Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7705FD89844D77874F02C2D04DFCD895AFD812C2.cer
File:                     7705FD89844D77874F02C2D04DFCD895AFD812C2.cer (raw, json)
Hash identifier:          pFIQOxQNgmb24DqPLkMUyC19YbaOhvXavsY9xbIszwQ=
Subject key identifier:   77:05:FD:89:84:4D:77:87:4F:02:C2:D0:4D:FC:D8:95:AF:D8:12:C2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       046AE17B7E44DA78E76D0652472A766635F346EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/2/7705FD89844D77874F02C2D04DFCD895AFD812C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Apr 2025 11:46:17 +0000
Certificate not after:    Thu 02 Apr 2026 11:51:17 +0000
Subordinate resources:    AS: 28309
                          IP: 168.228.96.0/22
                          IP: 179.189.0.0/20
                          IP: 187.44.64.0/20
                          IP: 189.38.32.0/20
                          IP: 2804:16c::/32
Validation:               Failed, certificate revoked on Thu 03 Apr 2025 12:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6a:e1:7b:7e:44:da:78:e7:6d:06:52:47:2a:76:66:35:f3:46:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 11:46:17 2025 GMT
            Not After : Apr  2 11:51:17 2026 GMT
        Subject: CN=7705FD89844D77874F02C2D04DFCD895AFD812C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:6e:be:84:b5:d7:2c:f6:1c:47:9d:00:79:
                    72:46:2a:8e:cc:39:c2:79:8b:64:ad:1f:dd:9f:43:
                    36:f6:6c:a4:ba:39:5d:50:c5:81:0b:e3:c1:04:ab:
                    89:c2:8b:a9:24:36:28:c5:80:92:d2:b9:9c:fe:8f:
                    0c:26:88:1f:e2:a2:27:26:7b:dd:aa:c6:62:ea:6f:
                    40:b8:64:d4:a7:8f:ec:61:d5:c4:e6:2c:5e:79:5e:
                    26:20:e2:86:89:d3:35:73:da:ea:28:e4:7e:44:59:
                    c7:46:1f:bb:d4:87:5c:35:0a:6d:c5:35:23:f5:60:
                    77:fd:52:57:41:e7:9a:7f:7d:ad:5a:bd:fa:91:74:
                    bd:cb:a2:f3:26:8a:65:f1:da:4c:21:ba:9c:46:16:
                    b0:6c:76:37:ec:b3:88:94:6b:99:13:0c:e4:33:7c:
                    ec:84:9d:b3:1c:ca:41:e7:c1:dc:be:87:93:b5:72:
                    99:a8:b1:0a:da:31:82:10:83:91:e0:5b:b3:a8:13:
                    8b:55:50:c4:c8:e8:59:b6:a4:ba:6d:6f:e4:d4:d0:
                    1f:b8:4e:00:46:08:77:49:28:33:36:c2:63:67:3e:
                    3c:45:1e:e8:14:11:28:71:46:55:78:4f:1d:f9:59:
                    01:81:8f:a6:15:7c:10:d3:ed:9a:23:39:3d:92:d3:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:05:FD:89:84:4D:77:87:4F:02:C2:D0:4D:FC:D8:95:AF:D8:12:C2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/2/7705FD89844D77874F02C2D04DFCD895AFD812C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.96.0/22
                  179.189.0.0/20
                  187.44.64.0/20
                  189.38.32.0/20
                IPv6:
                  2804:16c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28309

    Signature Algorithm: sha256WithRSAEncryption
         7e:b6:36:fc:e8:5a:7d:25:69:65:bc:2f:be:8b:e8:c7:5c:3b:
         f8:c1:1b:bc:65:c4:5d:5f:0a:a2:75:22:9d:e3:a4:eb:d8:f5:
         b3:df:86:7e:c5:4e:03:dc:e5:ff:a7:76:67:64:28:03:54:2f:
         56:de:77:bf:41:50:da:38:c0:45:3c:64:aa:3c:73:51:2c:06:
         2a:a0:a6:a9:6e:64:81:93:49:e4:b2:70:44:04:a8:ed:d9:72:
         7d:51:76:72:4a:17:8d:35:77:60:cb:c1:cc:ed:ca:0b:5e:b6:
         80:c7:50:6f:87:21:34:a6:31:7a:c1:09:5c:f0:7e:5c:98:67:
         3e:91:01:a2:9d:cf:32:f8:60:ca:11:71:33:cf:af:1d:9b:17:
         3b:d3:ef:c9:94:6d:36:49:35:b9:44:6d:d7:ac:70:81:09:26:
         6b:31:8c:fa:0f:df:18:99:cf:b3:94:3e:8e:53:91:86:df:9a:
         cf:6f:f7:dd:a2:fb:4d:6d:aa:f6:d1:fb:d0:99:f7:89:01:16:
         25:ea:9d:a1:3c:d3:e9:52:32:1c:d9:d8:bd:e7:c2:a5:e0:5e:
         24:46:63:c4:47:da:46:06:86:70:03:d2:78:14:06:c7:f2:f6:
         ed:c4:f3:3d:59:70:53:56:05:1e:03:09:7c:e7:33:b3:ff:4a:
         70:98:ca:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:14 2025 by rpki-client