Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/57168919C42D6015224287F6DCA7981A09E9635F.cer
File:                     57168919C42D6015224287F6DCA7981A09E9635F.cer (raw, json)
Hash identifier:          NcxlifSP8C5d6535vt74OQN4GmvmhpzcE0Zn48BI108=
Subject key identifier:   57:16:89:19:C4:2D:60:15:22:42:87:F6:DC:A7:98:1A:09:E9:63:5F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       47953BA395105719878B283F0B92E76E4625AC57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/57168919C42D6015224287F6DCA7981A09E9635F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Mar 2025 20:18:42 +0000
Certificate not after:    Thu 19 Mar 2026 20:23:42 +0000
Subordinate resources:    AS: 263039
                          IP: 177.23.72.0/21
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 11:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:95:3b:a3:95:10:57:19:87:8b:28:3f:0b:92:e7:6e:46:25:ac:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 20 20:18:42 2025 GMT
            Not After : Mar 19 20:23:42 2026 GMT
        Subject: CN=57168919C42D6015224287F6DCA7981A09E9635F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6f:2c:a2:9e:2c:ab:09:1d:01:29:83:ef:62:
                    47:6f:f8:fe:48:08:37:0a:c4:97:c6:1c:11:76:97:
                    a2:ff:05:f6:e2:d7:9a:ed:9e:68:3c:2d:e1:c4:07:
                    1b:ea:dc:ec:30:60:95:10:6d:52:7a:1e:64:57:39:
                    6b:6a:8c:5c:34:78:d5:63:b4:ee:4a:a4:1c:60:dc:
                    f9:7e:0b:cb:1f:2f:ed:eb:99:34:a0:5e:e2:8e:4e:
                    a9:fa:d9:d3:0d:f6:1a:2e:3b:f4:ed:7f:bd:6b:57:
                    57:78:73:ea:a9:01:66:63:d5:d9:b4:92:23:fe:cf:
                    1f:70:29:2e:d4:ea:9f:67:e9:eb:58:14:d1:94:45:
                    aa:d5:6a:48:e4:cd:2b:3b:68:6e:ca:40:46:4d:55:
                    19:45:91:ac:d8:97:a4:43:49:dc:6d:49:0f:85:95:
                    c1:07:c5:60:7d:98:0f:63:78:9d:0f:10:82:e8:9d:
                    69:46:10:33:7b:47:7e:6f:bf:16:c9:b5:c8:9f:a1:
                    3f:31:55:21:32:ec:41:2f:98:0f:72:03:8c:1a:dc:
                    17:a2:8e:bc:17:3b:eb:09:79:57:6f:c0:05:e3:7d:
                    91:81:47:93:9d:54:6d:dd:cd:27:1f:25:de:d7:56:
                    d1:e9:ee:d4:83:3a:53:e1:93:4c:5d:0c:c1:a6:84:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:16:89:19:C4:2D:60:15:22:42:87:F6:DC:A7:98:1A:09:E9:63:5F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/57168919C42D6015224287F6DCA7981A09E9635F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.72.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263039

    Signature Algorithm: sha256WithRSAEncryption
         b4:9c:c1:55:7e:73:9a:28:53:f1:6f:c7:24:5e:bc:38:e2:f6:
         39:f2:bd:20:fd:81:b9:06:77:24:7d:57:a1:67:4c:b0:84:03:
         de:5f:3f:3d:fd:22:af:8d:62:1a:cb:74:29:33:31:3b:6a:ce:
         93:7d:a4:81:b7:cc:8c:90:8f:40:eb:b4:f6:be:22:c3:55:e0:
         ac:92:91:99:f3:c3:c1:fa:7a:60:0c:c8:0c:a3:b4:b2:74:82:
         f4:29:1d:fd:3e:76:07:71:80:a0:c9:3e:50:5d:1c:c0:34:5d:
         cf:b2:0b:9b:df:8e:b7:9d:b1:e2:33:f1:9a:7e:d2:85:ec:e5:
         a4:9d:e9:57:af:59:de:15:83:ea:d2:54:e1:ff:f6:f7:c1:f6:
         c8:38:19:06:62:82:f7:c1:dd:aa:eb:23:13:48:0c:d9:36:fc:
         55:27:a4:c5:ff:02:3e:eb:b6:42:25:12:02:0e:be:4e:e1:b7:
         60:8a:7c:4e:d2:87:38:3b:bc:6e:e5:af:ed:20:2c:45:da:14:
         f1:26:0a:b1:19:40:d4:a8:5b:4c:fd:75:b8:41:b0:71:8a:92:
         c0:de:91:1f:00:64:e1:45:9a:e2:d7:77:aa:40:ae:89:c5:57:
         c1:c9:6e:09:5e:51:20:b7:a1:84:74:e2:5b:58:82:2e:1a:20:
         23:3f:7f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:23 2025 by rpki-client