Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/140BB09016E491475222C5C1D5E1A65EC41678DC.cer
File:                     140BB09016E491475222C5C1D5E1A65EC41678DC.cer (raw, json)
Hash identifier:          zDZfnB0PjK+q3/OEhuLG+WRCRlhFNkT8r7y8li2UEKo=
Subject key identifier:   14:0B:B0:90:16:E4:91:47:52:22:C5:C1:D5:E1:A6:5E:C4:16:78:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18C6E836AD8BB43ED2098126746AEB0DDDA0F138
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/140BB09016E491475222C5C1D5E1A65EC41678DC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Dec 2024 02:59:55 +0000
Certificate not after:    Mon 22 Dec 2025 03:04:55 +0000
Subordinate resources:    AS: 268216
                          IP: 45.235.248.0/22
                          IP: 2804:4dbc::/32
Validation:               Failed, certificate revoked on Sun 09 Feb 2025 17:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c6:e8:36:ad:8b:b4:3e:d2:09:81:26:74:6a:eb:0d:dd:a0:f1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 23 02:59:55 2024 GMT
            Not After : Dec 22 03:04:55 2025 GMT
        Subject: CN=140BB09016E491475222C5C1D5E1A65EC41678DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:dc:f6:25:3e:23:2f:b8:4d:39:a0:64:2b:
                    23:40:9b:dd:ff:6e:71:8b:6d:39:6d:52:93:47:68:
                    3c:43:20:74:ad:77:0c:e9:0a:95:0d:6a:64:8a:31:
                    5f:79:23:8d:9b:f5:1d:c2:70:59:e4:76:78:28:71:
                    c9:fd:6a:04:55:14:f3:b8:65:dd:82:c3:45:2b:24:
                    6c:9d:32:91:ca:35:8f:30:c0:0e:f6:81:6b:fb:b8:
                    33:2a:5c:3a:c2:54:79:a5:58:ed:94:6e:61:f8:d8:
                    fa:dc:69:80:06:e9:5c:9d:f4:81:dc:d5:c1:10:26:
                    e0:a6:af:a4:76:65:11:34:5e:4a:b5:5b:56:38:af:
                    88:e5:85:79:83:d1:ab:9c:45:ef:eb:83:99:bf:97:
                    55:77:07:c6:fe:b9:d1:f9:7b:69:12:02:42:bc:fb:
                    42:49:42:bc:cf:5c:19:8c:a9:44:22:28:f9:38:ba:
                    7b:3f:0e:1b:79:1b:d0:f6:e4:41:af:a1:ba:d6:89:
                    c4:1a:73:7a:e9:3f:62:52:f8:2d:ba:ac:88:09:95:
                    08:0f:f9:f7:38:a4:8b:42:75:89:7e:93:b9:92:7f:
                    bc:b8:45:34:14:14:43:57:11:2a:a7:5a:66:0d:79:
                    a3:e3:12:a7:cc:95:6f:e4:62:70:4f:73:e6:ec:74:
                    ef:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:0B:B0:90:16:E4:91:47:52:22:C5:C1:D5:E1:A6:5E:C4:16:78:DC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/140BB09016E491475222C5C1D5E1A65EC41678DC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.248.0/22
                IPv6:
                  2804:4dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268216

    Signature Algorithm: sha256WithRSAEncryption
         1d:6e:a4:06:80:b7:2f:d3:15:20:3c:e0:e5:35:fa:62:db:5c:
         61:f0:9c:cb:77:8c:47:07:c6:b4:4c:7c:e2:84:60:51:bb:10:
         84:ae:15:c8:8d:1a:4a:11:5c:40:9d:5b:77:5e:72:a6:6a:95:
         db:61:31:64:b6:89:95:b7:21:60:66:ed:92:46:7d:b0:d0:4d:
         fb:2d:73:a6:bd:ac:c4:91:93:9c:d3:6a:2f:ef:1c:50:8f:f1:
         9d:c7:23:67:30:b7:9d:f1:c3:63:4b:1b:b1:ba:3f:b3:22:cd:
         4b:35:7f:83:f2:fd:f3:bd:bf:c9:4d:fe:d5:f2:e9:ab:31:09:
         27:70:06:25:5a:6b:0c:17:21:96:d3:64:ca:66:2b:68:7f:74:
         73:b1:64:13:a4:f4:69:fa:51:5c:72:b6:93:82:bf:7a:b9:3c:
         a2:21:87:b5:23:35:5d:e8:fb:bb:23:15:41:0d:4e:9b:eb:71:
         6e:3d:f0:63:50:2d:01:36:92:18:a3:83:d2:fd:c8:f0:ea:b1:
         83:6b:fc:20:64:ca:34:70:25:61:94:e3:11:b9:63:8e:fd:55:
         b7:af:89:a6:00:6a:6a:3f:05:a9:f1:a9:77:a1:72:91:3e:b3:
         b2:67:e5:37:62:8c:c1:d0:13:64:82:16:ea:1b:5f:ed:8f:3f:
         a4:c0:5e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:29 2025 by rpki-client