Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2925537C23E520880A217E95F2C902FE4962439B.cer
File:                     2925537C23E520880A217E95F2C902FE4962439B.cer (raw, json)
Hash identifier:          ZVV4tzTtfsCfNmdyf9usekNAnLjbkgtthtrlcy51+mU=
Subject key identifier:   29:25:53:7C:23:E5:20:88:0A:21:7E:95:F2:C9:02:FE:49:62:43:9B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       433EAC176F3300A4BCBE11075B5D1F5DBCE1674E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/81HirKtUurLEehKMk25GnRCBuC2CBztSXfQLoaEtQvFE/0/2925537C23E520880A217E95F2C902FE4962439B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/81HirKtUurLEehKMk25GnRCBuC2CBztSXfQLoaEtQvFE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Mar 2025 14:19:23 +0000
Certificate not after:    Wed 11 Mar 2026 14:24:23 +0000
Subordinate resources:    AS: 269568
                          IP: 45.189.48.0/22
                          IP: 2804:6690::/32
Validation:               Failed, certificate revoked on Wed 19 Mar 2025 17:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3e:ac:17:6f:33:00:a4:bc:be:11:07:5b:5d:1f:5d:bc:e1:67:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 12 14:19:23 2025 GMT
            Not After : Mar 11 14:24:23 2026 GMT
        Subject: CN=2925537C23E520880A217E95F2C902FE4962439B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:53:34:f6:3f:32:31:9d:72:9d:05:ec:4a:ca:
                    e4:43:90:6e:d8:8b:cd:2a:40:a6:22:a3:62:ec:02:
                    1a:33:65:12:5f:23:8b:28:a8:ba:33:ad:52:55:af:
                    a3:fd:5a:dd:b2:dd:71:5b:dd:a2:de:8a:cb:51:ab:
                    0a:8d:d4:73:ae:34:ef:84:6f:f2:db:00:25:ac:92:
                    35:2a:10:3e:a0:c4:dc:05:4f:13:21:bc:c2:89:f9:
                    95:62:e9:5d:e7:c7:b4:c3:c1:bb:3c:50:1c:84:6d:
                    10:36:da:21:8f:9f:a4:68:08:51:6f:89:b6:d3:e5:
                    0b:ac:f4:da:4d:83:53:35:d5:7f:49:39:49:de:9c:
                    9f:20:f0:49:30:dc:7f:31:28:f8:13:09:fb:1f:21:
                    27:b0:b2:04:4a:54:0f:bb:a7:88:e8:60:a2:7e:97:
                    5d:6e:bc:21:4e:82:db:5d:58:0c:9b:c1:a7:2b:8e:
                    7d:43:c3:37:7a:66:58:f1:52:73:e3:37:a1:28:95:
                    0c:e4:64:5e:4c:4b:18:b7:a5:2b:ea:4d:06:81:c8:
                    73:22:db:2f:32:f5:03:29:6c:cc:84:7b:ac:dc:6c:
                    70:74:36:26:59:6a:75:fe:24:80:ff:ab:43:07:92:
                    16:c1:e9:d3:e8:1f:0c:38:55:71:6f:52:a9:6b:eb:
                    46:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:25:53:7C:23:E5:20:88:0A:21:7E:95:F2:C9:02:FE:49:62:43:9B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/81HirKtUurLEehKMk25GnRCBuC2CBztSXfQLoaEtQvFE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/81HirKtUurLEehKMk25GnRCBuC2CBztSXfQLoaEtQvFE/0/2925537C23E520880A217E95F2C902FE4962439B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.48.0/22
                IPv6:
                  2804:6690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269568

    Signature Algorithm: sha256WithRSAEncryption
         b9:8c:a5:0f:f6:c7:81:60:d3:41:cf:0a:ce:84:46:89:4d:82:
         f6:ca:cc:c8:5b:c2:fb:e1:d1:d8:06:b6:fa:99:de:87:aa:37:
         57:f7:a5:88:78:81:15:7a:01:70:cd:6e:ee:c9:2e:41:df:9b:
         2e:79:a7:7a:cd:f1:ef:d6:14:f3:63:00:97:7f:c6:3e:00:3c:
         4b:04:32:01:08:6a:0f:d7:89:02:6c:87:68:83:1c:ec:55:c4:
         5c:b2:41:c4:fd:b4:01:5f:2a:35:88:8d:54:7f:cc:d5:be:fc:
         59:b1:e6:30:84:bf:1c:ad:a1:45:8a:c5:81:6f:55:3b:57:4f:
         a8:34:32:e9:16:e0:70:70:0a:a1:1d:92:26:77:82:c4:c2:06:
         63:0c:bf:fe:56:bc:13:c7:6e:11:6e:b8:0b:66:73:f2:47:7b:
         f4:96:c1:e6:96:b8:48:2a:17:d9:05:8d:94:10:44:52:42:aa:
         3a:00:96:84:ed:18:41:e3:59:f6:21:2e:99:e9:8e:6e:5e:29:
         a0:0a:ea:b9:c0:a0:bb:91:a6:63:42:ba:de:bd:0e:5a:d8:c7:
         95:81:62:2c:34:45:ec:1c:9f:f4:3b:62:68:a1:14:58:e3:b9:
         84:8c:67:3c:5a:36:ec:62:81:c3:d3:58:13:8e:df:bb:98:e5:
         94:8f:c4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:26:20 2025 by rpki-client