Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD2626A27E097F13CF657FC3C77348B1D974B506.cer
File:                     FD2626A27E097F13CF657FC3C77348B1D974B506.cer (raw, json)
Hash identifier:          V+amsdCKklN0oNak/WQVrvqif4bttlgiclVxZiVfyRk=
Subject key identifier:   FD:26:26:A2:7E:09:7F:13:CF:65:7F:C3:C7:73:48:B1:D9:74:B5:06
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       243EDE274F0DC8AE76280CF0C02FDD5F53496165
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/FD2626A27E097F13CF657FC3C77348B1D974B506.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Dec 2024 12:56:28 +0000
Certificate not after:    Fri 26 Dec 2025 13:01:28 +0000
Subordinate resources:    AS: 273747
                          IP: 2804:8ba8::/32
Validation:               Failed, certificate revoked on Thu 27 Mar 2025 18:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3e:de:27:4f:0d:c8:ae:76:28:0c:f0:c0:2f:dd:5f:53:49:61:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 27 12:56:28 2024 GMT
            Not After : Dec 26 13:01:28 2025 GMT
        Subject: CN=FD2626A27E097F13CF657FC3C77348B1D974B506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:03:fb:b9:be:a4:97:5e:2e:dd:05:1d:01:03:
                    2c:6f:da:c6:61:28:da:1c:8b:b2:7e:20:c7:7e:d8:
                    fb:5f:e2:f7:c6:c2:47:da:5c:e0:51:70:92:d1:3c:
                    70:f4:d8:53:01:2b:8e:41:d2:8b:7f:20:4b:48:d9:
                    cb:ba:74:d5:ee:4d:60:53:17:4b:48:b5:d6:72:95:
                    f6:83:68:fb:bc:df:2a:f7:4c:c3:7b:df:99:ee:99:
                    8d:9e:8c:0a:e9:ac:47:bf:4c:2a:4f:74:7a:0c:c1:
                    64:8b:dd:44:32:fd:0d:e0:5c:59:4c:97:20:3a:26:
                    ed:35:41:66:4e:75:4e:71:d2:c6:68:f0:01:07:9a:
                    11:ba:cb:91:aa:6c:02:72:95:db:84:08:ef:fb:fb:
                    36:9c:74:3c:bf:e1:fb:9e:58:4c:80:65:08:bf:2e:
                    be:00:e2:a4:e1:18:8e:70:71:f9:d5:16:12:5c:f0:
                    e9:fb:d9:4e:8b:d6:8b:38:e8:61:a8:97:a0:7e:73:
                    4f:0a:4e:70:ae:c4:cc:d7:e0:0b:76:55:37:67:ab:
                    f4:7f:88:12:6c:25:60:26:1f:05:9a:35:87:50:5e:
                    7a:4a:43:42:6a:74:7f:c2:d0:bb:16:bc:d8:42:b2:
                    15:99:06:68:7f:a4:77:78:7f:f0:a6:bb:4c:93:e0:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:26:26:A2:7E:09:7F:13:CF:65:7F:C3:C7:73:48:B1:D9:74:B5:06
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/FD2626A27E097F13CF657FC3C77348B1D974B506.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ba8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273747

    Signature Algorithm: sha256WithRSAEncryption
         90:f6:8f:7b:6c:f3:95:32:da:a6:9e:a1:77:07:70:da:31:3a:
         ef:66:1a:bc:e2:9e:ff:05:57:f7:b1:04:b2:7d:4a:62:eb:a2:
         09:fe:00:cb:0b:3b:1d:30:08:3a:e2:eb:00:10:2b:0b:db:1b:
         2d:85:43:6d:bc:36:65:35:07:91:ad:3d:21:1d:b7:5a:ac:e9:
         e7:09:da:8f:fb:b9:fa:eb:0a:68:f3:88:52:2d:71:cb:53:82:
         64:3d:0d:87:4c:58:9f:f2:de:a3:db:fb:9c:29:74:19:ca:8c:
         ee:38:61:c1:f5:55:fb:e4:5f:c7:45:b2:58:b0:0f:15:c3:f6:
         ad:b0:98:37:e6:79:55:4a:5b:36:9a:c1:99:ac:ef:a0:64:d1:
         40:e2:b1:ba:f6:26:cc:c7:8c:f3:5c:52:24:64:e0:04:db:68:
         f4:fb:15:cd:72:e3:f4:0f:62:35:db:fd:72:ab:6e:22:93:a0:
         98:15:c7:5c:99:64:f0:09:b3:68:47:e6:64:ee:3b:26:72:c2:
         7d:21:61:20:ca:e7:e3:f8:e3:6f:80:da:52:fd:b6:57:92:99:
         cd:14:98:19:ee:2d:04:2b:be:f5:21:3b:ad:16:86:d9:37:b7:
         a4:c3:3a:5a:9a:33:d4:c9:19:bb:ea:c4:35:63:2c:c5:6b:b3:
         75:fa:5d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:49:58 2025 by rpki-client