Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA36D3D4BA1F362E7EB6F08E51BF32534223C60B.cer
File:                     CA36D3D4BA1F362E7EB6F08E51BF32534223C60B.cer (raw, json)
Hash identifier:          kiasQZWOmLSlseIWKgqYfj8visaC4AYTplDTUtaGPvQ=
Subject key identifier:   CA:36:D3:D4:BA:1F:36:2E:7E:B6:F0:8E:51:BF:32:53:42:23:C6:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       470AB55D96598BD6C5F1BA5568570FB6D4D65A29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/CA36D3D4BA1F362E7EB6F08E51BF32534223C60B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Apr 2025 14:29:52 +0000
Certificate not after:    Tue 07 Apr 2026 14:34:52 +0000
Subordinate resources:    AS: 265131
                          IP: 143.208.220.0/22
                          IP: 2804:2b04::/32

Validation:               Failed, certificate revoked on Tue 15 Apr 2025 12:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0a:b5:5d:96:59:8b:d6:c5:f1:ba:55:68:57:0f:b6:d4:d6:5a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  8 14:29:52 2025 GMT
            Not After : Apr  7 14:34:52 2026 GMT
        Subject: CN=CA36D3D4BA1F362E7EB6F08E51BF32534223C60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:e6:8f:93:2f:76:01:25:26:c5:04:63:22:
                    ff:57:c6:91:59:99:8a:78:a7:50:54:d5:e4:5a:6a:
                    cb:80:16:2e:ef:72:a8:14:a5:98:2b:68:14:ee:7d:
                    71:cc:07:16:37:6a:e0:05:c9:e8:08:1f:c8:36:27:
                    c3:d8:85:f4:39:66:c7:a5:52:5e:a4:21:1a:e6:e0:
                    22:ab:0f:22:75:f8:0a:79:17:b0:54:cd:e7:34:c7:
                    6f:0d:91:fd:27:ae:6e:ea:96:a1:4a:fb:82:35:98:
                    b9:ae:bc:be:f5:c9:56:88:31:64:a4:54:9c:33:f1:
                    19:c9:d2:fa:30:97:3f:ca:f3:a1:c1:46:f2:27:21:
                    b4:56:07:a0:6b:fe:93:59:28:3a:c0:ad:4a:45:90:
                    d1:81:59:78:65:96:5d:33:09:f9:93:cb:53:a0:63:
                    fd:49:2c:5a:5f:a4:c6:e3:0c:d3:ca:c6:c6:34:ed:
                    ec:2f:ad:02:3d:65:fa:e5:92:e2:c4:19:db:d6:c8:
                    93:a2:f5:5a:a3:2e:26:27:a5:41:de:8b:5f:18:f6:
                    aa:11:f0:62:1a:75:3e:6f:b7:74:04:36:4a:f8:00:
                    76:af:15:95:da:a0:4d:ad:ce:1b:3c:85:1b:6c:e4:
                    d2:12:4d:35:1a:3b:82:0a:44:b3:b3:fd:17:33:5e:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:36:D3:D4:BA:1F:36:2E:7E:B6:F0:8E:51:BF:32:53:42:23:C6:0B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/CA36D3D4BA1F362E7EB6F08E51BF32534223C60B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.220.0/22
                IPv6:
                  2804:2b04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265131

    Signature Algorithm: sha256WithRSAEncryption
         b2:42:27:91:37:67:71:be:93:0a:c0:e4:36:99:ec:fa:c8:d3:
         53:3a:78:c9:19:cb:6e:eb:5e:1a:a0:72:0c:2d:6c:47:9a:e7:
         9d:b9:4b:c5:05:18:05:b1:2f:41:3b:63:56:95:c4:5d:8b:62:
         03:a5:f7:45:15:69:c3:a3:97:15:aa:3a:31:81:ba:c0:d6:95:
         6b:58:e8:7b:ac:26:a4:16:04:af:9e:9d:20:e3:36:b4:11:18:
         91:3b:71:68:0d:47:cb:50:05:7b:7b:93:c5:ea:b2:5b:4b:16:
         f1:8c:c3:9f:d1:17:73:03:db:65:3a:ed:be:c9:f0:88:e1:80:
         e9:c7:37:5f:7b:2d:27:bd:e9:4e:e2:20:65:48:52:d4:f2:7d:
         f3:5b:9f:75:99:c4:35:67:bb:9d:04:d8:28:c1:ec:43:8b:3e:
         c5:54:10:e5:d8:28:55:b5:91:41:f8:52:d1:48:78:68:93:2a:
         60:80:27:e9:03:73:85:42:84:7a:28:d2:14:f1:00:ae:2e:e5:
         32:13:98:4e:40:d2:ae:59:05:e6:99:1f:0a:52:f1:9a:5c:85:
         7c:82:bf:bb:c7:ba:d7:66:eb:c7:6f:d8:a7:a0:66:01:b2:26:
         e3:e8:e6:64:3c:ee:e3:81:fb:c6:bd:09:73:18:3b:80:75:b9:
         3b:60:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net