Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7B90CC297A316F637FDBCC24E88C8F69A5C364F1.cer
File:                     7B90CC297A316F637FDBCC24E88C8F69A5C364F1.cer (raw, json)
Hash identifier:          oVL8c67AnZkjFDPITKTqFpCUGYr3rQhzGPCRGVrOum0=
Subject key identifier:   7B:90:CC:29:7A:31:6F:63:7F:DB:CC:24:E8:8C:8F:69:A5:C3:64:F1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       49EC9012429AD2EA097779641E9CDC39BD2B0092
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/1/7B90CC297A316F637FDBCC24E88C8F69A5C364F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Mar 2025 14:05:24 +0000
Certificate not after:    Tue 24 Mar 2026 14:10:24 +0000
Subordinate resources:    AS: 267289
                          IP: 45.233.56.0/22
                          IP: 2804:4b30::/32
Validation:               Failed, certificate revoked on Tue 25 Mar 2025 18:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ec:90:12:42:9a:d2:ea:09:77:79:64:1e:9c:dc:39:bd:2b:00:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 14:05:24 2025 GMT
            Not After : Mar 24 14:10:24 2026 GMT
        Subject: CN=7B90CC297A316F637FDBCC24E88C8F69A5C364F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:ab:ee:b2:9c:e8:1a:ae:13:48:97:29:64:
                    b8:d4:f1:13:c1:b6:de:ce:b9:37:1d:cd:58:ed:8d:
                    e0:de:5a:37:73:d3:6a:f4:17:1d:f4:74:91:6b:0d:
                    5d:cc:64:7b:ba:80:ec:84:89:b0:cb:a1:bd:33:fb:
                    9d:80:47:ff:08:a7:6b:a2:bf:25:73:9d:49:2e:33:
                    cb:f0:01:42:bd:54:fc:c4:bc:ec:a8:08:7e:ea:dc:
                    53:32:c2:1b:07:f3:80:f6:fa:db:d9:5b:89:e9:0a:
                    4f:1d:93:a8:db:d8:a2:a2:b1:76:2e:f3:a1:76:48:
                    78:d4:32:b9:67:01:59:da:8a:bc:cb:0e:4b:8e:7d:
                    a7:4f:ef:f6:64:d0:0a:3b:35:0b:28:98:4c:31:b3:
                    25:b3:c3:ca:69:02:87:02:f0:10:fe:57:60:2f:da:
                    62:e1:dd:60:a2:5c:db:c8:ff:ab:d6:8f:59:5e:e1:
                    b3:9a:f4:f2:90:9e:96:95:36:83:d1:5a:30:a1:de:
                    e1:00:a9:4b:93:6a:54:29:3d:78:9a:09:16:74:db:
                    c3:a4:0c:c4:41:a9:32:94:89:33:ec:2c:0b:21:20:
                    96:a7:9e:26:34:04:33:51:6d:f9:8c:38:c4:3b:8a:
                    59:62:bf:ac:0e:9d:52:37:2b:17:1b:5a:05:ce:4f:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:90:CC:29:7A:31:6F:63:7F:DB:CC:24:E8:8C:8F:69:A5:C3:64:F1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/1/7B90CC297A316F637FDBCC24E88C8F69A5C364F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.56.0/22
                IPv6:
                  2804:4b30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267289

    Signature Algorithm: sha256WithRSAEncryption
         1a:7b:45:b3:f5:72:25:ef:62:0a:05:50:26:16:39:79:ac:54:
         25:a6:ae:e2:77:44:6c:90:9a:a2:36:4e:be:65:f4:ff:d7:fc:
         d1:61:c4:69:ac:db:67:67:77:71:3a:3c:58:86:16:0a:c1:87:
         9c:fc:24:9b:6f:ad:47:00:39:5e:59:cd:6f:ed:cb:a0:15:71:
         cc:3c:8c:da:aa:0e:44:00:87:0a:71:c8:dc:3b:4f:2d:92:d5:
         ce:04:bc:98:68:6b:17:5f:bb:ba:1c:61:04:a3:a5:9b:88:59:
         f9:dd:fa:8e:30:c6:ac:22:e9:2c:02:f4:c6:6f:b6:5c:71:a4:
         ef:e9:4d:39:d6:84:5e:96:ec:d2:ce:0b:64:34:36:5b:40:75:
         02:a9:fe:0b:4c:b2:7b:dc:39:a6:34:72:36:3f:74:30:a0:e3:
         64:b9:c3:8f:6e:f8:26:cd:e2:cf:c5:00:5b:1c:71:12:70:32:
         c8:b0:ef:95:60:b8:32:15:ab:ab:3d:48:9c:71:c5:4f:ed:f4:
         8e:c1:e6:ce:82:8e:15:92:be:ee:91:e1:5b:c1:2c:5b:f7:c5:
         65:26:87:3e:47:cd:c2:f6:51:bb:5b:d3:51:31:49:b2:d5:47:
         8d:11:5c:50:e2:da:e7:b3:6e:e7:92:ad:1f:2c:75:8e:63:43:
         69:c7:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:36:19 2025 by rpki-client