Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ADD3B70A0A8F8C8C74CFFB2BC986EF11554A7F08.cer
File:                     ADD3B70A0A8F8C8C74CFFB2BC986EF11554A7F08.cer (raw, json)
Hash identifier:          1rmKj38DXu6PQekn8qi7LrH+lhdDBCdPiFvdjN7yUhY=
Subject key identifier:   AD:D3:B7:0A:0A:8F:8C:8C:74:CF:FB:2B:C9:86:EF:11:55:4A:7F:08
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C3AD48732DF46129C1C08B087289AE333BA2119
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/ADD3B70A0A8F8C8C74CFFB2BC986EF11554A7F08.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Dec 2024 22:41:16 +0000
Certificate not after:    Tue 02 Dec 2025 22:46:16 +0000
Subordinate resources:    AS: 262957
                          IP: 186.226.216.0/22
                          IP: 2804:e78::/32
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 14:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3a:d4:87:32:df:46:12:9c:1c:08:b0:87:28:9a:e3:33:ba:21:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  3 22:41:16 2024 GMT
            Not After : Dec  2 22:46:16 2025 GMT
        Subject: CN=ADD3B70A0A8F8C8C74CFFB2BC986EF11554A7F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:3a:32:de:70:4e:63:7b:04:93:a0:fe:06:
                    0e:96:13:98:8e:6a:04:49:ff:6c:97:5c:47:a3:69:
                    8f:a8:a7:69:d5:4c:10:47:b1:bc:c8:be:f7:67:fc:
                    63:05:6a:ee:2a:2f:b9:6c:5b:80:77:bc:5b:79:39:
                    8d:77:3d:e7:fe:9e:df:48:e0:26:79:b1:d2:b9:90:
                    63:74:1f:55:af:b9:7f:ec:51:e3:b9:c4:d0:72:84:
                    46:24:29:c8:eb:7d:7f:84:24:cd:17:e0:09:91:3c:
                    98:40:dc:42:b1:4e:b1:f4:34:b7:fa:65:45:7d:4f:
                    2d:7d:a0:84:1b:c8:66:36:71:d5:02:6b:8e:ee:bc:
                    5b:0f:33:2e:a6:fa:fe:59:a9:43:bc:a1:09:6d:a3:
                    86:80:09:2d:f1:36:a2:d1:b3:f4:f5:dd:8c:2e:19:
                    b6:ce:e5:eb:19:dc:39:45:e0:e4:dd:7f:8d:56:06:
                    63:89:b2:f1:d3:6a:f6:b6:aa:e3:af:7c:29:37:cc:
                    24:d1:17:55:17:80:fa:ee:41:45:f1:85:bf:02:3b:
                    3e:e4:18:a3:e8:16:ec:16:64:d6:c8:53:d6:86:34:
                    df:ec:7a:c9:bc:eb:e3:7b:71:a1:f5:d1:5e:ce:c9:
                    0d:6d:5b:55:3e:c6:7d:d5:8a:f8:05:8f:7f:e0:74:
                    69:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:D3:B7:0A:0A:8F:8C:8C:74:CF:FB:2B:C9:86:EF:11:55:4A:7F:08
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/ADD3B70A0A8F8C8C74CFFB2BC986EF11554A7F08.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.216.0/22
                IPv6:
                  2804:e78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262957

    Signature Algorithm: sha256WithRSAEncryption
         a8:05:22:8e:8f:a0:f7:d7:cb:b6:22:f7:8a:81:02:05:38:bf:
         bb:3d:86:90:34:4c:a3:5e:b0:8c:82:02:7b:69:d1:d9:0e:e6:
         58:fa:28:5d:97:1c:e2:a8:5d:56:2d:cc:63:c2:5a:c3:ab:0c:
         c1:eb:a3:de:cd:e2:68:8f:b7:71:9b:50:3d:d0:b1:96:6e:e7:
         0f:f8:59:7d:0e:96:03:d8:c7:aa:18:f6:5f:bb:71:a8:98:74:
         64:4b:5f:5a:49:a4:49:10:ab:bd:99:42:ec:22:55:33:b7:b7:
         69:64:ee:51:64:84:72:5a:c2:ed:4f:67:4d:c6:6c:90:28:0d:
         c3:23:31:e0:3e:6a:ee:ed:f5:7a:36:49:09:69:6f:83:ca:b9:
         97:4c:cf:20:4f:13:14:b7:ab:b6:8e:77:13:fb:6e:60:d6:cc:
         4e:e4:c0:64:fd:98:98:76:fc:02:61:5c:e7:5d:01:a6:0b:08:
         e3:33:e7:bc:39:f9:3d:55:a1:5d:20:45:e8:0e:cc:7a:6a:13:
         9b:78:1d:bd:e2:e6:75:4c:c8:18:c3:38:96:00:d0:fe:d4:00:
         78:7e:a2:a4:5a:fe:c6:f1:d2:d5:c5:aa:33:33:e2:4a:eb:87:
         35:58:b7:d3:29:bb:58:65:4a:e9:85:9c:4c:3d:0a:a3:22:06:
         af:58:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:05 2025 by rpki-client