Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
File:                     E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer (raw, json)
Hash identifier:          3YbVpG0baBCUhGRhQKlpa1m5+5Kk5Wg8VrN6jF2DC0U=
Subject key identifier:   E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2196EE3B66C141CE6CBB6D380DF7EC4DF423EE8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Mar 2025 17:11:56 +0000
Certificate not after:    Fri 13 Mar 2026 17:16:56 +0000
Subordinate resources:    AS: 274726
                          IP: 2804:92a8::/32
Validation:               Failed, certificate revoked on Thu 27 Mar 2025 21:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:96:ee:3b:66:c1:41:ce:6c:bb:6d:38:0d:f7:ec:4d:f4:23:ee:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 14 17:11:56 2025 GMT
            Not After : Mar 13 17:16:56 2026 GMT
        Subject: CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:c2:11:4f:16:88:f8:b7:7f:68:b8:2f:4a:
                    b4:5a:18:2b:e9:9b:1b:36:bf:6d:4c:18:d5:fc:63:
                    9b:52:13:d9:a9:e8:5c:dc:cd:22:0f:e2:09:aa:06:
                    82:82:93:cc:b5:2b:4e:61:31:d4:1f:9d:a0:c1:8f:
                    2a:53:7d:7c:77:a6:5d:d7:d9:df:a2:16:6a:bf:0d:
                    51:6f:03:54:14:b5:d8:3e:ca:56:a7:1f:12:64:15:
                    84:12:87:d8:c9:85:af:d6:00:be:84:4a:d6:d9:06:
                    43:ea:a4:f4:c5:5f:43:d6:1b:03:87:23:7a:42:99:
                    56:56:32:68:7a:67:8f:8d:8f:5c:11:df:fd:fb:51:
                    2d:32:9b:af:f6:f7:bb:31:22:5d:37:c2:ff:3b:f4:
                    3c:b3:e4:e0:d9:39:d4:c9:89:0d:66:63:2d:8e:b0:
                    9d:97:74:59:d4:83:91:54:01:f0:f2:6c:c2:30:62:
                    b0:2d:f9:f5:d6:35:13:fd:3d:1e:06:75:d8:17:40:
                    c1:a7:28:cd:b7:c3:a9:14:dc:d5:dd:7a:69:af:3d:
                    e7:a7:51:3e:2c:6c:ba:3e:11:4e:e5:84:05:ae:c7:
                    14:e2:8c:18:55:c3:e5:f2:c4:e7:7a:8b:6b:db:c3:
                    e6:a4:4a:12:23:1c:15:e5:95:b1:fb:58:27:bc:74:
                    55:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274726

    Signature Algorithm: sha256WithRSAEncryption
         79:0d:fa:1c:12:64:b5:ff:d4:8e:57:35:7d:b4:2a:20:58:8b:
         b9:31:28:a9:d1:95:fc:5b:e3:12:f4:50:ac:ab:08:d1:35:98:
         c3:08:a1:e1:f6:bf:5f:8e:90:9b:5e:c5:79:99:c9:67:6b:58:
         d7:4f:7e:ba:2c:00:98:67:29:10:9b:95:05:77:dc:e3:a3:3c:
         41:d5:f6:cc:60:24:40:eb:22:ec:67:0a:43:f3:fe:43:f8:a0:
         bb:b4:7e:63:dd:26:82:44:17:f9:7d:ad:84:c0:07:58:99:ec:
         f5:4c:20:3c:8b:31:e7:d8:06:c3:21:2d:51:cf:36:2d:f1:4c:
         f2:e3:dc:9a:7e:4f:8d:6a:47:04:56:63:b4:08:b8:26:c6:ee:
         e2:6f:23:23:42:c2:f7:09:44:76:86:9c:a8:fa:6a:6d:70:40:
         54:c1:db:a7:27:a7:f9:77:ac:02:ca:84:1f:6b:d2:3b:2a:5a:
         f9:0e:b0:c4:4f:36:d0:8c:e4:5c:dd:15:2e:a0:35:df:5b:c8:
         55:2d:31:9c:da:0f:9b:d0:8a:9e:89:74:f6:10:fe:4f:a5:7f:
         42:0c:a0:49:78:7f:f5:e4:8b:f5:58:e1:8a:c6:71:74:f5:90:
         3b:64:da:a6:96:9a:c8:7f:be:f5:00:f0:de:39:cb:db:87:b5:
         24:19:b0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:21 2025 by rpki-client