Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7B2B6130E43B1369CCBC9653A0FB3816A17F7728.cer
File:                     7B2B6130E43B1369CCBC9653A0FB3816A17F7728.cer (raw, json)
Hash identifier:          7RLs+mwzI2wWkIaFxEvn0Pm9Qbw2MmbqGxQJvTqTmw8=
Subject key identifier:   7B:2B:61:30:E4:3B:13:69:CC:BC:96:53:A0:FB:38:16:A1:7F:77:28
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B2C350A13B896369C3330DB815E724C1C4F7A2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/7B2B6130E43B1369CCBC9653A0FB3816A17F7728.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Dec 2024 19:06:57 +0000
Certificate not after:    Tue 16 Dec 2025 19:11:57 +0000
Subordinate resources:    AS: 265404
                          IP: 168.194.128.0/22
                          IP: 2804:3390::/32
Validation:               Failed, certificate revoked on Sat 04 Jan 2025 14:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2c:35:0a:13:b8:96:36:9c:33:30:db:81:5e:72:4c:1c:4f:7a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 17 19:06:57 2024 GMT
            Not After : Dec 16 19:11:57 2025 GMT
        Subject: CN=7B2B6130E43B1369CCBC9653A0FB3816A17F7728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:bf:85:3c:1d:d1:08:36:54:14:f6:57:10:
                    7f:b7:7e:05:ff:78:34:e3:5d:79:68:c5:53:4b:2f:
                    04:32:96:fd:79:31:85:73:55:09:4e:d5:a7:24:3e:
                    96:64:34:2f:f7:87:f3:b2:6e:dc:53:b4:a5:03:84:
                    44:46:b8:9a:63:88:b5:44:de:97:27:38:14:ca:ee:
                    89:d6:35:5e:25:8a:b0:50:0b:29:07:a0:e1:ea:69:
                    f6:03:fd:31:13:bc:9b:01:27:c7:e0:df:68:6c:0a:
                    1d:ab:de:d4:f3:49:26:c2:19:7a:8b:c4:63:b6:d7:
                    0b:9c:ed:61:c9:13:8c:ee:fe:d4:1b:a4:1e:78:aa:
                    d6:31:91:08:cf:d9:fc:f3:e8:c7:13:5a:81:c2:1b:
                    ae:c6:b0:db:ea:ac:a1:87:69:b4:44:e6:9d:b3:96:
                    88:6a:44:b1:e0:d2:d2:70:bf:ae:8d:a5:37:18:34:
                    a6:b2:e4:bb:72:ec:8a:72:8d:b3:fb:2a:56:fc:44:
                    63:e9:cf:e7:ac:5a:16:4d:76:9e:2f:d9:8b:d3:60:
                    e3:d7:0a:f6:24:b4:d9:23:87:e5:4f:2b:89:d2:83:
                    44:06:ca:4a:8a:ad:67:ad:8b:13:b8:5b:74:39:1f:
                    44:c0:1a:54:70:24:ac:6e:9c:cf:18:84:80:a4:78:
                    97:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:2B:61:30:E4:3B:13:69:CC:BC:96:53:A0:FB:38:16:A1:7F:77:28
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/7B2B6130E43B1369CCBC9653A0FB3816A17F7728.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.128.0/22
                IPv6:
                  2804:3390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265404

    Signature Algorithm: sha256WithRSAEncryption
         68:61:93:c8:75:6f:a8:ce:4b:1f:8a:0c:27:a7:b9:5c:4f:ec:
         61:15:b0:fe:5f:73:bc:da:a8:00:06:44:00:b4:94:87:da:af:
         3a:aa:01:69:65:c9:eb:af:62:fb:a8:62:3c:c4:5f:3d:ab:c6:
         43:a0:68:eb:38:0c:7d:de:20:8e:f4:e9:0c:15:8a:ac:69:db:
         2d:43:09:c9:b2:75:17:6a:77:f5:8b:6c:b3:f3:12:2c:60:45:
         37:a7:40:b1:22:30:b0:a1:d1:8b:31:ec:ac:86:9c:7f:ab:e1:
         98:eb:07:14:de:50:a7:e2:22:aa:50:cf:21:58:e2:4a:06:02:
         c5:86:34:62:09:5c:1f:49:db:8c:33:9d:f2:8d:37:9b:3e:d6:
         d5:c7:90:89:0c:f6:31:c1:38:44:cc:98:81:85:52:a0:93:c2:
         a7:91:8d:94:d3:4c:07:4f:d4:cb:e4:0b:86:27:20:9a:83:2e:
         0f:c2:89:8a:be:f8:53:d1:36:70:38:a3:b9:04:36:dd:b2:ce:
         1d:ac:4a:a1:56:da:31:ef:3e:07:41:a4:d7:62:6b:52:7c:33:
         21:0e:44:99:5e:f0:96:5e:f4:0c:75:e4:18:db:b0:24:d3:00:
         15:2e:1f:bd:10:7f:f8:f3:01:71:2b:21:cc:7b:5e:8b:06:9c:
         3b:75:0b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:09 2025 by rpki-client