Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D725162E18A463E8576032287F7EEDA7CF72075D.cer
File:                     D725162E18A463E8576032287F7EEDA7CF72075D.cer (raw, json)
Hash identifier:          VdoYhoyilenVhWMjGwUZ9XHuRAgT563AaRCJnSO/sM8=
Subject key identifier:   D7:25:16:2E:18:A4:63:E8:57:60:32:28:7F:7E:ED:A7:CF:72:07:5D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       552F9ED5052A21342A71066956C2EF267A5DE7FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/D725162E18A463E8576032287F7EEDA7CF72075D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Feb 2025 14:43:18 +0000
Certificate not after:    Fri 13 Feb 2026 14:48:18 +0000
Subordinate resources:    AS: 61636
                          IP: 131.100.120.0/22
                          IP: 143.137.4.0/22
                          IP: 2804:1c14::/32
Validation:               Failed, certificate revoked on Tue 25 Feb 2025 19:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2f:9e:d5:05:2a:21:34:2a:71:06:69:56:c2:ef:26:7a:5d:e7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 14 14:43:18 2025 GMT
            Not After : Feb 13 14:48:18 2026 GMT
        Subject: CN=D725162E18A463E8576032287F7EEDA7CF72075D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:b2:0e:de:83:6d:16:71:80:22:6c:f4:70:
                    ea:11:4f:cc:1b:53:94:da:cd:0b:25:aa:97:be:19:
                    b1:66:d6:56:9a:bc:c7:46:7c:64:84:d2:9f:73:78:
                    30:72:aa:29:c3:2d:0b:95:0d:c1:be:0f:bb:67:76:
                    4e:59:bf:ec:d5:50:d7:cd:3b:36:77:dd:07:18:d0:
                    17:c6:66:17:55:41:80:78:b3:1d:65:64:d6:dd:71:
                    de:cc:41:26:75:05:11:0b:de:86:e0:de:cd:73:dd:
                    40:f9:4e:b0:b3:6a:e8:cd:57:c6:b0:55:bc:ca:ba:
                    ca:b1:a3:85:66:b0:30:18:f0:80:cf:aa:0b:01:4c:
                    88:98:0d:d9:a2:b7:89:b1:ad:b5:37:f3:b2:63:c1:
                    45:04:4c:2c:9a:d1:18:7b:05:30:36:fa:07:f3:e7:
                    ff:9d:e5:01:f3:28:21:fb:b9:e7:c7:42:45:89:5b:
                    bd:d2:3a:d5:45:1d:19:ef:55:e0:e5:6e:04:a8:c9:
                    9d:ee:51:fa:12:9e:29:bb:8c:d3:41:46:f1:e1:fe:
                    82:09:19:78:d7:66:44:89:71:72:a1:79:be:08:8e:
                    4b:be:b5:8a:35:f9:3e:43:5c:1f:ac:47:c9:75:1c:
                    8a:4a:92:c2:34:ae:ec:e2:a1:8e:f4:c4:15:50:b8:
                    10:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:25:16:2E:18:A4:63:E8:57:60:32:28:7F:7E:ED:A7:CF:72:07:5D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/D725162E18A463E8576032287F7EEDA7CF72075D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.120.0/22
                  143.137.4.0/22
                IPv6:
                  2804:1c14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61636

    Signature Algorithm: sha256WithRSAEncryption
         5c:57:32:5e:8c:55:62:7e:81:91:70:94:05:8d:dc:f2:94:82:
         25:53:8b:da:ae:8e:f9:5f:d7:87:6e:e3:4c:13:4d:7d:aa:c7:
         f9:be:e4:a8:c1:22:cb:c5:11:f4:b0:25:22:40:17:9f:e8:ec:
         0a:fb:2c:15:b4:08:33:73:7c:6a:0d:6a:cc:c6:1e:bf:7f:b5:
         8f:18:36:53:21:dd:45:8a:7b:dd:71:97:07:5c:f7:13:a7:4f:
         61:ac:9a:ab:52:90:af:ba:f9:9c:54:2a:c7:41:6f:9f:63:c9:
         82:9b:84:c1:f0:7c:e4:46:58:2c:87:58:b4:d2:e0:b2:98:20:
         c2:e1:ba:10:62:9d:f8:65:8c:84:74:ad:4d:b6:e1:dd:02:19:
         d2:b1:ae:3f:ae:60:ae:f3:1a:92:c6:e7:af:a7:69:fe:b8:77:
         66:9a:d3:21:a3:64:6a:17:af:21:44:25:3b:36:f1:2e:d0:77:
         d2:b8:cf:c8:fa:ac:25:37:1f:91:84:51:cb:5a:e0:6b:25:86:
         54:aa:44:92:72:8c:d1:6e:7d:37:f6:d0:ad:65:70:eb:8a:d8:
         dc:79:53:33:92:79:ca:87:bc:28:ef:06:8a:66:5c:bf:d9:4a:
         8c:0e:3e:17:68:7e:22:12:47:ba:15:8f:d0:d6:4a:64:74:74:
         8a:a9:a4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:52:47 2025 by rpki-client