Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E3293CF66479CC79346F97DCC606E532A1DA675.cer
File:                     3E3293CF66479CC79346F97DCC606E532A1DA675.cer (raw, json)
Hash identifier:          MOvK5SVxVjph//PVrMWE1bI4BX94v57xM9cOj/x6Dfk=
Subject key identifier:   3E:32:93:CF:66:47:9C:C7:93:46:F9:7D:CC:60:6E:53:2A:1D:A6:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5CC22C28BF5D75C1AA4A2DA2859B4FDEDDD4090E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3E3293CF66479CC79346F97DCC606E532A1DA675.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 01:01:12 +0000
Certificate not after:    Fri 06 Mar 2026 01:06:12 +0000
Subordinate resources:    AS: 264020
                          IP: 143.0.144.0/22
                          IP: 2804:2988::/32
Validation:               Failed, certificate revoked on Thu 13 Mar 2025 13:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c2:2c:28:bf:5d:75:c1:aa:4a:2d:a2:85:9b:4f:de:dd:d4:09:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 01:01:12 2025 GMT
            Not After : Mar  6 01:06:12 2026 GMT
        Subject: CN=3E3293CF66479CC79346F97DCC606E532A1DA675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:ea:cb:42:64:ea:bd:cb:14:3d:d0:c2:da:
                    21:a3:88:08:e4:8c:36:07:f2:8d:b0:5c:99:a1:a0:
                    3e:96:a4:09:99:e6:fe:0a:09:22:84:98:5a:b9:0a:
                    bc:e7:37:fb:fe:03:1f:12:d3:b8:cf:2c:87:6e:48:
                    c5:3f:3b:e4:a2:25:70:7b:cf:4e:59:da:56:99:3b:
                    45:fb:4f:fe:3c:45:9a:70:5b:48:c8:23:54:75:55:
                    3b:d0:cb:08:34:b8:bc:ae:73:30:ac:6d:be:3e:99:
                    0d:2c:88:4f:af:ed:c8:a8:ac:fe:73:d0:f8:f8:f5:
                    9b:94:9c:de:b0:20:d8:02:d9:a2:b3:ab:d3:73:36:
                    b3:8a:93:90:fa:22:c7:82:c5:42:8f:ac:34:66:b6:
                    84:14:8c:cf:58:07:2b:de:9e:3a:0c:7e:d1:53:cc:
                    87:ed:df:8a:0b:01:68:0a:d4:66:13:7e:e0:5e:91:
                    59:aa:2b:d1:e1:c4:54:24:4f:00:27:4e:ae:94:58:
                    83:e9:07:b2:99:2b:38:c3:82:9f:00:4a:6a:0d:13:
                    ec:9b:b7:e5:23:1a:9c:63:10:18:4b:cb:6b:7b:63:
                    e9:01:a4:31:36:df:5d:ba:b4:95:c9:9a:36:f1:84:
                    ba:b5:cf:b3:6a:26:da:16:3f:0f:fc:5c:91:4e:59:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:32:93:CF:66:47:9C:C7:93:46:F9:7D:CC:60:6E:53:2A:1D:A6:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3E3293CF66479CC79346F97DCC606E532A1DA675.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.144.0/22
                IPv6:
                  2804:2988::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264020

    Signature Algorithm: sha256WithRSAEncryption
         29:6d:f7:78:a1:94:2f:15:09:bf:7f:a4:ac:78:b8:fd:69:e0:
         92:da:08:30:2c:96:58:fc:08:b7:c8:60:60:3d:c9:eb:58:db:
         47:ab:0b:54:26:3c:08:6e:ca:69:e2:26:ea:a0:6b:d6:c3:a3:
         06:ed:2e:f5:ae:72:a3:21:31:c1:61:95:23:37:28:8d:cf:9e:
         87:25:81:7e:71:21:ba:53:87:29:98:45:26:0b:17:df:79:46:
         d8:28:5b:0e:88:d1:3f:86:0c:25:d3:cf:4e:fe:d2:75:ba:83:
         5c:f3:ea:23:54:73:b3:3b:1b:79:c4:3b:a7:cb:4e:f4:63:3b:
         dc:1e:a0:8a:8c:47:d5:92:8d:bb:cc:ad:3b:07:4e:f7:b1:54:
         4d:c0:3a:7a:62:1b:d9:34:24:3c:a6:ad:6a:50:1d:00:51:a5:
         71:6b:43:22:da:52:8f:db:1c:15:2f:6e:71:78:f9:20:85:74:
         ad:ba:c3:d2:e7:fa:96:f1:1a:c3:1c:95:70:a5:e1:33:46:92:
         53:c8:cc:bf:2c:c7:bb:76:24:b0:7c:a6:f0:9f:ba:53:c8:55:
         62:1b:88:a1:a4:b4:f8:88:42:34:61:8a:b4:55:d2:d1:69:e2:
         4d:58:94:35:36:44:0c:68:ec:75:37:e7:30:8c:f0:9e:c6:c8:
         5e:3a:a1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:55 2025 by rpki-client