Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer
File:                     7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer (raw, json)
Hash identifier:          5ApjJMpkxVSJDrw0Imj1tpkd3gwOBohbd/LJIgBgAhs=
Subject key identifier:   7E:DE:5A:1D:4A:EC:36:DA:89:7F:AB:54:08:29:FF:A1:5F:10:16:65
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       09B38F11C426CF99ACC777DB443AB1ACCC18F519
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 06:31:53 +0000
Certificate not after:    Fri 06 Mar 2026 06:36:53 +0000
Subordinate resources:    AS: 28139
                          IP: 186.235.176.0/21
                          IP: 187.49.16.0/20
                          IP: 2804:994::/32
Validation:               Failed, certificate revoked on Mon 31 Mar 2025 09:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b3:8f:11:c4:26:cf:99:ac:c7:77:db:44:3a:b1:ac:cc:18:f5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 06:31:53 2025 GMT
            Not After : Mar  6 06:36:53 2026 GMT
        Subject: CN=7EDE5A1D4AEC36DA897FAB540829FFA15F101665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:ae:f3:62:cf:fa:5d:d4:9e:89:a6:d4:91:
                    52:7d:0b:a5:14:4c:6c:ce:97:23:13:0f:7b:82:96:
                    9e:30:d8:7e:0e:17:d4:96:63:c2:8c:0d:19:74:7b:
                    38:cf:42:d5:42:27:55:dc:d1:c0:82:11:fa:83:49:
                    5a:5e:3e:f9:1e:d9:55:99:d8:f2:4b:cf:c4:93:87:
                    80:3e:64:ba:a2:25:09:f3:01:6a:9d:19:41:ab:2e:
                    ce:fb:c7:ed:5c:b7:12:35:87:be:31:77:75:99:67:
                    c5:18:d9:73:a0:9d:5f:c2:cf:22:11:c9:12:96:4f:
                    26:c0:5a:75:0f:b3:4f:ac:6f:be:fc:db:c1:56:0f:
                    9d:88:cc:2b:af:6a:7a:bd:86:3b:98:09:93:df:34:
                    de:21:61:2c:1a:fb:8d:2b:cb:86:d9:33:f2:b9:51:
                    01:73:8d:6b:83:b2:cd:c0:0a:d4:e0:a9:00:89:49:
                    5e:cf:68:25:53:b1:e5:9d:dc:cc:f1:14:6a:98:1a:
                    71:41:4a:09:fe:a8:0c:32:32:05:d2:5e:ea:1f:d2:
                    be:28:65:d1:fc:45:be:61:6f:d0:7e:d3:37:b2:22:
                    88:71:1e:64:09:a7:e3:66:96:06:06:5d:ab:35:15:
                    4c:01:ec:77:b2:4f:56:53:46:75:25:55:9f:c6:42:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:DE:5A:1D:4A:EC:36:DA:89:7F:AB:54:08:29:FF:A1:5F:10:16:65
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.176.0/21
                  187.49.16.0/20
                IPv6:
                  2804:994::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28139

    Signature Algorithm: sha256WithRSAEncryption
         19:a3:4c:56:ff:12:46:39:04:5b:0e:d6:a9:73:a0:39:70:a0:
         3b:41:f4:c1:57:6f:8c:0a:a8:d8:e1:9b:78:7b:fe:06:a3:3b:
         89:dd:64:c5:4c:77:8c:98:81:94:a4:ed:59:09:92:66:d8:21:
         a9:ad:17:76:db:ea:fa:90:1b:2e:65:4c:1c:4d:32:fd:1f:84:
         be:56:9a:78:43:35:4d:3c:41:ab:a5:70:ec:90:7a:b5:96:c3:
         c9:de:5e:ae:02:3a:4f:c8:a5:ab:35:61:bc:25:7e:c5:a4:fe:
         bf:1e:11:8e:52:55:6e:0e:fc:5c:14:6f:ac:46:3f:16:31:00:
         10:0f:1a:c2:50:a4:a0:ce:70:55:a7:cd:fb:28:16:2d:77:3f:
         ea:2f:0f:2b:1b:ba:44:00:bf:25:50:b0:75:9c:23:bc:46:a0:
         21:e9:35:37:9b:4f:bb:34:32:48:4a:c6:6f:f2:16:f0:52:dd:
         45:27:c9:16:43:56:8b:c0:ab:ad:16:a9:0e:e5:67:05:92:3a:
         1b:4a:dc:7a:db:d5:43:a3:05:95:1b:2c:bb:1b:2d:8c:c3:81:
         ac:1a:7b:97:ed:7d:0f:19:fa:b4:45:fa:c4:72:ae:d7:f2:a4:
         ee:d3:d9:ab:f8:31:7e:07:b0:85:92:c0:a8:5f:24:bc:ef:b2:
         13:f2:0e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:52 2025 by rpki-client