Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7C6205F16F5F2B576BE8B3C464D2A7B8377D43F6.cer
File:                     7C6205F16F5F2B576BE8B3C464D2A7B8377D43F6.cer (raw, json)
Hash identifier:          bql4TUcwn05EfDWMRL+w5R2UNAUmfEaJyoXond/EgYI=
Subject key identifier:   7C:62:05:F1:6F:5F:2B:57:6B:E8:B3:C4:64:D2:A7:B8:37:7D:43:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       35597C3753258419566C07C7F686C2709DF2E615
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/7C6205F16F5F2B576BE8B3C464D2A7B8377D43F6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Jan 2025 13:15:51 +0000
Certificate not after:    Fri 02 Jan 2026 13:20:51 +0000
Subordinate resources:    AS: 269539
                          IP: 45.187.160.0/22
                          IP: 2804:662c::/32
Validation:               Failed, certificate revoked on Fri 03 Jan 2025 14:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:59:7c:37:53:25:84:19:56:6c:07:c7:f6:86:c2:70:9d:f2:e6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  3 13:15:51 2025 GMT
            Not After : Jan  2 13:20:51 2026 GMT
        Subject: CN=7C6205F16F5F2B576BE8B3C464D2A7B8377D43F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:24:9d:d8:9c:d0:5a:00:ee:1f:78:8d:27:94:
                    1a:2d:5d:ac:00:a8:ae:c7:56:fb:c1:4e:e5:28:c6:
                    a9:4d:3a:26:47:16:54:6b:1d:ec:a7:37:4a:57:0a:
                    b8:6e:a2:17:e2:d1:5a:88:97:64:02:c9:70:ee:1e:
                    8b:4c:9d:8c:8a:a3:37:d6:48:41:7a:84:46:6f:50:
                    7f:6f:34:8c:cb:52:e1:93:08:2a:cf:12:06:70:ac:
                    2a:39:fb:83:fe:f3:34:14:da:3a:67:4d:cd:f1:bb:
                    4a:c7:e9:37:1a:79:5b:b4:98:d0:c3:4e:dc:c4:cb:
                    a8:c0:6e:26:ca:eb:be:d4:ec:15:b4:be:66:c0:0a:
                    0c:0e:1e:00:a4:53:66:3e:f3:c7:ab:02:6d:7f:e2:
                    8e:6c:f9:c8:e7:47:6a:2d:3f:e9:42:dc:85:fc:38:
                    35:d9:18:e7:99:61:13:e4:11:1d:b9:81:5f:b4:34:
                    a2:3e:a8:d4:38:f4:ab:a8:0b:1e:c2:ed:dd:28:b9:
                    f7:f8:18:a0:04:23:a3:03:e2:ab:0b:fd:dc:65:c5:
                    db:6b:46:5e:e2:2f:9b:19:61:77:cf:38:1d:7c:d9:
                    4a:3d:0e:5d:ec:06:98:5e:05:5f:6b:f3:a1:78:c7:
                    55:77:d8:9e:ce:54:b8:e9:54:ae:af:43:9b:3c:62:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:62:05:F1:6F:5F:2B:57:6B:E8:B3:C4:64:D2:A7:B8:37:7D:43:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/7C6205F16F5F2B576BE8B3C464D2A7B8377D43F6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.160.0/22
                IPv6:
                  2804:662c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269539

    Signature Algorithm: sha256WithRSAEncryption
         18:d4:4d:bf:7b:4f:99:73:74:c8:64:4f:11:f6:9c:28:c2:71:
         44:26:44:c4:04:de:93:3a:49:51:41:c5:f5:52:76:dd:f9:6e:
         ca:65:60:45:ef:5e:26:33:d2:58:79:f0:51:02:3a:3d:fd:03:
         76:9b:73:30:cc:ad:01:33:d3:d8:f6:c2:dd:8a:ce:8b:1c:fe:
         6f:75:00:30:95:b1:90:e9:a7:cb:ee:ce:0a:4a:5f:6f:f0:fa:
         d6:ef:15:76:fd:e7:c0:5e:16:4e:a3:41:40:9c:c6:c8:a0:73:
         92:be:20:fa:f5:e3:82:35:a5:51:11:f9:f5:5e:f3:f2:3c:51:
         8c:0d:77:87:7d:5f:ad:dd:a1:55:aa:f0:d6:8a:73:25:2a:e5:
         6b:c4:1a:6e:4c:97:53:f3:bb:c1:f2:19:33:05:4e:28:f9:22:
         83:00:46:82:cd:d6:6d:b1:c1:c6:cf:b2:29:99:04:da:13:15:
         d0:04:73:86:af:25:87:7e:78:02:18:6d:18:34:25:1c:7e:d8:
         be:3d:51:6e:55:11:3d:ed:9f:be:52:46:8c:32:ba:ac:ac:77:
         d0:c3:9a:fa:24:b4:3a:87:54:e3:a4:3b:8f:e7:da:47:4a:51:
         37:d8:a9:60:78:aa:50:e9:d1:44:e4:7e:76:e6:53:9f:b2:38:
         e9:f5:5d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:57:10 2025 by rpki-client