Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B42594E2C54178CC78E14B1FCAF54FEA3917A72C.cer
File:                     B42594E2C54178CC78E14B1FCAF54FEA3917A72C.cer (raw, json)
Hash identifier:          d38wTQcnx+NqO37C0Rs6c255ITAvZ6kSGwQ2gZ3f3wI=
Subject key identifier:   B4:25:94:E2:C5:41:78:CC:78:E1:4B:1F:CA:F5:4F:EA:39:17:A7:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D167E1137E6EB402B1A7C69B0558F9144660FBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4TeLFssEDdnPtrmwSoNo2fWEjK6FrB8uaGUE8Hir45Qu/0/B42594E2C54178CC78E14B1FCAF54FEA3917A72C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4TeLFssEDdnPtrmwSoNo2fWEjK6FrB8uaGUE8Hir45Qu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Jan 2025 18:46:34 +0000
Certificate not after:    Thu 29 Jan 2026 18:51:34 +0000
Subordinate resources:    AS: 270897
                          IP: 179.125.8.0/22
                          IP: 2804:7320::/32
Validation:               Failed, certificate revoked on Fri 07 Feb 2025 00:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:16:7e:11:37:e6:eb:40:2b:1a:7c:69:b0:55:8f:91:44:66:0f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 30 18:46:34 2025 GMT
            Not After : Jan 29 18:51:34 2026 GMT
        Subject: CN=B42594E2C54178CC78E14B1FCAF54FEA3917A72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:0c:3b:e0:73:af:0d:db:12:c6:5c:43:4f:
                    13:71:f5:06:88:8d:7b:36:09:11:b4:1b:6f:cf:79:
                    d1:df:32:b6:7a:7d:1e:d4:0a:7f:92:c6:62:b7:3b:
                    4c:e1:d8:2a:27:17:48:74:9d:10:15:46:63:28:93:
                    f5:bc:d8:50:6b:66:a6:98:13:cf:ee:fc:22:41:32:
                    3b:0c:0a:4d:65:7e:38:0c:3b:69:22:a5:22:7a:5e:
                    08:4b:a8:a9:60:57:f6:db:53:1d:38:bc:9d:eb:e9:
                    8c:9d:eb:ec:82:49:c0:9f:19:98:3c:0f:a4:dd:dc:
                    4b:ba:51:9b:f8:0c:fc:2c:54:28:59:87:2b:44:2e:
                    70:a8:e1:9d:c7:4c:44:5e:57:a0:57:26:73:06:07:
                    51:fa:93:01:f5:6b:ef:f7:82:d7:2d:e9:5b:5b:56:
                    0b:e1:8a:73:ae:8d:9e:61:2e:79:09:a1:f3:c4:65:
                    7c:6c:6c:65:07:1d:c5:2b:08:32:43:41:9e:2a:d7:
                    98:3c:58:1f:f9:bb:7b:27:16:57:f0:3b:ba:9c:8c:
                    2d:5b:66:9d:2e:1b:36:8d:c8:d5:74:17:73:2b:0a:
                    2b:46:9e:cf:c2:d9:a0:65:5f:f9:53:51:3c:17:30:
                    65:c4:6c:17:a3:e0:7a:27:1d:1a:cc:13:be:7a:7a:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:25:94:E2:C5:41:78:CC:78:E1:4B:1F:CA:F5:4F:EA:39:17:A7:2C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4TeLFssEDdnPtrmwSoNo2fWEjK6FrB8uaGUE8Hir45Qu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4TeLFssEDdnPtrmwSoNo2fWEjK6FrB8uaGUE8Hir45Qu/0/B42594E2C54178CC78E14B1FCAF54FEA3917A72C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.8.0/22
                IPv6:
                  2804:7320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270897

    Signature Algorithm: sha256WithRSAEncryption
         00:b9:b0:e5:f9:fc:c0:f3:4f:25:e6:6c:13:ce:4e:1b:d5:03:
         83:b1:40:67:fb:42:d7:f1:5b:c2:29:04:42:2b:ba:74:b4:9e:
         4b:d3:d8:06:e4:46:38:3f:f9:fd:ff:a0:f3:43:6a:4b:62:84:
         ed:38:ce:fe:9d:59:83:a1:fc:c0:7c:b4:aa:48:5a:17:4e:44:
         2d:e4:8f:89:8f:1f:f3:00:c8:bb:60:d3:6b:cd:b8:19:61:7b:
         ef:01:c6:42:22:92:16:f3:39:1c:d0:43:be:59:ca:12:53:6b:
         0d:73:0e:63:42:ab:ee:a7:c1:d8:67:e4:09:dc:f8:85:ce:bd:
         6d:ae:56:32:5c:7a:71:d1:06:69:6a:5c:f5:ba:64:74:18:6d:
         bb:09:a4:7f:df:5f:f3:2a:6f:28:23:c1:c4:34:0e:81:32:0a:
         8e:b5:2d:85:63:e8:48:05:0b:ed:3c:76:b5:ad:49:c8:e6:1e:
         90:e0:0f:73:2a:2f:3e:f5:bd:8b:53:32:1c:9c:0f:1f:cb:a6:
         60:bf:2f:dd:63:98:92:95:dc:cb:c2:52:fc:49:a7:72:cb:18:
         70:72:f4:b1:1b:e7:6d:3f:41:a2:9c:20:ff:b2:a1:66:86:b8:
         7c:75:35:1f:14:96:81:ed:df:43:ae:64:7a:58:e6:aa:2c:b3:
         7f:6d:35:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:18 2025 by rpki-client