Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A3B3AB01804A8E42E7821AA25864459B1766D25A.cer
File:                     A3B3AB01804A8E42E7821AA25864459B1766D25A.cer (raw, json)
Hash identifier:          gPHiG9E1lkuDG81RDQqGex51tTexnjhRYOzctv/B+Dc=
Subject key identifier:   A3:B3:AB:01:80:4A:8E:42:E7:82:1A:A2:58:64:45:9B:17:66:D2:5A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       33CA38322EB8E582390F8CA6D6D86FD54899EAE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/A3B3AB01804A8E42E7821AA25864459B1766D25A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Dec 2024 23:07:28 +0000
Certificate not after:    Wed 03 Dec 2025 23:12:28 +0000
Subordinate resources:    AS: 273333
                          IP: 2804:8d14::/32
Validation:               Failed, certificate revoked on Sat 04 Jan 2025 21:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ca:38:32:2e:b8:e5:82:39:0f:8c:a6:d6:d8:6f:d5:48:99:ea:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  4 23:07:28 2024 GMT
            Not After : Dec  3 23:12:28 2025 GMT
        Subject: CN=A3B3AB01804A8E42E7821AA25864459B1766D25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:16:8e:f3:10:a8:0e:90:b0:b2:6c:8d:de:
                    f9:d2:d3:d9:bb:a5:cd:e7:a8:d1:5d:6f:6a:a9:f5:
                    fa:7c:03:d8:d6:0b:28:10:a4:5a:ec:f6:b8:40:3e:
                    6e:8d:51:b3:1e:c3:dc:f7:42:49:dd:1d:9d:a7:8c:
                    a4:eb:d9:57:9e:f2:7b:23:60:f8:cb:c6:2e:a1:eb:
                    33:13:43:88:07:dd:e1:e3:4a:58:2a:7a:47:2d:59:
                    4e:a5:fc:1d:94:b4:1d:5a:4f:23:53:b5:0c:ac:07:
                    64:b8:95:88:90:10:cb:9e:0a:19:a0:61:ed:69:23:
                    58:6b:f1:81:3d:1b:58:ba:67:ef:fe:7b:bb:87:69:
                    50:e6:02:93:45:53:4c:f1:cc:3e:1f:28:cc:b4:60:
                    e5:f1:9e:b0:2a:4e:2f:f9:0c:c8:5b:52:ad:ef:3b:
                    ec:51:29:1e:72:52:e8:74:2d:06:77:93:9d:83:91:
                    80:94:2c:f0:e5:a0:d9:b5:fc:27:3a:94:16:3d:53:
                    99:cb:1b:56:70:8c:4c:08:f6:c2:c3:11:85:cd:51:
                    45:3c:b9:61:4f:b9:a6:46:9f:36:6c:80:a7:03:23:
                    60:82:d3:1a:f4:5f:78:ed:f8:aa:b0:b1:0a:53:a2:
                    b5:45:e6:19:a4:19:dd:d9:58:d0:ca:d1:20:f1:27:
                    00:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:B3:AB:01:80:4A:8E:42:E7:82:1A:A2:58:64:45:9B:17:66:D2:5A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/A3B3AB01804A8E42E7821AA25864459B1766D25A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273333

    Signature Algorithm: sha256WithRSAEncryption
         0b:ed:cf:25:40:b5:ec:bb:68:09:c0:e5:bd:e3:15:71:bc:84:
         9c:15:9b:36:c8:f0:f3:df:74:e2:cd:98:08:90:9b:93:94:15:
         0a:2c:e4:ed:7f:31:0f:a3:fe:ed:ff:6b:6c:72:e2:f7:ff:2f:
         3a:7e:ad:20:b2:39:d6:53:42:b1:da:42:fb:fb:6a:94:67:71:
         49:c7:2c:34:4d:6d:61:17:aa:f5:5d:b4:5c:8c:9a:da:b2:4f:
         e5:12:25:09:a1:af:d4:3b:cd:ba:24:1b:35:9b:92:ca:e0:bb:
         14:1e:b0:d0:8a:3c:bc:9e:3e:11:04:d1:5e:c9:a8:d1:3a:5b:
         2a:2e:5f:62:00:91:9b:15:e8:f3:3b:39:6c:b7:a1:c6:9a:fe:
         14:e3:40:e5:89:ea:8b:cf:9d:d2:1a:75:b3:eb:ce:d7:36:eb:
         88:cf:7c:2d:bc:ea:2b:b3:51:25:78:99:3b:be:c9:cb:2a:36:
         cb:20:f4:ec:fe:79:59:24:6c:72:ad:5c:72:8f:f0:92:dc:66:
         a7:0c:87:54:00:7b:52:eb:55:90:76:41:0f:56:55:d1:48:04:
         71:e3:49:04:74:aa:c6:24:6c:08:7c:75:1a:c0:7e:73:86:da:
         23:67:38:f3:ad:ff:a6:4e:e3:95:c9:fd:83:ea:6e:ca:e5:e5:
         04:03:2e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:25:26 2025 by rpki-client