Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/48A5CE43DDF5F691570117B79D047D25F3A4035E.cer
File:                     48A5CE43DDF5F691570117B79D047D25F3A4035E.cer (raw, json)
Hash identifier:          D9j4Fjz9NaXeBe27E9vuIuXVrwaFHAI2f+SYaM9b5FY=
Subject key identifier:   48:A5:CE:43:DD:F5:F6:91:57:01:17:B7:9D:04:7D:25:F3:A4:03:5E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       047C065B879616B02D3B852684E26F7148650130
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/48A5CE43DDF5F691570117B79D047D25F3A4035E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Jan 2025 17:16:09 +0000
Certificate not after:    Thu 29 Jan 2026 17:21:09 +0000
Subordinate resources:    AS: 274647
                          IP: 2804:9188::/32
Validation:               Failed, certificate revoked on Wed 05 Mar 2025 11:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7c:06:5b:87:96:16:b0:2d:3b:85:26:84:e2:6f:71:48:65:01:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 30 17:16:09 2025 GMT
            Not After : Jan 29 17:21:09 2026 GMT
        Subject: CN=48A5CE43DDF5F691570117B79D047D25F3A4035E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:4e:37:ae:68:57:80:08:7a:0e:b1:fb:67:
                    5c:28:ef:d1:f6:50:45:49:34:df:ea:aa:dd:be:ee:
                    2a:7e:ce:f6:80:32:be:0f:d6:d3:a4:eb:e6:f3:0f:
                    0c:c1:b6:17:cd:d7:6a:00:19:cb:d9:27:df:9f:07:
                    1a:4a:32:5a:41:70:3b:cf:07:a3:39:01:7f:3e:a6:
                    9d:6b:f5:5e:c0:64:e7:50:29:3c:f0:6a:81:14:00:
                    c3:aa:62:97:9a:c7:83:40:71:81:3b:64:28:d3:f0:
                    ef:ee:4a:8f:9e:8c:43:de:4a:d4:db:d1:b0:15:12:
                    a6:47:24:d6:0e:56:77:2f:0b:78:5b:40:42:43:ff:
                    44:4d:10:99:9e:ee:91:03:f6:52:ef:29:99:1a:62:
                    cd:05:dc:fa:ed:a7:9c:e1:21:ca:f7:08:ea:7f:77:
                    2e:bc:25:6a:36:6d:5e:dd:3b:b6:b0:ce:d2:94:c7:
                    65:bc:ce:49:1b:37:18:b9:cb:39:3d:85:32:35:ad:
                    f4:6a:71:c1:0a:b0:53:23:df:c4:80:73:88:30:3e:
                    91:ca:50:e9:46:ab:16:d9:12:c4:55:37:83:81:c5:
                    f9:17:23:a3:e6:91:ce:91:ec:d0:75:d5:bc:87:b6:
                    44:9e:41:ca:0f:2a:6e:b8:d4:ee:20:a3:32:a5:df:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:A5:CE:43:DD:F5:F6:91:57:01:17:B7:9D:04:7D:25:F3:A4:03:5E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/48A5CE43DDF5F691570117B79D047D25F3A4035E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9188::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274647

    Signature Algorithm: sha256WithRSAEncryption
         9f:a1:3d:fe:49:13:60:88:d6:77:08:66:05:2c:3e:6b:05:b1:
         ba:4a:9a:16:c6:48:45:f7:c9:0c:cb:a3:54:77:bc:ff:dd:3e:
         d3:32:75:2a:5d:dd:22:14:5c:b7:d0:ad:18:ef:b6:ad:18:e2:
         fd:b0:31:15:04:10:d4:6c:35:ae:c6:bb:1a:a1:58:c7:d7:f5:
         42:24:ed:8e:1f:f2:c9:bd:10:7e:9e:f8:d9:a4:72:6b:8c:ac:
         a1:40:c6:e2:13:84:02:a4:d1:59:3b:3c:7d:ab:c2:0a:83:0e:
         b3:53:9f:91:92:81:73:05:1b:07:74:ba:c9:f1:78:82:8e:19:
         95:45:76:61:1a:e1:f2:e9:a2:9e:f5:7a:62:6f:ba:5e:74:b8:
         65:e5:4b:05:d9:2e:13:25:fe:7d:28:58:44:f0:c6:b1:6b:40:
         69:e7:78:41:92:3a:3c:db:6f:19:fc:73:e8:4a:9b:72:6d:db:
         2e:6f:c8:8d:d0:fe:9f:9c:88:d9:1e:b0:0f:d5:e4:8e:4d:52:
         63:a8:76:44:b4:d6:4f:98:71:5c:e8:6e:30:59:c9:e4:ba:43:
         99:6d:cf:44:77:0f:34:09:f5:ad:17:81:2a:ff:ff:f9:41:d3:
         63:58:b3:f1:d9:dd:03:6a:fa:64:13:4f:eb:cd:b1:3d:79:20:
         73:a0:e7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:52 2025 by rpki-client