Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7145BD08D5DDCFE54A851B5CC664F845FDB14CB6.cer
File:                     7145BD08D5DDCFE54A851B5CC664F845FDB14CB6.cer (raw, json)
Hash identifier:          QvAc/Gb3yPrjk1F6iII7Xac9bpU8uw8pLXzBqnbPRt4=
Subject key identifier:   71:45:BD:08:D5:DD:CF:E5:4A:85:1B:5C:C6:64:F8:45:FD:B1:4C:B6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       408F42CDE4E251BFCC3BA9410A74AB62FF80913B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/7145BD08D5DDCFE54A851B5CC664F845FDB14CB6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Apr 2025 19:30:02 +0000
Certificate not after:    Thu 09 Apr 2026 19:35:02 +0000
Subordinate resources:    AS: 264065
                          IP: 143.202.0.0/22
                          IP: 2804:2a38::/32

Validation:               Failed, certificate revoked on Fri 11 Apr 2025 11:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8f:42:cd:e4:e2:51:bf:cc:3b:a9:41:0a:74:ab:62:ff:80:91:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 10 19:30:02 2025 GMT
            Not After : Apr  9 19:35:02 2026 GMT
        Subject: CN=7145BD08D5DDCFE54A851B5CC664F845FDB14CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:5a:7d:cd:f0:58:18:c3:d9:9a:c4:28:12:4b:
                    30:0d:dd:0a:d5:65:1d:fd:fd:a1:18:65:fe:b7:6a:
                    a6:38:0b:1c:88:de:53:2c:0d:78:b6:a2:dc:0d:ac:
                    71:eb:ae:55:71:f3:27:9d:36:b6:2c:c5:02:a2:05:
                    ea:1e:9a:a4:14:25:33:91:f9:57:b6:f2:7f:1e:9e:
                    07:58:99:b5:f8:b8:50:b4:20:bf:c0:28:59:f4:bb:
                    ce:85:c6:ef:af:91:01:fa:61:70:71:79:77:84:b8:
                    8f:14:40:a3:db:3e:cd:55:07:e4:0b:8a:82:29:40:
                    1f:19:05:05:d0:e7:d9:60:ad:4c:8c:c9:1d:c1:e4:
                    0f:b4:6a:30:ac:91:aa:4f:03:67:ae:8f:9d:cc:ea:
                    61:1b:7b:b0:60:eb:5b:dd:17:e3:89:74:94:de:ed:
                    85:30:14:49:a9:98:8d:83:c9:c9:70:79:a5:ed:a1:
                    3a:39:81:fd:47:fa:c5:be:64:07:eb:97:bb:bd:37:
                    d9:7e:cb:8f:7c:41:62:88:02:3c:d9:4d:d5:85:f2:
                    5b:86:b4:49:6a:b1:b3:df:31:e0:62:fe:21:4a:c2:
                    a8:ee:28:ef:6c:02:f8:f3:f9:9b:4b:bc:24:c8:c5:
                    74:7f:ea:d4:4f:2a:bd:f8:7f:65:1a:b5:fe:34:fb:
                    2d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:45:BD:08:D5:DD:CF:E5:4A:85:1B:5C:C6:64:F8:45:FD:B1:4C:B6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/7145BD08D5DDCFE54A851B5CC664F845FDB14CB6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.0.0/22
                IPv6:
                  2804:2a38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264065

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:1c:83:b0:05:28:ef:47:7f:77:ed:b6:41:87:c8:57:13:
         36:5f:6e:77:04:47:37:83:fe:da:ad:c5:0d:c2:e0:37:4a:90:
         24:22:6b:b2:fd:2a:f4:1c:99:64:9d:58:6b:3d:74:1d:b4:97:
         9a:a6:de:50:6a:fc:7e:50:3b:d0:09:b4:3d:7b:62:30:c9:19:
         e0:39:fd:90:53:e4:e6:79:75:18:b8:b1:04:f5:0c:bd:b2:cc:
         53:ae:b4:2c:22:72:e4:19:34:ef:65:27:53:a8:d1:75:a5:6b:
         4a:80:99:4f:99:61:5f:24:03:6c:eb:14:3b:49:02:1c:29:3e:
         c8:86:c1:36:8b:43:ee:a7:0c:62:98:d5:d8:9b:68:be:d7:80:
         aa:57:fb:e1:65:11:5b:12:b0:5f:a0:ce:ce:7a:37:62:59:d3:
         d4:49:a6:b4:54:cf:3f:4c:56:41:6c:27:8c:98:04:31:78:ca:
         02:91:f0:e1:c3:ce:56:bd:e2:3b:6f:c1:32:b6:b2:aa:21:c7:
         73:91:fb:d2:34:f6:60:d3:8b:1a:b4:4a:a3:db:02:45:15:cb:
         6e:ee:8d:e5:3f:60:75:36:59:f9:a9:d9:d9:14:cd:15:93:f9:
         38:9f:86:42:77:84:90:07:c7:ff:5a:20:be:c3:86:28:c6:c8:
         d2:e6:f2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:51:12 2025 by rpki-client on console.sobornost.net