Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/39B8F3BCD05FEC7427735FB39CC3F2CD66F4680C.cer
File:                     39B8F3BCD05FEC7427735FB39CC3F2CD66F4680C.cer (raw, json)
Hash identifier:          9S2ZSYTd9WMdxH5eDqKJ5BkV4uidpcNjMZ7AQ7p6svQ=
Subject key identifier:   39:B8:F3:BC:D0:5F:EC:74:27:73:5F:B3:9C:C3:F2:CD:66:F4:68:0C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7E3DA4628FAF84FF45886E205D85AB90C85154B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/39B8F3BCD05FEC7427735FB39CC3F2CD66F4680C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Jan 2025 11:29:56 +0000
Certificate not after:    Wed 28 Jan 2026 11:34:56 +0000
Subordinate resources:    AS: 267669
                          IP: 45.224.192.0/22
                          IP: 2804:450c::/32
Validation:               Failed, certificate revoked on Thu 20 Mar 2025 12:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3d:a4:62:8f:af:84:ff:45:88:6e:20:5d:85:ab:90:c8:51:54:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 29 11:29:56 2025 GMT
            Not After : Jan 28 11:34:56 2026 GMT
        Subject: CN=39B8F3BCD05FEC7427735FB39CC3F2CD66F4680C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:88:0d:a1:8e:0d:92:4c:e7:8c:77:50:b8:91:
                    8b:35:57:d6:00:4a:30:de:24:ca:b0:13:dc:51:ea:
                    75:24:d5:f1:2a:39:a1:64:8a:2c:9c:fd:7d:43:e9:
                    e0:6b:05:ca:86:1e:82:fc:5f:f9:84:4e:f8:42:da:
                    69:b0:88:4e:a4:0e:33:6d:a2:38:e7:21:34:c0:94:
                    22:0d:1f:2e:69:ea:74:b4:81:1a:b4:93:e8:90:d7:
                    d3:e7:d9:6c:b9:3c:79:ca:fe:41:c4:4d:9d:2d:f8:
                    62:c3:98:c2:53:c8:9c:6e:80:fc:66:df:bc:7c:3c:
                    b1:0a:b6:10:74:e3:d6:b6:44:41:0d:f9:e0:13:f3:
                    6b:d1:94:63:5f:f2:a8:c7:72:10:57:2b:f5:ee:74:
                    28:6c:c8:f8:7d:f9:9e:ec:dd:6c:48:a6:1a:d9:42:
                    82:81:68:68:fc:7f:07:ff:ba:bc:a6:8b:1a:b7:6d:
                    06:20:e9:cb:c8:c0:53:ac:b9:15:da:f3:2c:a4:fe:
                    d1:d8:e8:fd:16:cc:f8:af:f5:55:b1:d5:94:8c:28:
                    62:29:cb:64:76:dc:d7:18:e6:74:7a:3f:ca:84:43:
                    48:b9:0d:da:9d:e9:0a:45:d7:73:44:47:ab:59:86:
                    a9:d8:0b:6f:32:55:f0:f1:ad:a1:e7:40:d7:b4:90:
                    1f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:B8:F3:BC:D0:5F:EC:74:27:73:5F:B3:9C:C3:F2:CD:66:F4:68:0C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/39B8F3BCD05FEC7427735FB39CC3F2CD66F4680C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.192.0/22
                IPv6:
                  2804:450c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267669

    Signature Algorithm: sha256WithRSAEncryption
         51:a3:6e:56:a7:22:ae:ed:14:f3:3e:c7:cd:9b:0c:b8:1d:af:
         2b:d2:3d:73:b8:1e:92:c0:c4:df:97:03:2f:e8:c2:b5:58:19:
         15:ac:a9:35:3b:ba:fa:b5:e0:57:d2:90:d6:f5:4f:f4:32:ff:
         fe:79:53:9a:d3:d8:4c:70:d6:e7:9e:8d:62:ef:20:9a:59:2f:
         e7:5f:d8:8f:f3:7c:3f:c7:5e:86:aa:d7:d7:a5:f9:be:97:c3:
         b0:0b:eb:3c:09:8a:b2:73:95:75:2b:f3:9f:5a:b5:5f:ce:e2:
         4e:62:ac:5e:79:c9:d4:5a:84:b4:1b:90:93:55:26:1f:e9:e3:
         81:99:ff:d6:b8:e6:1e:ef:12:1e:e0:3b:92:10:3c:11:ba:28:
         aa:6e:53:ef:d0:5b:9c:7a:f1:4d:63:42:9f:62:95:b6:d3:15:
         7f:d3:13:61:01:18:14:3f:dd:dd:09:25:e4:bf:90:15:bc:ae:
         ee:55:44:26:32:c7:cf:5d:7d:10:1d:9e:da:42:f3:ea:c6:ab:
         9f:eb:2c:5b:96:32:44:3c:fb:03:de:3c:79:3f:db:d8:7f:1a:
         79:76:59:b8:23:53:4f:8a:b8:30:8c:18:21:a4:c9:34:97:0a:
         02:f8:0e:97:ed:f3:c5:65:9a:0c:94:f8:17:39:ea:36:1f:e4:
         7b:51:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:00 2025 by rpki-client