Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D1CD7DB729738A9B9C182B0604224324C0E266BC.cer
File:                     D1CD7DB729738A9B9C182B0604224324C0E266BC.cer (raw, json)
Hash identifier:          EDIKAepNu/8H1LIhMh1Dk6z6lduHc3riaK8MmlM5Ook=
Subject key identifier:   D1:CD:7D:B7:29:73:8A:9B:9C:18:2B:06:04:22:43:24:C0:E2:66:BC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6462247C03DBF55C80B345BDCA6E26AF85108E1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/D1CD7DB729738A9B9C182B0604224324C0E266BC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Jan 2025 17:01:37 +0000
Certificate not after:    Wed 07 Jan 2026 17:06:37 +0000
Subordinate resources:    AS: 273638
                          IP: 2804:89f8::/32
Validation:               Failed, certificate revoked on Tue 18 Mar 2025 03:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:62:24:7c:03:db:f5:5c:80:b3:45:bd:ca:6e:26:af:85:10:8e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  8 17:01:37 2025 GMT
            Not After : Jan  7 17:06:37 2026 GMT
        Subject: CN=D1CD7DB729738A9B9C182B0604224324C0E266BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8c:bf:7a:13:8f:03:60:40:ab:cc:d2:9f:b2:
                    e5:86:0e:78:6b:71:61:a5:04:92:20:a2:66:05:be:
                    7e:95:6c:af:4a:80:8c:ac:ff:96:48:a8:8b:7d:c5:
                    dd:88:fd:ec:8e:27:d6:90:6f:81:8a:da:4a:1d:4a:
                    de:9f:17:a1:a6:c3:cf:bf:00:2e:dc:58:b9:fe:45:
                    08:0c:de:15:60:d4:6b:f7:67:dd:96:d7:8f:46:71:
                    86:49:7c:f5:af:e9:7a:18:aa:75:b3:54:d0:3a:54:
                    b2:89:34:03:a7:67:d8:57:8a:c9:f7:34:e6:a7:25:
                    9f:74:3d:33:09:80:e2:20:86:5c:cc:1a:ff:8e:93:
                    19:e2:40:7f:64:2e:f9:99:c5:65:fc:4d:82:59:90:
                    4d:51:38:a4:c5:cd:00:51:ac:32:ef:5a:dd:60:aa:
                    d8:dd:24:ef:7a:71:7f:00:bc:2f:27:f9:e7:73:9a:
                    f7:04:ff:ba:1a:0a:02:d5:a3:fd:4a:d2:a2:58:f7:
                    bf:2f:90:42:cd:db:34:67:d2:e8:f6:2e:16:5d:97:
                    6f:cc:fd:c3:f7:c0:27:0d:c7:b4:23:30:fd:5d:0d:
                    0b:0b:88:66:99:ae:d3:81:af:62:cd:bc:28:5b:fd:
                    88:89:3e:54:c5:bc:08:ba:dd:63:5f:97:5b:74:fe:
                    06:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:CD:7D:B7:29:73:8A:9B:9C:18:2B:06:04:22:43:24:C0:E2:66:BC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/D1CD7DB729738A9B9C182B0604224324C0E266BC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:89f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273638

    Signature Algorithm: sha256WithRSAEncryption
         47:0c:7b:61:6e:4e:62:db:5a:f3:c5:8e:70:ea:ce:ab:47:e0:
         e0:e8:b1:50:92:f6:13:93:9b:89:d0:69:ab:47:ef:58:7d:32:
         86:a7:1c:d9:88:41:10:41:f2:2b:57:4d:e0:34:10:7a:c7:4c:
         5d:20:4f:5f:f4:d2:65:1c:7b:4f:20:20:c8:d4:40:f5:dc:87:
         11:eb:3a:de:1c:d6:93:b0:25:0e:53:f9:e5:0b:8b:c3:c9:8f:
         08:ee:1d:ab:54:e7:8d:f7:c3:52:f5:4c:e9:36:ec:ee:b7:6c:
         d8:b1:ed:eb:b5:34:2b:8d:d2:6d:da:aa:ee:4c:0c:9a:fc:91:
         81:15:03:e1:75:6f:b5:3d:f1:29:9f:4e:22:cf:f1:82:57:bc:
         84:97:23:fd:56:e8:c7:61:06:ab:4e:d0:e6:10:97:d1:70:3e:
         c1:89:26:36:82:2d:86:11:b3:d9:59:e6:0a:a5:f4:17:c2:d3:
         e7:53:5b:6b:ab:92:03:9b:cc:77:df:9c:3e:0c:16:05:95:7f:
         37:b5:fd:c5:08:51:c2:19:89:50:de:4c:19:2f:2f:e7:47:e8:
         2b:8f:71:97:d4:5e:25:ec:8e:d4:dc:49:cd:03:f8:25:d7:e6:
         b7:ff:d4:90:80:76:f7:c9:61:cf:a0:b4:18:c6:4c:0f:f4:83:
         fc:81:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:45 2025 by rpki-client