Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.cer
File:                     20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.cer (raw, json)
Hash identifier:          uqHXbovCXRwmvUllEl9V84Tn26LAZ3tOdRJASCIcPxc=
Subject key identifier:   20:A6:A3:D5:A5:B9:41:5D:EF:FE:9F:19:45:F6:AD:A2:46:CD:7F:32
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0366F091F21E35F498834F3F04ED3B0741BD4D30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Jan 2025 19:38:45 +0000
Certificate not after:    Tue 20 Jan 2026 19:43:45 +0000
Subordinate resources:    AS: 273380
                          IP: 2804:8dc8::/32
Validation:               Failed, certificate revoked on Wed 19 Mar 2025 21:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:66:f0:91:f2:1e:35:f4:98:83:4f:3f:04:ed:3b:07:41:bd:4d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 19:38:45 2025 GMT
            Not After : Jan 20 19:43:45 2026 GMT
        Subject: CN=20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:4d:be:c4:e4:26:bf:82:c8:e3:ad:cd:01:
                    c3:5a:f9:4a:bb:18:fc:ca:67:ed:21:92:dd:3a:73:
                    61:6f:d6:3b:04:4e:8d:95:9f:45:c8:e6:26:47:2a:
                    f4:2e:c3:9b:69:d0:50:87:4b:51:0b:77:57:c1:a5:
                    a3:99:13:dc:e2:68:26:f2:4a:bd:7e:d0:fa:d2:c9:
                    d5:2d:e9:df:20:c9:20:0a:11:db:f3:aa:50:33:5c:
                    62:08:2e:b8:9b:a4:37:f3:29:4a:20:d3:23:1e:53:
                    52:1f:65:8f:60:27:1a:b1:a6:3c:17:06:fd:9e:c2:
                    5c:22:68:88:be:03:ad:30:5f:9a:bc:8e:5d:1c:13:
                    9a:73:dc:01:8c:f5:12:e7:0d:66:06:8f:cb:33:5f:
                    02:14:1f:aa:02:0c:c9:6a:dc:8f:2a:a5:db:98:72:
                    8f:50:8e:70:b0:77:0b:81:47:ea:d7:43:58:e1:bc:
                    43:2a:8a:ce:b3:98:81:45:5b:8a:20:35:12:3d:9c:
                    97:a2:d5:8e:bd:ac:06:3c:0e:d8:4f:9b:65:e1:51:
                    a2:10:5a:aa:4c:69:bc:53:86:23:95:e1:fa:4c:58:
                    30:66:52:54:ae:10:7a:c3:d2:d5:5f:62:5d:a8:0a:
                    50:76:d5:c6:56:10:94:9d:80:2a:d0:af:b1:34:52:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:A6:A3:D5:A5:B9:41:5D:EF:FE:9F:19:45:F6:AD:A2:46:CD:7F:32
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8dc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273380

    Signature Algorithm: sha256WithRSAEncryption
         0b:b7:7e:c6:0a:8e:a4:b0:ea:9e:63:85:ef:9d:21:03:44:da:
         38:9d:46:bd:d0:31:cd:ea:ba:b7:2e:91:cb:f1:ef:7f:45:5e:
         69:7e:ba:ee:21:98:87:7a:0b:a4:e6:05:25:12:c6:75:e5:7d:
         f1:54:be:db:ce:cf:99:2e:83:ad:d6:d0:96:10:f5:4c:8b:bd:
         c5:30:7d:bd:4d:da:eb:b5:d9:ae:95:16:fe:64:d5:a2:40:25:
         5c:15:64:d0:a5:47:54:35:58:2c:66:15:c9:0c:af:61:66:90:
         41:26:15:ae:84:85:51:72:f6:2d:6e:97:3b:d8:72:71:8d:75:
         6c:67:b3:bd:f7:98:87:51:1d:97:1c:1b:9d:a1:b5:23:09:c6:
         8b:d5:ce:61:7a:b8:4c:6f:e6:34:20:4f:82:50:48:69:22:22:
         fe:d3:41:c3:bd:46:14:7c:4b:c9:15:a0:6b:68:39:43:de:de:
         be:54:b4:9e:2a:f2:03:e1:9b:2e:fa:3a:45:88:59:50:cd:b3:
         52:2e:8e:30:c3:4b:f1:bc:44:4c:b4:73:32:1d:6f:fb:04:8a:
         b6:4d:d6:e5:ea:03:13:70:b6:03:9d:c7:18:31:24:b6:b7:da:
         96:e1:5f:e4:ca:e5:e1:be:45:07:29:9d:8f:02:a3:2b:1b:65:
         d7:d2:0c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:10:48 2025 by rpki-client