Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer
File:                     7BB66415D711DB401704B5A5A315C202CB8AF863.cer (raw, json)
Hash identifier:          iWv6384ZzmZiLsWShYpUtDAbOoW0NpWgHK+jySTroAI=
Subject key identifier:   7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C5964C810117EF683FF4EF3B7019CA4255E108E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Jan 2025 13:20:37 +0000
Certificate not after:    Tue 13 Jan 2026 13:25:37 +0000
Subordinate resources:    AS: 52631
                          AS: 270815
                          IP: 177.128.24.0/21
                          IP: 200.229.244.0/22
                          IP: 2804:49d4::/32
                          IP: 2804:71d8::/32
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 12:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:59:64:c8:10:11:7e:f6:83:ff:4e:f3:b7:01:9c:a4:25:5e:10:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 14 13:20:37 2025 GMT
            Not After : Jan 13 13:25:37 2026 GMT
        Subject: CN=7BB66415D711DB401704B5A5A315C202CB8AF863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8c:fd:e1:c9:75:db:1d:9e:9e:73:54:75:e4:
                    2f:55:1c:6b:1a:4b:3d:3f:53:bd:1c:ac:a9:05:cc:
                    a8:72:e6:a2:f4:3d:e8:b8:9e:d0:25:9a:5a:45:87:
                    ee:a2:20:9b:a5:d4:70:5a:f7:ff:e3:45:24:45:c4:
                    b8:9c:a0:db:4c:8d:05:ef:1e:c1:cc:67:ea:c5:55:
                    3c:6d:ae:02:39:47:a3:e5:51:14:9f:79:70:e2:b9:
                    60:16:12:03:57:bb:cd:3c:28:f6:63:99:09:1c:d2:
                    e1:c2:dc:60:4f:93:7c:e0:af:54:21:fa:6d:95:4f:
                    9e:92:8c:fa:cd:4e:43:78:93:71:c0:91:5d:bf:bd:
                    0c:34:16:b1:cb:c0:5b:b4:a5:1a:a9:be:41:87:b7:
                    b6:c2:6a:a6:63:ca:ee:36:21:cd:7b:0a:7f:c1:70:
                    f4:0b:a6:1a:e6:04:1a:8f:0c:87:46:bc:dd:22:bc:
                    d3:2a:0e:c0:ec:13:09:ae:c1:94:6b:2f:ea:71:ed:
                    33:9c:6b:08:42:8e:31:e3:d5:2d:d3:9c:42:5b:2d:
                    71:5a:83:96:b4:07:5e:b8:b0:26:53:18:a4:06:60:
                    1e:82:19:83:62:91:62:29:75:34:e7:a8:eb:90:75:
                    0a:bf:92:8b:d1:5a:54:8c:99:7c:ca:7e:13:c7:5d:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/21
                  200.229.244.0/22
                IPv6:
                  2804:49d4::/32
                  2804:71d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52631
                  270815

    Signature Algorithm: sha256WithRSAEncryption
         5c:28:55:74:ec:55:a1:83:79:cc:c3:1c:a0:11:4a:e3:67:c3:
         f0:13:38:00:fe:03:22:e3:60:49:c3:10:61:0a:c0:da:71:8b:
         7f:fc:3a:f3:da:c1:46:15:5c:e4:38:1f:d2:c8:db:b3:a5:cf:
         0c:ca:7f:3b:b6:d8:bb:73:12:33:b5:58:15:75:b6:72:cd:d8:
         82:23:8e:7a:5b:0d:b5:82:6c:9d:50:9b:a2:38:9b:c0:cf:bc:
         e4:a2:b2:81:77:ee:9f:57:d3:69:b1:19:1c:d7:0e:26:d4:40:
         1e:18:51:1b:94:d3:d0:95:6e:74:39:0e:8d:fe:1c:39:30:08:
         d8:04:14:38:20:5b:61:25:f2:bc:b8:75:87:89:f7:19:ca:1d:
         ff:99:b1:74:61:21:21:9a:19:95:15:19:1f:50:86:43:fc:2e:
         5d:59:fc:b0:4c:18:36:2f:75:5c:19:8e:15:31:0f:ab:eb:7c:
         68:98:8b:d9:61:3c:4c:dd:fc:99:eb:b5:55:a0:06:cd:19:9e:
         cf:32:63:8b:08:c6:18:47:9f:cf:59:40:87:7f:bf:0d:8a:c5:
         56:ff:fe:e4:1d:d0:b3:46:4b:8f:0f:4e:24:0a:29:b2:11:ff:
         e3:06:a1:c4:5c:8d:17:a4:f8:77:63:52:b5:65:60:a6:10:a4:
         df:97:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:58 2025 by rpki-client