Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B28A0DFEAF5E541033A585610458FFD3C111004.cer
File:                     1B28A0DFEAF5E541033A585610458FFD3C111004.cer (raw, json)
Hash identifier:          j/7uZ9TArIGTHeN6RZ2+1MqhmkPf8yUNcN5TnZJacT4=
Subject key identifier:   1B:28:A0:DF:EA:F5:E5:41:03:3A:58:56:10:45:8F:FD:3C:11:10:04
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       309348C246EE02916BFDD09D6564A4237D921305
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/1B28A0DFEAF5E541033A585610458FFD3C111004.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Jan 2025 13:17:16 +0000
Certificate not after:    Fri 02 Jan 2026 13:22:16 +0000
Subordinate resources:    AS: 266095
                          IP: 45.5.100.0/22
                          IP: 2804:3a8c::/32
Validation:               Failed, certificate revoked on Fri 03 Jan 2025 14:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:93:48:c2:46:ee:02:91:6b:fd:d0:9d:65:64:a4:23:7d:92:13:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  3 13:17:16 2025 GMT
            Not After : Jan  2 13:22:16 2026 GMT
        Subject: CN=1B28A0DFEAF5E541033A585610458FFD3C111004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:88:64:88:3c:cc:1f:78:25:1d:8e:74:a0:
                    5d:5c:b0:c1:a0:e8:1f:c8:6c:52:8c:63:36:24:3e:
                    ab:98:79:74:db:85:cf:17:e5:3c:9d:6d:21:5b:a4:
                    fa:e2:8b:e7:5e:d8:36:4c:8a:18:d7:80:dc:09:8c:
                    af:7d:ff:3e:13:1b:8b:89:8c:8e:ea:86:de:8b:34:
                    82:8d:79:fd:c3:8b:88:85:d7:e3:3d:d1:7b:61:7a:
                    72:cd:bb:7e:4b:9a:71:14:02:9f:9d:30:ae:62:31:
                    87:a0:da:02:84:4c:77:9b:a6:4d:2b:b6:4c:86:99:
                    b5:17:14:bc:4a:59:15:3f:2e:33:28:8a:27:59:6b:
                    78:d7:6a:5b:fb:71:bc:9b:0a:ac:d5:6b:1f:f1:25:
                    3d:af:0d:a7:60:76:6d:f7:b5:11:23:e3:fb:5a:f8:
                    b4:7d:49:6c:c7:d2:39:77:96:bb:34:5a:77:0f:54:
                    43:5b:95:13:57:14:93:67:6e:0c:56:c2:87:9b:cf:
                    8c:b7:56:67:ef:b2:a4:43:66:7e:4f:c7:db:d0:00:
                    f5:22:b2:fd:46:dd:cd:ab:83:5e:87:9c:e1:e8:37:
                    6b:c0:f3:72:4b:b5:29:fa:28:7c:14:58:0d:4b:84:
                    62:f4:70:32:b3:4f:77:a7:7a:ad:ee:6b:3f:a8:47:
                    4e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:28:A0:DF:EA:F5:E5:41:03:3A:58:56:10:45:8F:FD:3C:11:10:04
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/1B28A0DFEAF5E541033A585610458FFD3C111004.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.100.0/22
                IPv6:
                  2804:3a8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266095

    Signature Algorithm: sha256WithRSAEncryption
         8d:3b:6e:fe:70:06:32:22:2a:eb:69:e2:b8:a2:a1:b7:9a:76:
         87:d3:e0:ee:10:34:0c:dd:a5:ad:97:f1:18:40:3f:23:5f:3c:
         16:51:3e:27:e0:25:f5:21:7c:dd:c7:eb:86:ba:82:73:2a:2a:
         30:40:dc:54:bb:fd:35:7b:14:89:2a:38:39:c9:11:73:d2:32:
         ff:2f:ac:d0:94:8f:66:67:53:d6:77:d1:17:76:27:aa:3d:9d:
         bd:db:36:be:2d:7e:42:2c:4b:e4:78:eb:55:a2:1b:78:d7:46:
         8f:a5:b8:f3:8e:ee:13:b5:c0:1c:09:f2:d3:fe:12:8c:35:e7:
         2b:62:66:44:c0:78:10:e6:7c:32:13:99:2f:f6:f4:da:bb:d8:
         51:e0:6c:52:ba:2f:cc:9a:16:cc:54:f2:93:a8:08:b5:c9:d8:
         41:f3:9b:77:42:29:e3:7a:3b:36:3e:73:c1:b1:ea:3c:bb:18:
         07:dd:33:b3:4b:ca:59:e1:de:3c:a9:d5:8f:e9:e3:7c:61:7f:
         22:fa:1b:f2:0a:43:54:9a:c9:e3:40:5e:bf:de:f1:68:6f:cd:
         3e:c6:86:bf:04:59:e9:f1:53:7b:a5:3a:40:fa:9d:cb:54:d2:
         ea:25:40:b9:22:5a:ed:83:24:f7:b9:7b:0c:c5:9f:fd:48:b5:
         f8:58:bf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:11:23 2025 by rpki-client