Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B3FAAE01655630B846E5A9F1FAFC437948428B5.cer
File:                     4B3FAAE01655630B846E5A9F1FAFC437948428B5.cer (raw, json)
Hash identifier:          A2sO1Mcf79congWP6zP6G6fFdb3rmLUuIXGK8pFvrpg=
Subject key identifier:   4B:3F:AA:E0:16:55:63:0B:84:6E:5A:9F:1F:AF:C4:37:94:84:28:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7E7732CED6DF255407C4346C3C6921AA4C5A057F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/4B3FAAE01655630B846E5A9F1FAFC437948428B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Jan 2025 15:48:37 +0000
Certificate not after:    Fri 30 Jan 2026 15:53:37 +0000
Subordinate resources:    AS: 268888
                          IP: 45.175.72.0/22
                          IP: 2804:5c1c::/32
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 19:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:77:32:ce:d6:df:25:54:07:c4:34:6c:3c:69:21:aa:4c:5a:05:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 31 15:48:37 2025 GMT
            Not After : Jan 30 15:53:37 2026 GMT
        Subject: CN=4B3FAAE01655630B846E5A9F1FAFC437948428B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a7:5a:ee:ed:3a:32:06:df:94:28:97:b9:d6:
                    23:29:f7:e6:7a:67:2e:d2:41:06:4f:bd:45:ea:c2:
                    31:49:76:43:ce:dd:b7:d0:4b:80:8d:ec:ac:c5:c3:
                    e8:ed:21:18:ae:eb:4b:b7:14:20:4c:5a:f3:9b:02:
                    97:b5:40:95:dc:5d:e6:ae:27:a6:a5:04:d2:c1:96:
                    e2:a2:be:27:94:a0:a3:bd:e8:a4:06:ad:92:28:da:
                    21:7b:91:81:3a:ff:29:34:af:d7:02:be:35:12:50:
                    6c:0a:47:c8:fa:17:2b:df:83:e7:60:16:f1:d0:69:
                    9e:5d:90:f6:0a:5f:01:35:e6:53:59:5a:db:52:81:
                    9e:66:6e:b2:0e:c1:47:77:89:d8:94:ea:9a:97:15:
                    ae:a2:0e:3e:d0:35:9f:18:cd:e1:46:a6:93:37:6c:
                    c7:b3:8e:0e:8b:2d:69:c1:84:42:e1:c5:c6:ce:c9:
                    a3:69:3c:c1:78:e3:32:32:dc:f7:13:bd:03:a1:cb:
                    a0:7c:32:2d:d3:6a:71:8e:18:fc:54:02:f0:38:fe:
                    50:08:e8:60:85:5f:8d:67:ed:c9:13:05:de:98:aa:
                    49:00:f8:19:7f:33:32:21:30:ea:e6:80:c9:e2:7e:
                    59:49:6e:26:f6:97:4a:f8:07:7c:b8:75:6e:d5:58:
                    c9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:3F:AA:E0:16:55:63:0B:84:6E:5A:9F:1F:AF:C4:37:94:84:28:B5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/4B3FAAE01655630B846E5A9F1FAFC437948428B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.72.0/22
                IPv6:
                  2804:5c1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268888

    Signature Algorithm: sha256WithRSAEncryption
         91:9c:e7:3e:ae:f9:8d:f6:1b:00:12:b4:3a:4e:60:22:18:d3:
         64:46:0b:e1:78:b3:53:c8:d2:d6:e1:30:e4:aa:b5:4e:a3:11:
         dd:5b:53:6a:56:91:a9:5b:6c:ae:45:8d:9c:dd:cf:ae:a4:a0:
         ce:65:66:c1:cc:08:05:fd:e7:80:c2:0b:fa:31:97:7b:2b:b1:
         8d:5f:d2:80:3d:1c:a0:d3:c1:c0:ae:82:c4:31:e7:bd:bb:03:
         43:0d:9a:13:a5:44:a1:59:3c:96:f3:25:56:d6:fe:25:0a:52:
         64:5c:43:59:07:1b:61:a1:9a:47:dc:16:fb:93:75:c0:cb:53:
         ac:aa:84:b7:0c:1f:5e:5f:7d:cf:ae:eb:f7:34:17:87:11:cd:
         20:6a:be:4f:39:1c:d7:41:95:32:6a:7a:4c:e3:21:e1:b4:df:
         25:97:9e:f0:f6:49:94:84:ad:ea:a2:51:20:2b:3b:71:4e:5d:
         16:af:58:92:67:7f:d3:23:4d:bc:03:fe:39:33:3a:b6:6a:cc:
         71:50:30:e5:67:ab:65:35:c1:f5:06:fc:87:61:f3:91:8b:aa:
         62:00:f5:79:bd:97:c9:23:f0:c8:6a:bf:75:bc:a5:bd:a0:e9:
         4e:cd:80:23:a4:2f:64:f5:c1:41:0f:23:42:87:ad:0f:ad:1e:
         d1:84:41:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:03:00 2025 by rpki-client