Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/292B3551658387A06B4D370FC9E211E696A15EB4.cer
File:                     292B3551658387A06B4D370FC9E211E696A15EB4.cer (raw, json)
Hash identifier:          7bpH/l8U6hhrNnUGMr3Li+65CCN6tD3ZsbY+G5L16nQ=
Subject key identifier:   29:2B:35:51:65:83:87:A0:6B:4D:37:0F:C9:E2:11:E6:96:A1:5E:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B065459EF736F8ECF1F4198B10BFB9CAA4651EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/292B3551658387A06B4D370FC9E211E696A15EB4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Nov 2024 12:57:45 +0000
Certificate not after:    Fri 28 Nov 2025 13:02:45 +0000
Subordinate resources:    AS: 266961
                          IP: 45.226.72.0/22
                          IP: 164.163.104.0/22
                          IP: 2804:4600::/32
Validation:               Failed, certificate revoked on Fri 24 Jan 2025 05:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:06:54:59:ef:73:6f:8e:cf:1f:41:98:b1:0b:fb:9c:aa:46:51:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 29 12:57:45 2024 GMT
            Not After : Nov 28 13:02:45 2025 GMT
        Subject: CN=292B3551658387A06B4D370FC9E211E696A15EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:14:55:8e:0f:e8:ea:65:f2:4c:a7:27:9f:
                    05:13:b8:a5:f9:54:89:64:36:43:f1:1f:36:2d:4d:
                    f0:08:eb:d9:14:fd:67:7b:af:d8:28:e3:c5:b2:a8:
                    e5:bf:41:ca:73:af:4d:19:41:b4:76:e4:ea:66:c4:
                    ea:83:00:4e:d8:2f:15:b5:a9:63:6e:35:ce:55:8e:
                    ae:06:e2:cd:e1:22:77:93:12:21:9d:e1:ab:f0:a8:
                    f1:c4:7d:ca:66:e0:a0:6b:2c:e1:9b:d0:a4:e3:2f:
                    68:3a:04:fa:20:bd:25:59:22:3f:6e:66:2a:2a:c1:
                    87:2b:db:4d:37:3c:f6:a7:38:e7:5c:43:c9:14:19:
                    1b:91:da:c5:7d:47:db:73:80:89:52:72:4f:92:98:
                    2e:38:c9:f4:5b:26:ae:86:15:e5:85:ce:1f:d3:d6:
                    89:46:0e:eb:7f:aa:3a:c3:9d:2c:c9:11:b1:64:8b:
                    0a:aa:19:75:1a:b2:59:a2:41:ab:cf:4b:ee:ac:e2:
                    d2:6e:28:0a:38:67:3a:fd:71:dc:3f:32:3e:e8:0c:
                    d2:b8:d5:93:e9:cb:16:47:08:bb:5e:e9:43:84:9b:
                    b7:d0:ea:4f:f3:ba:eb:71:c2:24:10:00:ca:7e:c2:
                    63:43:c5:5e:36:4f:cc:a0:b1:f8:28:1f:3a:85:fd:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:2B:35:51:65:83:87:A0:6B:4D:37:0F:C9:E2:11:E6:96:A1:5E:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/292B3551658387A06B4D370FC9E211E696A15EB4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.72.0/22
                  164.163.104.0/22
                IPv6:
                  2804:4600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266961

    Signature Algorithm: sha256WithRSAEncryption
         42:b9:c5:33:32:59:f5:2c:53:5c:75:aa:30:ca:50:e0:9d:24:
         2d:4a:5a:59:ef:ae:a0:d1:45:f0:aa:55:33:f6:a6:bb:5d:cb:
         62:dc:b0:cb:d4:cc:6b:36:63:60:8c:a3:08:c6:7b:b3:91:9e:
         78:f5:0d:13:f8:64:32:fe:29:44:4d:f5:da:f1:31:36:01:9b:
         ef:79:8b:91:fe:b7:84:c4:e4:80:17:98:9b:2d:7f:05:eb:8b:
         ca:73:27:ac:60:4e:af:52:17:27:70:06:46:3a:27:df:8d:d3:
         e4:6a:0f:4b:4a:08:ba:0e:e6:c5:a9:d7:f9:56:5e:f6:ad:f1:
         e7:4f:85:e6:91:21:a1:d4:9d:30:95:1c:87:b7:f2:e7:3a:3f:
         e7:55:8d:8f:38:d6:27:af:ca:0a:c4:db:0b:62:36:48:79:e7:
         32:ba:89:43:f1:0f:52:2e:c2:ef:48:8f:19:37:cd:cb:7b:d2:
         77:43:58:8f:ea:00:e3:2a:a5:62:5d:fe:f6:1b:c1:08:25:24:
         58:6f:59:76:bc:2b:d3:2e:94:95:ac:35:7b:18:fe:d4:cf:9f:
         3b:e5:4d:3c:ec:2f:f2:12:e1:f3:ce:2a:68:5f:ae:e3:1c:d5:
         90:af:8d:0d:10:d1:27:bc:d1:c5:c0:4a:1b:3b:76:99:34:c5:
         72:da:6f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:22:08 2025 by rpki-client