Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.cer
File:                     7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.cer (raw, json)
Hash identifier:          k/5/reRMyiJPOZYkuXIISxd2iRrnlexoAxbQBY5z/Gk=
Subject key identifier:   76:06:BC:A6:1F:F8:15:F7:18:C8:3D:CE:1C:3F:8E:FA:EC:1D:F2:F1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7619627830DA247166E6ECE3BB8DA25F007DDC78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5XQTdXc6DjzcoUErri8ooNiZSkDNJeY997Ce4viBWLQ7/0/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5XQTdXc6DjzcoUErri8ooNiZSkDNJeY997Ce4viBWLQ7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Apr 2025 22:23:46 +0000
Certificate not after:    Tue 28 Apr 2026 22:28:46 +0000
Subordinate resources:    AS: 271282
                          IP: 170.0.152.0/23
                          IP: 2804:7910::/32
Validation:               Failed, certificate revoked on Thu 29 May 2025 11:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:19:62:78:30:da:24:71:66:e6:ec:e3:bb:8d:a2:5f:00:7d:dc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 29 22:23:46 2025 GMT
            Not After : Apr 28 22:28:46 2026 GMT
        Subject: CN=7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:31:93:de:37:28:cb:53:22:4f:5f:ef:47:48:
                    80:7b:d0:66:1d:86:3b:ba:65:5f:64:5b:01:ff:be:
                    f4:4b:2c:81:53:52:25:f1:51:7a:9d:3a:62:eb:91:
                    e3:ec:92:a1:44:19:dc:9e:df:76:2b:ae:df:dd:d1:
                    8e:cc:c9:0f:6d:0d:89:69:29:84:2a:e1:3b:d9:1b:
                    d7:bb:05:2e:83:1d:30:fe:27:7f:52:22:db:8d:86:
                    4e:a7:b7:7e:ef:3e:f2:69:08:6e:bd:4c:db:ad:dc:
                    f8:e3:0a:0e:62:99:6a:c1:fe:19:29:a9:62:b1:00:
                    9f:eb:bf:83:d8:a7:6e:56:42:ea:8d:09:b5:a2:3a:
                    3e:70:83:bd:84:ad:32:98:86:18:f0:e3:c7:a4:d6:
                    13:94:3c:31:73:43:f2:c8:0b:74:d0:1e:d3:34:a6:
                    12:17:cb:39:7c:45:de:85:69:1a:e1:61:8b:32:2c:
                    03:8a:36:ea:ad:17:b6:20:14:ea:c5:63:af:f0:96:
                    6f:5d:e9:6e:c7:a9:5a:d4:0f:20:18:0c:e5:28:11:
                    43:58:89:c8:37:fe:2b:50:3f:38:15:c9:8d:d7:d8:
                    d8:89:85:e3:84:d6:4f:37:6e:f2:24:e8:33:c2:b4:
                    f7:56:7f:48:50:a4:38:1d:07:da:39:e1:16:26:f1:
                    aa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:06:BC:A6:1F:F8:15:F7:18:C8:3D:CE:1C:3F:8E:FA:EC:1D:F2:F1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XQTdXc6DjzcoUErri8ooNiZSkDNJeY997Ce4viBWLQ7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XQTdXc6DjzcoUErri8ooNiZSkDNJeY997Ce4viBWLQ7/0/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.152.0/23
                IPv6:
                  2804:7910::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271282

    Signature Algorithm: sha256WithRSAEncryption
         32:f4:6d:2e:fc:77:4d:3b:5b:ed:e2:e1:f9:64:0d:7e:cd:e5:
         63:08:22:d4:11:57:52:6f:77:1d:b0:33:99:48:68:12:4c:54:
         7c:7b:16:9d:0d:4e:89:b4:43:d1:17:9a:76:dc:52:92:74:fd:
         2e:7e:ab:c4:95:58:fc:d8:03:0a:18:88:c7:85:fb:71:1d:eb:
         d0:02:40:00:93:bc:f9:73:df:8f:62:0b:74:80:2b:75:3a:ea:
         c5:a0:f9:a0:5d:60:a7:84:68:e0:6b:85:3e:d0:2b:a6:39:c1:
         cc:8b:ca:00:e1:47:77:91:e0:22:64:85:58:9b:e0:19:9c:e8:
         7c:0a:93:80:b0:ad:36:e9:28:30:86:74:4d:ab:4d:e5:7d:00:
         15:2c:f1:5b:34:09:65:04:02:2e:dc:28:76:35:6b:ad:ff:e8:
         d9:85:6c:d0:ac:a7:34:d9:26:42:6b:c6:3d:3a:3a:4e:a1:fb:
         2e:20:70:ca:80:e7:2d:45:67:82:14:5f:f6:90:eb:b5:da:f0:
         e6:d7:87:bb:f7:19:ce:fb:91:cc:0b:68:40:82:bb:cc:42:9b:
         34:95:3e:9f:88:8a:14:9b:af:8c:93:3a:eb:6f:7d:d6:66:15:
         8a:4f:57:b4:37:61:43:ad:b3:56:f2:10:c0:66:dd:00:cf:12:
         b7:c8:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:16:20 2025 by rpki-client