Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C9E9437FBF04F3A00472556A19871C4146A94BD.cer
File:                     3C9E9437FBF04F3A00472556A19871C4146A94BD.cer (raw, json)
Hash identifier:          tl9oO0XxxYoh5fEYTHEds3j6hDqNiUHA4pWSStk+F9c=
Subject key identifier:   3C:9E:94:37:FB:F0:4F:3A:00:47:25:56:A1:98:71:C4:14:6A:94:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B4C7F24CF829556349FF80DEF530B882CD0AF23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/3C9E9437FBF04F3A00472556A19871C4146A94BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Dec 2024 20:54:56 +0000
Certificate not after:    Thu 18 Dec 2025 20:59:56 +0000
Subordinate resources:    AS: 264897
                          IP: 168.227.224.0/22
                          IP: 2804:2f88::/32
Validation:               Failed, certificate revoked on Thu 26 Dec 2024 10:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4c:7f:24:cf:82:95:56:34:9f:f8:0d:ef:53:0b:88:2c:d0:af:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 20:54:56 2024 GMT
            Not After : Dec 18 20:59:56 2025 GMT
        Subject: CN=3C9E9437FBF04F3A00472556A19871C4146A94BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:65:19:2c:3f:4d:b8:3a:4e:49:da:85:ee:
                    c2:b6:04:59:c3:fc:09:23:9c:b4:bb:74:ee:2a:b5:
                    e2:95:46:e8:08:ef:90:71:0c:a3:19:2c:77:61:39:
                    f9:ea:54:96:7f:e8:ae:63:d5:01:eb:28:cd:77:56:
                    10:14:45:96:18:32:79:c6:bc:5f:83:1d:51:3d:f8:
                    13:ac:49:de:86:ca:b2:2b:e7:d2:cf:df:4b:fe:8f:
                    59:a2:fa:ef:c5:a1:db:99:13:6c:08:54:6e:be:ea:
                    b9:ac:73:43:f2:40:7c:e4:7c:6f:4f:3c:4d:08:b5:
                    ed:82:5c:d8:b3:93:4f:ee:55:69:4f:c9:93:03:61:
                    4e:ae:3d:81:71:4e:c9:31:0b:4f:8d:37:85:de:10:
                    29:8e:23:ae:8d:03:e4:be:81:31:36:ea:1d:56:22:
                    70:20:b0:e0:1c:8a:66:e5:09:1e:76:db:2a:8e:cf:
                    40:48:b7:ec:82:58:af:12:25:48:56:0b:2f:fa:b7:
                    93:9c:0d:5a:f8:de:fd:4d:0f:2c:c6:2c:52:7f:23:
                    a4:e1:1d:05:0d:72:4a:a7:14:4a:ff:5d:6b:30:e4:
                    f9:eb:19:7f:6d:a7:17:4e:64:57:b8:bb:4e:75:ee:
                    6b:00:26:5e:1d:2b:96:f3:57:75:80:0e:c8:72:4a:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:9E:94:37:FB:F0:4F:3A:00:47:25:56:A1:98:71:C4:14:6A:94:BD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/3C9E9437FBF04F3A00472556A19871C4146A94BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.224.0/22
                IPv6:
                  2804:2f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264897

    Signature Algorithm: sha256WithRSAEncryption
         c0:6d:13:8c:d4:f8:55:e2:8b:1d:bd:07:54:54:19:97:ff:e9:
         e1:24:3f:ee:fb:20:78:18:2d:ea:cb:a4:f6:e9:7b:34:5c:a4:
         b8:f0:06:d8:8b:9c:8e:b5:d3:9a:e7:4c:81:14:51:b1:2d:00:
         58:ad:09:d0:16:ae:b7:44:6f:61:82:b7:4f:3a:34:b1:ac:78:
         22:8a:87:2f:ed:10:15:dd:48:71:08:54:ce:06:69:62:3c:d1:
         f1:eb:a7:fa:9c:56:6b:ed:b9:b5:a0:ae:df:64:07:32:b3:55:
         e9:b3:d7:4c:86:e1:c7:4c:0d:78:c3:ed:63:f2:c9:20:ba:51:
         da:35:99:a4:b9:97:92:ff:9f:12:95:8f:b4:ff:7c:82:d7:e0:
         c5:0b:a7:ab:59:68:cf:46:54:e9:69:93:12:ff:c4:48:62:fb:
         93:88:99:69:79:11:b4:bc:c9:34:1e:02:75:30:17:7e:cd:a1:
         88:94:df:5c:a2:77:5a:2a:f4:76:4b:68:b1:93:8f:16:c2:40:
         78:86:7d:ec:94:30:94:48:a8:97:ed:90:9c:08:0d:67:65:40:
         19:0c:e9:82:d1:7b:dc:84:92:a2:67:15:f4:13:b5:c9:45:b4:
         b2:b4:d4:0b:e2:73:00:ba:a7:b3:a0:7e:22:35:48:37:91:46:
         68:55:d1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:07 2025 by rpki-client