Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/43DCC657FEB7D4DEBBD5465808D22DB6E74B004D.cer
File:                     43DCC657FEB7D4DEBBD5465808D22DB6E74B004D.cer (raw, json)
Hash identifier:          AeT6kAvXEq8jkA6kY04wfs6C3/OI3MXH9qPZmksG02Q=
Subject key identifier:   43:DC:C6:57:FE:B7:D4:DE:BB:D5:46:58:08:D2:2D:B6:E7:4B:00:4D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       320A792824483D0AD05F3852620D236F58A85175
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/43DCC657FEB7D4DEBBD5465808D22DB6E74B004D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Feb 2025 02:55:05 +0000
Certificate not after:    Wed 11 Feb 2026 03:00:05 +0000
Subordinate resources:    AS: 273346
                          IP: 2804:8d44::/32
Validation:               Failed, certificate revoked on Wed 12 Feb 2025 19:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0a:79:28:24:48:3d:0a:d0:5f:38:52:62:0d:23:6f:58:a8:51:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 12 02:55:05 2025 GMT
            Not After : Feb 11 03:00:05 2026 GMT
        Subject: CN=43DCC657FEB7D4DEBBD5465808D22DB6E74B004D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:02:f0:29:99:2b:bf:66:d5:bb:2c:e0:6a:29:
                    2e:61:7d:97:f3:41:1d:b4:a2:14:e1:42:d8:a9:71:
                    3c:a1:c0:64:78:3b:ca:5f:ec:2c:45:66:d9:ea:74:
                    e7:57:3f:0e:d5:b4:93:d5:76:c2:a2:e1:74:ad:a8:
                    85:5c:ab:9e:06:60:11:6c:02:ee:b3:7d:93:5d:65:
                    59:92:f6:d9:b2:fd:f7:d9:c6:29:39:be:1a:b0:fe:
                    25:6b:30:f6:7a:a7:4b:c4:34:81:5b:3b:3d:76:e7:
                    6f:d6:57:ee:b8:3f:dd:20:3d:80:87:f6:de:bb:1c:
                    6c:11:c8:31:bd:81:0e:bd:3e:bf:2a:2f:96:af:61:
                    71:43:92:27:a5:be:24:c9:a7:fc:08:94:f0:0c:d3:
                    59:17:d1:55:c4:96:ad:88:95:62:4c:c4:e5:f6:9a:
                    66:ba:ad:7d:03:a9:6b:ca:a4:ac:d4:8c:6f:3f:cf:
                    e6:9f:89:81:11:0f:1c:29:a7:e8:8c:da:ce:25:c8:
                    d7:01:fb:82:d4:e8:04:5d:88:e8:2e:19:de:49:0b:
                    8e:eb:1c:9a:1e:5f:c7:75:db:47:97:92:a7:3d:92:
                    74:2d:64:00:b7:9a:41:33:16:25:3c:79:fd:e6:0d:
                    00:13:e1:9d:2c:86:78:d4:53:7d:5b:ff:98:b3:ef:
                    8a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:DC:C6:57:FE:B7:D4:DE:BB:D5:46:58:08:D2:2D:B6:E7:4B:00:4D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/43DCC657FEB7D4DEBBD5465808D22DB6E74B004D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273346

    Signature Algorithm: sha256WithRSAEncryption
         6a:7d:ef:bd:61:79:31:7b:0d:20:48:d8:1a:22:02:fb:20:45:
         b9:93:7e:e8:e2:88:f1:fa:e8:f2:b6:ee:38:6b:24:b8:ec:31:
         61:63:3c:22:3f:75:a0:3f:76:52:c0:b2:17:48:3b:f7:0f:ad:
         28:c4:5a:e6:55:37:16:47:bc:a1:6d:53:ca:d3:db:00:8b:f8:
         25:e6:b2:a4:d3:74:ad:a0:57:4f:4e:5e:c1:c3:76:82:42:66:
         8b:cd:ba:08:18:fb:a2:90:c7:5b:59:b5:75:ba:60:6a:e6:d5:
         e6:b9:0a:ff:0c:38:a5:ae:10:df:79:bd:01:3b:8f:65:44:0c:
         38:95:50:f7:49:44:7b:b4:f5:15:d3:b7:9e:34:75:a0:44:f4:
         a4:75:3a:ee:5a:7d:48:70:0d:ef:40:1a:b9:3d:75:ad:69:45:
         b9:ec:6d:27:4c:57:14:4b:c9:72:4e:8b:cd:68:96:e0:1e:c9:
         8f:fd:b6:51:c9:d3:e7:a8:df:15:56:93:1f:d6:3f:34:56:c6:
         8e:d1:06:ba:0b:28:25:8f:b3:28:09:48:b4:04:b0:c0:df:e0:
         9d:bf:48:0f:d8:e6:72:75:ed:a1:7a:b5:fd:e8:23:01:77:dc:
         79:df:75:7c:f6:ae:5b:ef:27:0b:4a:c1:8d:a9:82:44:b1:a8:
         69:51:22:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:43:52 2025 by rpki-client