Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1234FF6665C6C95261161E86691A9B6A62014491.cer
File:                     1234FF6665C6C95261161E86691A9B6A62014491.cer (raw, json)
Hash identifier:          IWeQ6+RdzNrl86XAm+j3OxO6nHjhmdwAhRo4q/z6hTE=
Subject key identifier:   12:34:FF:66:65:C6:C9:52:61:16:1E:86:69:1A:9B:6A:62:01:44:91
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F5DB4D83F038778355D583CF026C6979B39A579
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/1234FF6665C6C95261161E86691A9B6A62014491.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Feb 2025 18:37:05 +0000
Certificate not after:    Mon 09 Feb 2026 18:42:05 +0000
Subordinate resources:    AS: 271294
                          IP: 201.221.116.0/22
                          IP: 2804:7940::/32
Validation:               Failed, certificate revoked on Fri 14 Mar 2025 11:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5d:b4:d8:3f:03:87:78:35:5d:58:3c:f0:26:c6:97:9b:39:a5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 10 18:37:05 2025 GMT
            Not After : Feb  9 18:42:05 2026 GMT
        Subject: CN=1234FF6665C6C95261161E86691A9B6A62014491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:56:a9:f4:51:d9:51:50:b0:05:4b:0c:91:
                    ea:53:16:eb:62:bc:2d:94:c5:3a:5c:e2:ad:05:6a:
                    27:77:e3:7c:4a:34:c5:6b:5b:d6:3d:ae:5e:fb:d2:
                    1b:33:e7:98:a6:e0:18:76:a7:99:a4:aa:1c:d2:7f:
                    df:dd:be:01:fd:11:94:7a:64:bf:03:f8:ca:c7:f4:
                    71:f3:f3:a2:1d:18:35:6b:54:c0:d0:18:c3:2d:20:
                    fc:86:d9:43:f4:69:7d:62:07:f7:d2:dc:b9:2c:dc:
                    17:2b:63:fa:8e:5d:68:34:25:db:df:cb:bd:dc:ce:
                    49:f0:b7:8c:fb:84:43:f2:90:57:8c:59:bc:d0:b6:
                    03:10:9e:2d:cf:e4:1f:ac:ac:82:7b:d8:a3:99:81:
                    c8:79:b4:4b:f2:c8:02:dc:ba:aa:be:27:40:cf:30:
                    6e:30:7c:9a:96:de:7b:dc:27:84:ab:5f:9a:48:2c:
                    5f:50:f8:3d:fa:04:c4:f9:02:82:e7:b4:c1:52:90:
                    dc:57:bd:0b:cc:9b:23:49:8e:30:b8:f0:a2:e2:3d:
                    cc:6f:05:7f:39:bd:3f:9d:18:ff:c7:a8:c0:47:26:
                    dd:3e:42:14:17:93:ec:f8:4a:be:8e:7c:3d:33:59:
                    f5:6c:70:61:6d:c1:d6:11:89:7e:d0:05:db:ba:c4:
                    ab:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:34:FF:66:65:C6:C9:52:61:16:1E:86:69:1A:9B:6A:62:01:44:91
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/1234FF6665C6C95261161E86691A9B6A62014491.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.116.0/22
                IPv6:
                  2804:7940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271294

    Signature Algorithm: sha256WithRSAEncryption
         c8:f0:c7:0d:71:9c:4e:5a:a4:3a:6f:e4:47:9b:87:9f:be:2e:
         d1:40:ce:48:f8:c2:74:de:1a:ef:32:45:c6:01:60:02:cb:53:
         3f:0b:31:53:4f:d9:b5:09:5e:ad:b7:57:b4:17:bc:00:17:fb:
         7a:1f:9b:35:28:ab:d7:25:b3:79:3b:df:12:3d:3e:af:56:62:
         07:d1:99:8a:4a:e3:e6:09:65:9d:60:a0:d8:55:a5:e8:7d:e4:
         55:17:38:ea:fb:d7:7c:fe:b5:c0:de:46:b6:7f:9c:e6:91:c6:
         d6:51:70:46:ae:0f:d9:e7:da:d9:69:f3:87:ed:a7:df:fc:74:
         76:94:84:6c:b0:d1:94:47:39:07:fb:f3:8f:77:0f:90:51:0f:
         88:7e:04:78:19:b1:41:61:eb:ed:0d:4f:e2:07:fa:34:59:95:
         11:a7:2e:6f:96:53:c5:45:77:8e:7c:a1:b2:d3:08:7f:ce:d9:
         ce:79:10:61:74:d0:ba:7e:d6:cd:98:7c:29:fd:2d:e0:c6:4f:
         7e:e1:bb:2b:e4:6e:b0:5a:70:c1:48:e5:4d:c0:1d:20:3a:b2:
         98:0d:e1:c7:f0:b3:8a:24:ab:2f:78:c0:50:e6:42:86:73:ea:
         87:80:c1:86:d0:ac:95:2f:cf:b0:08:67:ea:fe:05:30:89:66:
         94:09:5b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:58:47 2025 by rpki-client