Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D10EF815EAD486C0A38260587180EFB1D6A0DE5B.cer
File:                     D10EF815EAD486C0A38260587180EFB1D6A0DE5B.cer (raw, json)
Hash identifier:          ExCbEqtOXPU3k1r6bysXvywf+Xi2/PgkNQiyeZnTKDc=
Subject key identifier:   D1:0E:F8:15:EA:D4:86:C0:A3:82:60:58:71:80:EF:B1:D6:A0:DE:5B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       422931B68CAFF7AF2A32F17C79FA64B6221144CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/D10EF815EAD486C0A38260587180EFB1D6A0DE5B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Mar 2025 16:33:25 +0000
Certificate not after:    Mon 09 Mar 2026 16:38:25 +0000
Subordinate resources:    AS: 268929
                          IP: 45.176.40.0/22
                          IP: 2804:5cc4::/32
Validation:               Failed, certificate revoked on Mon 10 Mar 2025 16:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:29:31:b6:8c:af:f7:af:2a:32:f1:7c:79:fa:64:b6:22:11:44:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 10 16:33:25 2025 GMT
            Not After : Mar  9 16:38:25 2026 GMT
        Subject: CN=D10EF815EAD486C0A38260587180EFB1D6A0DE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:90:44:3b:9f:ce:ed:8c:b8:61:b5:90:6d:40:
                    c6:b8:a7:7b:bc:e8:74:d7:3d:a1:58:08:ac:33:da:
                    0b:37:94:ae:ec:8f:e7:0e:6b:f5:8e:d8:e7:f9:17:
                    a4:85:8f:bd:d8:5a:60:51:5f:af:76:28:5f:cb:55:
                    36:2a:17:28:81:c1:69:44:e4:be:66:f9:41:48:1c:
                    d2:37:32:80:23:3a:37:21:53:44:47:58:83:9d:f3:
                    bd:ca:fa:e0:ed:0f:2c:32:1a:cc:dd:c7:89:5b:c7:
                    2d:01:dc:7e:46:7f:d9:d6:5d:8a:e5:14:3e:64:4a:
                    c8:15:c8:7a:f1:bc:78:e3:b4:ec:1a:59:5a:b3:31:
                    87:ae:4c:8d:11:ef:b5:16:2a:ba:20:2a:97:e4:f8:
                    79:72:72:79:99:73:08:6d:bc:5b:af:9e:cf:c2:1e:
                    c5:d6:18:c4:86:b7:b9:bc:fc:fc:b8:7d:6d:ae:ba:
                    74:c7:90:0e:52:7a:ac:59:10:5d:93:ad:51:c6:05:
                    f6:0b:48:22:e0:1c:56:5f:88:62:1a:e8:a6:6b:60:
                    3c:a5:81:ec:15:a4:37:d5:c4:97:88:be:6a:e6:82:
                    4d:48:32:66:ef:1f:5c:cc:24:d1:5e:03:50:47:c8:
                    00:56:eb:ee:1b:d9:1b:36:19:96:e2:97:d1:f5:e3:
                    78:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:0E:F8:15:EA:D4:86:C0:A3:82:60:58:71:80:EF:B1:D6:A0:DE:5B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/D10EF815EAD486C0A38260587180EFB1D6A0DE5B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.40.0/22
                IPv6:
                  2804:5cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268929

    Signature Algorithm: sha256WithRSAEncryption
         23:fb:fa:25:cd:5a:dd:55:d1:d5:d5:3d:43:a8:81:33:d7:50:
         f9:84:f5:24:f0:18:7b:32:7a:fb:56:ba:91:09:42:2b:ed:f9:
         4a:25:39:01:f6:b0:2e:02:17:51:9a:5b:61:59:41:ec:49:fa:
         bb:ee:42:05:a5:aa:49:f7:af:2d:6d:8e:9a:46:b5:9f:bd:e0:
         35:d4:ad:ac:2c:b2:01:a9:ac:48:7c:fc:e8:ed:4b:20:38:77:
         11:aa:9c:a1:e0:99:50:4a:12:43:e7:9a:7c:0c:87:d5:b0:5d:
         ff:df:ba:95:67:bf:c1:6c:24:22:ed:3d:16:7a:7c:e0:fb:95:
         cc:47:56:a0:69:0f:ea:6b:e7:57:3e:36:7e:36:21:8a:a4:e8:
         0e:57:46:7e:c5:42:11:0f:f1:37:fb:ae:09:ed:fe:8d:8c:0f:
         96:9e:5f:78:03:18:04:c7:b1:de:df:0c:cb:b9:cb:03:5d:fd:
         3b:67:c3:36:2d:8e:2e:35:e6:e5:8c:a8:dd:fb:b6:c6:8e:b7:
         65:76:18:14:b9:42:d7:99:ae:f1:00:e3:5b:66:f1:1b:cb:b4:
         ce:36:b2:74:9f:2a:af:5b:88:d9:e5:b1:29:50:31:da:2b:5d:
         2e:4a:2b:dd:3e:47:c4:3a:e2:17:e7:fc:ce:8c:72:04:99:93:
         00:0e:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:51:19 2025 by rpki-client