Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32DC2BA5483191FA204F4266804A063448BC89E7.cer
File:                     32DC2BA5483191FA204F4266804A063448BC89E7.cer (raw, json)
Hash identifier:          M8oySuVCyv/QSK+hmVXzfmTjmHYwKJLlfFQFwNu5RzA=
Subject key identifier:   32:DC:2B:A5:48:31:91:FA:20:4F:42:66:80:4A:06:34:48:BC:89:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       33ABFCE299CB7291D149DF7293AA8804CE9CB62D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/32DC2BA5483191FA204F4266804A063448BC89E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Dec 2024 14:41:31 +0000
Certificate not after:    Fri 05 Dec 2025 14:46:31 +0000
Subordinate resources:    AS: 264397
                          IP: 131.161.92.0/22
                          IP: 164.163.36.0/22
                          IP: 170.239.96.0/22
                          IP: 2804:1dd4::/32
Validation:               Failed, certificate revoked on Sun 15 Dec 2024 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ab:fc:e2:99:cb:72:91:d1:49:df:72:93:aa:88:04:ce:9c:b6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  6 14:41:31 2024 GMT
            Not After : Dec  5 14:46:31 2025 GMT
        Subject: CN=32DC2BA5483191FA204F4266804A063448BC89E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1d:55:a3:03:cc:7e:1f:20:c8:51:28:0e:ff:
                    94:21:36:99:f4:25:94:9e:43:cf:07:f2:d7:a4:97:
                    5d:ba:eb:44:0d:87:fc:2c:00:64:12:46:62:e2:2d:
                    16:b8:6e:b8:19:63:ca:e3:c1:2f:73:5d:a2:ed:bb:
                    8d:04:f3:05:a9:7a:03:dc:52:32:c8:cf:46:ee:39:
                    2b:0e:6a:4c:63:89:5c:4a:9e:93:96:67:d4:ea:0b:
                    9a:59:64:d5:f9:b9:f1:74:90:5b:e5:c5:d6:ef:ae:
                    ea:bb:82:9f:22:54:ac:10:5d:13:03:c8:43:c1:cb:
                    b1:26:51:d9:bd:8f:b2:e7:37:d9:9b:23:b2:6e:04:
                    45:5c:fc:b2:a1:30:06:99:15:f9:9a:0c:bc:44:79:
                    f5:85:9f:fc:9e:1e:61:89:7b:c2:67:c4:58:a6:c4:
                    14:f7:d2:b1:28:48:4a:ff:70:9a:6b:0c:79:b2:e6:
                    6b:22:b3:7d:df:96:ca:74:bd:79:12:cb:25:cb:bf:
                    f0:53:00:82:c2:44:de:8e:a5:d5:da:dc:3d:e0:2c:
                    b8:a7:26:1e:76:61:c4:92:11:01:f3:01:d1:49:47:
                    26:19:13:2f:95:81:80:9a:5c:f1:bb:b3:2f:6c:fb:
                    6e:11:42:9b:df:32:ab:41:42:1b:02:bb:06:ed:38:
                    72:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:DC:2B:A5:48:31:91:FA:20:4F:42:66:80:4A:06:34:48:BC:89:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/32DC2BA5483191FA204F4266804A063448BC89E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.92.0/22
                  164.163.36.0/22
                  170.239.96.0/22
                IPv6:
                  2804:1dd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264397

    Signature Algorithm: sha256WithRSAEncryption
         71:88:27:f7:8c:17:55:cc:8d:92:be:a7:35:8d:8a:d8:3f:e0:
         08:c4:9c:20:fe:44:d1:f5:d0:bf:6a:aa:18:15:9f:d9:9f:2d:
         a9:74:b5:e1:be:65:18:67:a9:f4:ad:29:38:18:58:93:a4:6f:
         44:be:ce:34:b9:39:a8:cb:e2:b7:b8:00:bf:f1:8b:de:40:70:
         24:07:70:87:ec:90:8f:16:f4:f8:e0:0a:f1:d1:8c:b6:62:57:
         d0:61:ce:67:4b:be:41:b6:5b:47:da:01:1b:19:55:a1:78:45:
         4e:51:86:22:04:3f:36:55:78:3c:54:d7:39:0b:44:1b:00:6c:
         e6:5d:29:25:ef:ab:6e:90:33:6d:55:3f:c3:60:57:a1:39:00:
         3c:76:ae:39:69:0b:47:ac:3a:a7:b0:29:da:e6:ef:12:95:15:
         d4:54:bd:f7:b5:d7:ea:52:62:b7:ae:ab:ee:22:61:98:08:9e:
         1b:b0:6d:33:43:9b:29:a0:fd:89:43:4e:0c:de:99:b2:3e:83:
         8c:10:b3:f3:56:43:59:03:af:e7:0e:94:08:88:f7:e4:3f:63:
         ad:a9:44:5f:b9:08:e6:fc:cc:fd:27:c0:0a:e2:53:0f:93:89:
         42:ff:7d:d5:c3:4b:fb:55:fb:c0:62:ac:1d:2d:50:bc:4f:f3:
         22:bf:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:02:47 2025 by rpki-client