Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.cer
File:                     1E776A9F167A3ADD7E422B88C1048DD2C7E32795.cer (raw, json)
Hash identifier:          K+7DWxCl7H5JSMBmC3oxtAM/dWZfnZsLfZ7rVA850Yo=
Subject key identifier:   1E:77:6A:9F:16:7A:3A:DD:7E:42:2B:88:C1:04:8D:D2:C7:E3:27:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       273494E5026A46391450390E71E404C8A6089C40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Feb 2025 15:00:14 +0000
Certificate not after:    Fri 27 Feb 2026 15:05:14 +0000
Subordinate resources:    AS: 267556
                          IP: 45.70.0.0/22
                          IP: 2804:4338::/32
Validation:               Failed, certificate revoked on Mon 03 Mar 2025 11:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:34:94:e5:02:6a:46:39:14:50:39:0e:71:e4:04:c8:a6:08:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 28 15:00:14 2025 GMT
            Not After : Feb 27 15:05:14 2026 GMT
        Subject: CN=1E776A9F167A3ADD7E422B88C1048DD2C7E32795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:dc:2e:ad:9f:12:5a:86:e7:99:d9:ca:28:
                    17:e1:c7:22:53:f6:2e:ab:ae:b7:75:c4:6d:77:2e:
                    86:c8:a7:f3:89:73:fd:19:2a:4d:96:a9:b4:9a:e6:
                    88:19:ad:d0:e3:cb:07:ae:fd:4f:0d:a5:6b:35:26:
                    ce:d8:d8:9e:68:b9:3a:8c:52:3a:6f:dd:2f:8f:f8:
                    c2:19:5a:d5:8f:75:ae:e7:66:c7:29:c2:b8:14:27:
                    db:a8:3f:ef:38:a4:6c:f2:8a:f7:6e:8d:6e:af:8a:
                    46:96:e6:46:20:e9:f3:e5:dd:34:9c:90:62:95:3c:
                    a3:3b:fd:72:d4:5a:4e:8b:b3:09:cb:47:e6:58:86:
                    33:77:70:9a:01:d6:19:60:e2:01:0b:43:58:cc:70:
                    2c:18:b4:62:90:aa:23:c5:fd:75:6a:c0:ed:7a:2a:
                    1e:ae:a7:8b:9a:52:8a:23:bb:94:b9:56:51:c1:11:
                    f8:02:85:c0:38:e9:94:fc:b6:13:f7:df:14:50:14:
                    e0:93:5a:5f:b3:97:08:db:3c:05:47:f5:ef:40:9b:
                    40:a5:ad:80:86:56:e3:8c:a3:80:3f:f5:72:2c:2a:
                    52:f1:9b:d0:5a:2a:7a:f9:34:2c:ad:87:b0:9c:f2:
                    06:26:d1:d3:9f:ff:57:f4:61:2a:26:00:e7:e3:33:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:77:6A:9F:16:7A:3A:DD:7E:42:2B:88:C1:04:8D:D2:C7:E3:27:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/1E776A9F167A3ADD7E422B88C1048DD2C7E32795.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.0.0/22
                IPv6:
                  2804:4338::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267556

    Signature Algorithm: sha256WithRSAEncryption
         d2:0b:6a:8c:97:5e:f6:cd:0b:a1:75:b3:51:36:5b:41:bf:e0:
         b9:d0:86:f2:eb:20:b9:ce:4e:22:5d:52:3f:e1:1e:de:b0:95:
         f4:c3:39:45:8a:70:af:4e:1c:66:ac:87:23:91:bd:a1:c8:7b:
         4f:b4:13:4a:3a:db:6c:bf:a7:13:a3:51:6a:2e:ed:9d:f4:0d:
         9a:a6:e6:ad:5b:67:7f:82:59:a5:7d:e8:38:ad:f1:8f:d6:74:
         76:ff:e5:34:51:d9:26:6e:89:f8:f5:c9:d8:df:07:bb:e9:ea:
         c0:ca:a5:b2:25:df:63:96:b7:62:b9:97:b6:06:a1:fd:07:19:
         8d:ff:ab:a5:c3:b8:d5:b5:28:6f:17:9c:ce:ec:48:1c:25:6d:
         81:c2:00:8d:24:fb:41:fd:7a:2b:e5:ed:22:2f:16:d9:4a:7c:
         17:43:0d:c2:90:7c:32:4a:6e:29:0c:2a:6f:ce:99:f7:bf:ee:
         17:93:78:0d:a6:2a:e7:e5:f4:b7:a3:d5:c6:2c:78:4b:b1:83:
         41:6e:30:2d:6a:7a:07:de:b2:44:e2:eb:f4:0d:d0:ae:df:4d:
         2f:11:73:a7:92:fb:e6:5a:c4:97:71:da:e6:19:51:28:b8:4a:
         3e:a7:80:85:d1:05:af:b5:50:d3:bc:90:e8:89:ba:98:bd:3f:
         97:d2:2d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:19 2025 by rpki-client