not After : Feb 19 18:14:01 2026 GMT
        Subject: CN=038BE8318FD3D7C7FB94CE07A5A03B4AA15CCC6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:c9:1a:f0:84:15:37:11:65:43:2d:a4:69:
                    33:a7:1c:3b:03:61:23:dc:5e:fb:a0:f2:66:98:6f:
                    c9:37:06:53:b3:a7:ec:3b:58:90:5a:9b:30:ad:0d:
                    7a:e8:02:af:24:52:83:c4:ae:30:00:c0:42:6b:ac:
                    4e:e9:35:15:12:3d:0b:7a:0e:54:af:c7:86:00:81:
                    bd:59:f2:84:85:cd:64:21:23:60:73:9f:3e:d1:cc:
                    8b:c5:05:9d:78:59:93:60:f4:87:59:32:ab:b6:89:
                    14:00:8b:78:d6:dc:a5:77:1b:85:74:28:74:c0:13:
                    4e:e6:60:33:f0:19:5e:fc:be:29:ec:08:ec:2c:27:
                    dd:b0:13:f2:c2:20:a3:72:69:f6:cd:ce:83:96:05:
                    80:92:cc:bc:37:99:32:97:96:4d:11:29:81:91:9b:
                    ee:18:15:55:d1:8e:86:ba:9c:57:ed:c8:36:e9:48:
                    94:a0:e8:9a:04:20:1b:09:a5:22:4b:08:45:04:93:
                    6f:90:4e:32:81:97:db:4c:3f:9e:ba:76:36:55:6a:
                    72:ab:4a:77:0c:50:71:3a:db:bf:b4:ba:2b:e2:bc:
                    ef:90:33:68:9f:2b:db:bf:4e:eb:45:7e:dd:e6:a1:
                    fe:3c:66:65:6b:18:ad:88:d3:89:41:d8:69:9f:de:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:8B:E8:31:8F:D3:D7:C7:FB:94:CE:07:A5:A0:3B:4A:A1:5C:CC:6C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/038BE8318FD3D7C7FB94CE07A5A03B4AA15CCC6C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.80.0/22
                IPv6:
                  2804:7b88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271437

    Signature Algorithm: sha256WithRSAEncryption
         34:27:c3:dc:44:7f:b7:54:5c:bd:e9:dc:e2:d9:4e:38:ef:b5:
         1d:ab:66:a0:7e:fa:99:3f:1b:5b:88:d6:b1:ba:0d:b7:10:9e:
         9d:2d:84:a5:ac:72:59:4a:35:73:d0:81:72:98:45:7e:73:40:
         8c:51:53:59:e1:b2:e4:74:39:b3:4a:df:db:07:d3:11:7d:db:
         cb:a9:d9:be:ab:87:a8:26:71:7c:b3:54:1a:e1:99:e3:bf:e5:
         f3:67:74:72:46:fa:73:04:c7:17:26:11:98:89:d3:a6:5d:aa:
         c0:6a:99:d8:76:d0:10:a6:27:58:02:55:06:c4:b8:05:d5:de:
         57:0f:5e:9a:54:aa:c7:4a:f2:96:c2:9d:d8:1c:2c:b6:ec:e3:
         00:a4:fb:4d:ce:e6:57:13:21:c8:0e:db:2c:60:1b:61:dd:29:
         54:21:82:3e:9d:8b:82:72:c9:75:6c:6f:e4:52:82:99:42:a5:
         6a:c6:18:26:ef:d6:b0:84:3f:81:6c:07:ec:bb:0f:61:ad:ad:
         90:d9:db:2a:10:ad:d0:67:31:d2:8e:b7:ce:3e:7d:5b:20:81:
         42:dd:d2:23:f2:13:4a:ac:e7:b2:0b:65:a3:0a:94:37:74:a1:
         a9:dc:58:a4:11:49:d6:6b:3d:62:1c:d5:36:3a:1f:a8:5d:13:
         06:94:f2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:10:12 2025 by rpki-client