Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/25828EC0A96A4EE910BCBFF048F36176EB90EBE8.cer
File:                     25828EC0A96A4EE910BCBFF048F36176EB90EBE8.cer (raw, json)
Hash identifier:          Qwm9cPL0GSXeaVYN6ycpcMjPHSDSEPk+QgTd5PA+74A=
Subject key identifier:   25:82:8E:C0:A9:6A:4E:E9:10:BC:BF:F0:48:F3:61:76:EB:90:EB:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6A9DB32927394C750224120DDBC90B202858DF95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/25828EC0A96A4EE910BCBFF048F36176EB90EBE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Mar 2025 13:00:37 +0000
Certificate not after:    Mon 02 Mar 2026 13:05:37 +0000
Subordinate resources:    AS: 274747
                          IP: 45.228.203.0/24
                          IP: 190.113.62.0/24
                          IP: 200.9.76.0/23
                          IP: 2804:92fc::/32
Validation:               Failed, certificate revoked on Mon 10 Mar 2025 20:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9d:b3:29:27:39:4c:75:02:24:12:0d:db:c9:0b:20:28:58:df:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  3 13:00:37 2025 GMT
            Not After : Mar  2 13:05:37 2026 GMT
        Subject: CN=25828EC0A96A4EE910BCBFF048F36176EB90EBE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:53:cc:98:b9:79:16:52:d6:8b:17:1b:ce:
                    f7:dc:66:8e:3a:20:4c:9a:08:d8:41:e7:5c:b9:44:
                    13:b5:23:00:cd:98:ed:60:78:0f:a2:05:d8:fb:ed:
                    47:02:95:29:c5:c0:6c:b9:ca:d6:68:03:f2:f0:5a:
                    90:de:7e:01:6d:4d:67:5a:c9:e2:e3:3a:87:82:68:
                    e8:32:d4:7d:ff:93:94:48:ba:36:8c:a9:be:36:cf:
                    59:07:cf:13:b4:45:5c:22:24:bf:46:c8:e1:23:52:
                    ae:c2:a8:2c:6e:aa:b3:03:fa:47:54:ff:8d:fd:97:
                    90:65:a6:53:02:8d:a6:e6:89:6f:36:35:54:db:33:
                    7b:21:d9:9b:6c:bd:21:ca:c7:36:6d:40:a4:23:40:
                    64:cc:cd:e6:cd:d7:fc:ae:51:99:a7:20:5b:8d:9f:
                    0e:8d:4c:b4:b2:13:10:d6:65:1b:f6:2a:5d:48:e2:
                    df:d1:bd:69:b5:04:32:de:d5:66:9a:21:b7:48:44:
                    81:ba:87:0c:67:66:7a:7e:5e:2f:6b:f6:c0:7d:c6:
                    9b:e2:f5:0f:a7:a6:1e:0b:8a:8f:c6:5d:dd:5b:fc:
                    bf:b8:ad:94:76:d3:5e:2f:fb:87:f7:6e:85:cb:90:
                    16:d9:b4:07:a3:6f:92:54:4a:87:66:c7:3a:69:53:
                    ef:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:82:8E:C0:A9:6A:4E:E9:10:BC:BF:F0:48:F3:61:76:EB:90:EB:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/25828EC0A96A4EE910BCBFF048F36176EB90EBE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.203.0/24
                  190.113.62.0/24
                  200.9.76.0/23
                IPv6:
                  2804:92fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274747

    Signature Algorithm: sha256WithRSAEncryption
         78:83:5c:08:e4:b7:c2:60:34:ce:00:05:ed:15:47:31:21:51:
         4b:0f:7c:23:e4:4f:79:96:25:37:35:1e:2a:2b:7e:e6:f9:7f:
         5c:84:e5:19:bd:c8:16:51:06:02:7d:2b:bc:e3:63:c0:e1:11:
         24:60:7a:26:54:e2:a5:b7:a9:cf:35:98:b5:60:1b:a0:63:83:
         fc:63:05:c3:d5:09:08:00:92:bb:4e:a3:e1:8c:b6:9b:e9:49:
         83:f9:01:e3:90:09:27:0a:c8:02:f8:e1:72:bd:d6:01:f6:8e:
         23:ea:c4:30:c1:22:bd:43:28:cd:5f:53:ee:5b:be:65:36:68:
         a4:f9:80:80:b9:cf:28:48:ac:89:46:b4:9c:74:26:ec:48:0f:
         0c:60:54:6b:04:ce:34:d1:e1:f9:06:9b:1f:e3:9c:0f:57:25:
         37:ee:78:75:ba:40:59:b9:50:ca:ab:a3:e0:df:d3:93:28:a4:
         44:94:4e:8f:a2:c5:46:10:09:7f:f2:e9:47:b2:f8:a6:2f:b9:
         f0:3b:1a:3d:07:61:ad:c8:9f:ea:45:aa:e1:62:8e:74:6b:1d:
         8e:6b:38:fc:74:d3:24:2c:fb:0f:a5:f8:0e:0b:00:2c:2d:a8:
         c4:be:74:f0:c1:d7:46:66:99:ad:1f:68:1b:06:af:dc:28:17:
         ef:f9:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:31 2025 by rpki-client