Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/417429A247040378138010A1F94B03BB6515597E.cer
File:                     417429A247040378138010A1F94B03BB6515597E.cer (raw, json)
Hash identifier:          dvMeibxKQnn0am837dhslu0qK7+zbJRiAgAIMMkCr7A=
Subject key identifier:   41:74:29:A2:47:04:03:78:13:80:10:A1:F9:4B:03:BB:65:15:59:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30EC5D25B2B800BC31D4067B630C28B1D1F24B37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/417429A247040378138010A1F94B03BB6515597E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Mar 2025 14:42:29 +0000
Certificate not after:    Thu 26 Mar 2026 14:47:29 +0000
Subordinate resources:    AS: 273729
                          IP: 168.121.20.0/22
                          IP: 2804:8b64::/32
Validation:               Failed, certificate revoked on Thu 27 Mar 2025 15:08:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ec:5d:25:b2:b8:00:bc:31:d4:06:7b:63:0c:28:b1:d1:f2:4b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 27 14:42:29 2025 GMT
            Not After : Mar 26 14:47:29 2026 GMT
        Subject: CN=417429A247040378138010A1F94B03BB6515597E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0c:d5:cb:bf:a3:d3:b5:3f:3a:db:54:0a:37:
                    0b:27:05:a9:ca:32:1c:c6:11:14:00:9a:f5:69:5e:
                    31:a9:4f:b0:e9:8d:fd:24:ee:6c:b2:15:27:df:ee:
                    e2:41:3c:0a:cf:91:20:14:91:64:c1:4b:6c:52:60:
                    f8:f5:05:c6:e1:a0:18:32:0e:c3:47:98:a0:61:58:
                    e5:7d:ec:17:2b:47:fd:0d:45:11:d1:95:c7:bf:4f:
                    fa:f1:af:41:25:a4:40:33:20:f1:df:f8:1f:7e:1f:
                    ce:02:db:7e:38:bd:cc:c7:21:e9:ac:d2:71:f5:76:
                    79:2a:84:b6:07:5c:47:ec:ec:2d:81:09:d0:22:5f:
                    e2:4e:a3:2c:bc:e2:2e:e7:71:23:5f:e2:fd:b9:c0:
                    a7:0e:86:0a:4c:50:58:ca:8c:88:cf:4e:28:e6:77:
                    d7:aa:5a:86:55:35:7c:fb:ca:42:76:ad:bc:74:7f:
                    ed:f6:df:9f:0f:26:78:24:0a:0c:1f:ec:da:ac:4e:
                    ff:b8:ec:df:7d:fc:71:ac:22:d3:b8:a2:07:d9:9f:
                    8e:8f:37:34:fe:d0:54:37:ee:c2:e9:6a:ea:43:1f:
                    52:f8:34:82:ce:0f:9f:94:63:89:c9:29:4b:0d:d3:
                    6c:02:c9:0c:ee:f9:93:4b:52:45:d6:5c:84:b0:75:
                    57:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:74:29:A2:47:04:03:78:13:80:10:A1:F9:4B:03:BB:65:15:59:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/417429A247040378138010A1F94B03BB6515597E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.20.0/22
                IPv6:
                  2804:8b64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273729

    Signature Algorithm: sha256WithRSAEncryption
         40:84:d6:36:1b:84:12:b3:a2:03:c5:4e:35:34:a5:dc:ef:be:
         f6:09:a9:52:a0:75:11:5c:65:fc:ab:3e:a8:ad:d2:92:06:42:
         2b:93:5d:43:eb:d3:0b:41:af:c9:d6:0a:c6:c1:f5:76:47:ae:
         d3:46:22:8b:6a:96:ef:05:d9:70:b4:ee:a5:08:29:8b:93:de:
         62:22:7b:84:2d:58:7a:5a:c9:2c:21:06:7b:7f:3f:3b:45:9d:
         a5:97:c1:ae:7c:1c:80:06:2b:48:39:0c:31:89:c0:d0:4c:9e:
         e1:b1:d1:54:01:80:0b:5c:a7:5d:d6:dc:3d:bf:bb:38:5f:df:
         a3:f4:c5:78:bd:86:4b:b2:9b:d8:96:a5:83:dd:7e:fa:f0:d2:
         5f:34:bf:dd:1f:f6:7e:52:f4:83:2f:38:5a:32:7a:de:c3:46:
         79:fb:22:df:7b:24:6e:8f:85:d9:77:ba:6e:69:c1:b0:ec:1a:
         7f:e3:80:cc:0d:6a:fb:03:4f:23:ec:6e:c7:91:37:89:10:0c:
         84:98:11:3e:8c:00:68:e9:0a:e2:80:59:fb:ab:5b:8d:4a:e5:
         13:3a:43:52:1f:f4:6f:47:be:04:21:77:4b:77:0c:87:66:21:
         9b:a0:a7:74:1c:ae:9d:e0:db:14:86:a3:6f:f8:3b:a0:23:88:
         5d:2f:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:44:23 2025 by rpki-client