Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
File:                     0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer (raw, json)
Hash identifier:          1EVHrrMh85XO7pe6SRWke2GGvOhMenR9J5bwKdsbCso=
Subject key identifier:   0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D6C35B61E8C67524ED87B03271F59B6103EFF7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Jun 2025 14:26:59 +0000
Certificate not after:    Thu 18 Jun 2026 14:31:59 +0000
Subordinate resources:    AS: 267942
                          IP: 45.166.4.0/22
                          IP: 2804:5590::/32
Validation:               Failed, certificate revoked on Tue 24 Jun 2025 14:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6c:35:b6:1e:8c:67:52:4e:d8:7b:03:27:1f:59:b6:10:3e:ff:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 19 14:26:59 2025 GMT
            Not After : Jun 18 14:31:59 2026 GMT
        Subject: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:47:14:be:72:66:93:a3:5f:48:09:3a:1b:
                    0c:a6:9e:3d:07:65:bf:57:05:7c:6e:ad:9e:95:6f:
                    f8:bd:e1:0d:e4:3c:e5:46:76:b1:a4:27:3b:45:84:
                    e8:67:fc:03:57:4b:12:33:9a:44:16:28:64:06:9c:
                    28:32:ab:e9:30:62:23:86:1d:f7:45:42:e7:2f:9e:
                    55:ce:a7:19:bc:25:f9:a2:44:67:97:72:f2:87:42:
                    f4:53:2d:58:49:a1:00:b1:84:64:e1:84:b0:5b:95:
                    80:a2:cd:4a:64:24:e8:a3:51:11:2e:c7:75:30:e3:
                    85:4f:3e:90:0e:8b:0b:15:61:9d:10:4c:da:a8:59:
                    c8:5c:7f:68:2f:d7:ec:88:4e:91:40:11:41:f0:ff:
                    dc:f0:73:db:2d:17:2c:18:91:f3:7c:f3:45:c0:03:
                    c2:31:93:a7:5b:8d:5c:cc:6b:c2:ab:74:1f:f4:04:
                    a0:55:99:45:ae:64:31:7f:d4:a4:7e:c2:b3:2a:c1:
                    5d:bc:3d:5d:0a:d6:fc:55:dc:23:db:76:e8:cf:f5:
                    48:9e:8e:0b:42:f2:26:c9:ad:23:19:7d:83:a3:c5:
                    25:6c:30:e0:cf:65:41:4f:93:e2:a6:87:9e:c0:0f:
                    65:43:e7:c1:01:38:ef:95:17:31:5c:21:ae:02:80:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.4.0/22
                IPv6:
                  2804:5590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267942

    Signature Algorithm: sha256WithRSAEncryption
         b3:5c:13:00:90:7a:8e:d1:32:a9:ef:0c:cc:1c:48:48:6c:76:
         93:2d:32:ad:75:39:51:5a:c2:73:03:26:88:04:47:ce:c5:87:
         6b:60:79:72:75:e8:37:e1:97:4d:85:58:5d:55:c1:12:3c:43:
         30:b6:24:ac:8d:cc:09:34:cd:ab:3e:63:0b:5c:63:c1:a0:9f:
         be:7e:8b:3c:c4:83:94:e9:66:7a:78:92:23:a1:7d:e0:48:f1:
         b4:d9:ab:b8:bc:d5:de:d0:8e:4e:48:11:f0:1f:77:e2:e2:df:
         6a:e7:11:10:6d:dc:38:0e:40:e9:8f:b8:16:bd:19:a0:f6:48:
         2d:e2:e3:6a:c0:46:a5:3a:76:64:a4:10:e6:20:7b:7b:cc:e0:
         dc:e0:97:3c:7c:87:75:d2:7d:0e:23:49:17:87:97:cc:f5:0a:
         38:9d:d0:13:3f:e9:15:e2:f6:08:03:b6:19:c8:0e:cc:5b:46:
         bb:93:18:3a:b6:22:f8:41:74:28:9f:e0:5c:c3:ef:71:07:8e:
         91:ad:72:10:fe:b1:dc:78:98:33:10:ad:67:a4:ad:b0:d5:9b:
         11:9d:00:3c:0c:00:48:e5:f8:7b:79:72:db:ac:84:ec:38:20:
         e1:47:ef:4d:94:fa:fd:3c:99:58:75:97:03:50:05:4b:fc:79:
         ab:26:47:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 10:56:45 2025 by rpki-client