Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.cer
File:                     FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.cer (raw, json)
Hash identifier:          02AOVK7AxsDgoFmAiIPQ7QhzDaPpaPjrzZiKfwC5Ix4=
Subject key identifier:   FD:72:79:E1:66:9A:4C:13:E1:BF:1D:25:11:A9:1E:03:40:6F:A0:E2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3EB97C8185F5627F3D962AC6B8A7FCD28175C875
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Feb 2025 19:12:44 +0000
Certificate not after:    Mon 09 Feb 2026 19:17:44 +0000
Subordinate resources:    AS: 14457
                          AS: 262391
                          IP: 45.235.16.0/22
                          IP: 131.0.76.0/22
                          IP: 168.181.68.0/22
                          IP: 170.254.124.0/22
                          IP: 177.125.220.0/22
                          IP: 177.131.112.0/20
                          IP: 190.89.104.0/22
                          IP: 200.53.16.0/20
                          IP: 2804:8c0::/32
                          IP: 2804:1a64::/32
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 16:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b9:7c:81:85:f5:62:7f:3d:96:2a:c6:b8:a7:fc:d2:81:75:c8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 10 19:12:44 2025 GMT
            Not After : Feb  9 19:17:44 2026 GMT
        Subject: CN=FD7279E1669A4C13E1BF1D2511A91E03406FA0E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:5c:d9:c4:81:c1:c1:72:48:42:7d:9e:6e:
                    24:b1:0d:b8:8e:2b:90:90:65:b3:8c:8c:b0:56:c3:
                    a4:40:75:6e:a2:f8:14:f0:eb:72:0c:ee:2b:ee:c6:
                    d7:c4:70:4a:da:07:b1:69:e5:28:d0:6d:b7:5a:19:
                    3e:35:fd:c9:2e:7c:41:0a:b0:ae:48:a4:46:9d:6b:
                    b2:49:d1:1d:ef:f0:15:a1:97:50:03:5c:9b:92:96:
                    44:73:e1:11:1b:9f:54:84:2d:6b:ce:5b:1e:05:27:
                    00:f7:72:a5:eb:2a:13:a3:e6:4d:79:c9:5a:69:ea:
                    a2:2c:8e:f9:f3:41:b6:bc:9a:41:ec:2a:3a:18:7e:
                    cb:db:29:58:cc:ad:30:92:51:e6:56:07:cc:02:e0:
                    66:03:9d:80:59:5f:1e:8f:62:ed:56:eb:89:bd:1b:
                    91:15:a8:4d:40:57:0f:af:69:0a:ec:62:8e:13:e9:
                    84:3f:26:25:05:ba:7c:3a:86:12:86:78:ce:ff:14:
                    d6:21:6e:03:34:ab:00:58:a1:48:60:47:c8:e0:3d:
                    dd:1e:15:b9:7f:2a:09:70:f4:9f:72:41:5c:46:b7:
                    70:a9:94:d3:bf:81:7d:5a:53:24:ce:7a:93:29:1e:
                    af:06:6c:ef:7b:4f:e7:ed:f1:f3:05:31:55:5c:28:
                    bc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:72:79:E1:66:9A:4C:13:E1:BF:1D:25:11:A9:1E:03:40:6F:A0:E2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.16.0/22
                  131.0.76.0/22
                  168.181.68.0/22
                  170.254.124.0/22
                  177.125.220.0/22
                  177.131.112.0/20
                  190.89.104.0/22
                  200.53.16.0/20
                IPv6:
                  2804:8c0::/32
                  2804:1a64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14457
                  262391

    Signature Algorithm: sha256WithRSAEncryption
         7e:ea:a3:ff:23:2f:92:84:c5:aa:7d:7f:99:76:2e:de:40:35:
         06:39:00:ff:0c:9c:9d:f6:f9:5e:42:b0:5a:55:eb:76:0a:8a:
         1d:52:e5:69:68:bd:41:0e:af:0b:e4:0a:f9:e9:9b:08:27:92:
         92:69:a9:90:ec:37:6c:25:63:49:3f:be:41:97:44:03:5a:27:
         64:6a:de:e4:2e:c5:bd:38:34:9b:69:f0:d9:20:c8:90:3c:8c:
         b5:94:c8:ad:5e:1b:2f:56:69:7a:34:fa:03:69:c6:7e:58:51:
         29:0b:3c:47:55:36:18:34:c0:66:8a:01:01:e1:4a:c2:32:7f:
         ee:54:f2:89:c0:14:12:0a:80:f9:93:05:c0:8f:1b:e2:b5:04:
         9f:b9:68:0d:2e:38:32:97:6c:84:c6:d0:79:0c:d1:49:cc:db:
         1f:8c:4b:4d:c0:9a:f4:6d:e6:c9:d9:a4:da:84:99:37:91:92:
         27:6f:b9:1a:bb:f1:b4:ad:82:b8:44:61:63:6f:58:8e:41:8e:
         64:02:74:1f:c1:37:f3:ec:86:1d:da:8d:91:0c:27:9b:7a:5d:
         29:de:ed:bb:57:a7:30:ed:61:d4:b0:bc:6a:66:a1:c7:9a:e0:
         25:aa:ad:a3:9b:49:ee:c2:49:58:70:30:3b:da:c5:7a:ad:a5:
         53:f2:09:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:16 2025 by rpki-client