Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D42A166806CE2D015B2B090F188263BB4BB4BC43.cer
File:                     D42A166806CE2D015B2B090F188263BB4BB4BC43.cer (raw, json)
Hash identifier:          1nBAUMVjcxZgEubHQh1tMPJw6i4pP0y5g/EmvmE4oN4=
Subject key identifier:   D4:2A:16:68:06:CE:2D:01:5B:2B:09:0F:18:82:63:BB:4B:B4:BC:43
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       131E9FAD927CF06C114B3CDFCAB9B802B423F1C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/D42A166806CE2D015B2B090F188263BB4BB4BC43.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Apr 2025 12:34:05 +0000
Certificate not after:    Thu 02 Apr 2026 12:39:05 +0000
Subordinate resources:    AS: 268837
                          IP: 45.174.32.0/22
                          IP: 2804:5b5c::/32
Validation:               Failed, certificate revoked on Sat 12 Apr 2025 07:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1e:9f:ad:92:7c:f0:6c:11:4b:3c:df:ca:b9:b8:02:b4:23:f1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 12:34:05 2025 GMT
            Not After : Apr  2 12:39:05 2026 GMT
        Subject: CN=D42A166806CE2D015B2B090F188263BB4BB4BC43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:6a:34:6e:42:09:23:33:2c:13:1d:39:5f:
                    62:1e:ae:e4:39:c8:de:e9:18:4b:f4:45:8b:5c:29:
                    80:51:c9:0f:b1:c3:19:56:05:a9:0c:d9:d6:50:c1:
                    bb:4b:26:c1:b9:83:f0:10:16:18:36:72:13:cd:4d:
                    b1:9f:7c:53:85:5c:95:cb:43:97:2e:ef:b8:4a:ea:
                    17:16:15:a4:0b:d6:d7:b5:82:17:21:80:00:63:e4:
                    a8:9d:8f:42:e5:cd:62:7f:3d:2d:a2:d1:92:5b:23:
                    aa:09:cd:07:14:5d:a0:69:91:dc:78:73:18:45:69:
                    6e:0c:38:80:a5:c4:46:70:91:ef:23:6c:f1:78:d5:
                    45:84:ec:c6:16:f2:15:a7:87:c4:45:b4:2c:83:23:
                    f3:85:97:fb:5c:50:4c:c6:59:5f:69:45:93:fb:b2:
                    d6:f7:24:e0:26:f1:d4:b5:5d:bb:da:21:91:0c:46:
                    13:3a:68:15:ef:c5:b3:96:49:6a:a7:ce:2e:cd:6b:
                    e7:60:e0:b3:48:0a:70:26:b9:43:21:fa:73:1e:b2:
                    bb:bd:cd:8f:15:06:de:cb:a0:11:d4:39:1e:f1:d4:
                    70:1c:33:18:a9:b8:1c:c0:d2:bf:18:f1:5e:65:4a:
                    7b:44:78:21:76:61:27:f2:3d:cc:55:f4:69:62:d1:
                    50:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:2A:16:68:06:CE:2D:01:5B:2B:09:0F:18:82:63:BB:4B:B4:BC:43
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/D42A166806CE2D015B2B090F188263BB4BB4BC43.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.32.0/22
                IPv6:
                  2804:5b5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268837

    Signature Algorithm: sha256WithRSAEncryption
         da:78:e2:c5:21:d4:77:a0:4e:3b:33:49:10:69:f3:46:77:04:
         bd:dd:49:8d:76:f2:78:64:02:45:fd:5e:e7:b6:73:4a:00:9f:
         03:fa:71:3f:d9:f4:46:58:8f:8c:31:d6:e2:a6:54:c5:08:ee:
         fd:93:2f:b8:a4:c9:c3:82:62:3a:31:7e:0a:5a:8b:1e:de:ec:
         62:2a:90:a9:fe:c5:4d:00:a5:ff:43:ac:88:02:e4:34:53:57:
         b3:38:7c:e3:d2:48:be:64:1f:14:44:95:6d:9c:a2:41:c4:4d:
         52:32:c9:28:d9:3b:ae:0d:05:ad:5c:2c:f2:a6:cf:00:39:1b:
         94:31:f7:d2:e3:63:ea:86:bd:d9:09:f7:5c:14:33:c6:50:e0:
         f7:db:2d:bf:75:ce:6d:ab:67:40:d5:cf:48:e0:30:31:85:de:
         18:d5:fa:e4:5a:ff:34:49:7a:32:ce:1f:79:9f:4a:0f:1f:1e:
         6f:78:88:62:65:6a:81:35:14:fc:ff:51:38:39:3c:54:62:9d:
         29:15:4e:3b:a8:0d:99:8b:16:8f:e9:e3:c8:0f:0d:10:74:de:
         1a:54:81:fa:aa:20:7f:1e:87:2b:7f:2a:70:a7:e2:90:87:bd:
         bf:a6:29:a8:55:45:06:12:ac:fa:5f:c7:04:d5:92:0c:7f:ca:
         22:97:0b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:18:24 2025 by rpki-client