Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D5955A8F874129F0C236C5E0F4A977609D094F7.cer
File:                     1D5955A8F874129F0C236C5E0F4A977609D094F7.cer (raw, json)
Hash identifier:          aNvGSiDxGNghFwMN4JfzeL7vc+iMe1VrHUMKXgqHpDw=
Subject key identifier:   1D:59:55:A8:F8:74:12:9F:0C:23:6C:5E:0F:4A:97:76:09:D0:94:F7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2AD521A1CDA663704F300298C2464ED97AE7F01F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/1D5955A8F874129F0C236C5E0F4A977609D094F7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Jan 2025 12:26:49 +0000
Certificate not after:    Fri 30 Jan 2026 12:31:49 +0000
Subordinate resources:    AS: 272252
                          IP: 2804:844c::/32
Validation:               Failed, certificate revoked on Wed 05 Mar 2025 09:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d5:21:a1:cd:a6:63:70:4f:30:02:98:c2:46:4e:d9:7a:e7:f0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 31 12:26:49 2025 GMT
            Not After : Jan 30 12:31:49 2026 GMT
        Subject: CN=1D5955A8F874129F0C236C5E0F4A977609D094F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:32:19:bc:a6:33:25:c5:f9:99:90:02:69:a3:
                    d5:c1:24:19:c5:5d:18:a4:d4:fb:a2:ad:cf:92:20:
                    a8:03:d3:bd:38:e7:4c:34:5a:4c:53:ac:04:6a:55:
                    8a:7d:a0:e7:4f:c8:0e:16:51:75:00:28:ac:d0:80:
                    7f:44:ed:58:1f:f5:c1:40:b0:70:4e:a8:bc:a6:4b:
                    fc:92:9a:e8:90:21:8f:22:a0:76:b6:c8:68:93:3a:
                    7a:75:e3:c9:c6:f9:ed:e4:14:e8:6a:9c:e2:4f:50:
                    9b:16:97:00:09:75:d1:20:f2:79:50:da:af:51:7f:
                    69:73:d5:72:e6:f1:28:fc:94:32:86:08:7f:30:6c:
                    3e:1a:20:de:86:ba:fe:a5:69:2f:a6:a7:78:ee:04:
                    3f:73:f9:cc:0b:fe:51:d4:5f:c7:d8:8e:dd:0a:02:
                    bd:6e:6a:8e:12:7d:36:de:d7:91:ec:dd:23:1f:64:
                    ed:7d:fd:2b:95:81:e7:eb:f0:0f:a6:89:91:c9:89:
                    d6:b6:34:77:cf:2d:c7:b9:01:72:22:c5:93:33:95:
                    ec:74:83:1c:d4:31:d3:f0:b2:e4:1b:6e:ef:44:5d:
                    dd:ae:91:fc:d0:18:69:db:4e:5c:15:f8:47:09:4e:
                    93:ea:3c:6b:c9:6a:7e:9a:7c:cd:93:0b:8c:66:2a:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:59:55:A8:F8:74:12:9F:0C:23:6C:5E:0F:4A:97:76:09:D0:94:F7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/1D5955A8F874129F0C236C5E0F4A977609D094F7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:844c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272252

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:f0:94:3f:03:8c:ba:63:8e:f2:45:cc:a8:4b:09:8a:e6:
         5a:9e:02:e1:59:95:97:6e:b4:17:64:2d:ef:78:6e:1f:cc:38:
         ed:8a:b3:be:87:f6:61:d2:26:01:21:1f:a8:92:be:12:ff:2c:
         e2:27:3b:63:bf:af:df:4e:9b:06:2d:c8:ac:88:d8:af:cb:8a:
         48:d4:6b:cc:75:82:51:bf:20:c2:8e:e9:50:10:66:d9:d1:9e:
         88:c4:f1:19:75:d8:b7:7c:06:7f:66:98:c7:44:34:58:65:7d:
         97:4d:82:b6:2e:d4:6b:e2:22:ec:51:50:5d:90:2e:7e:2b:ce:
         00:81:a2:5b:90:71:94:13:03:9b:02:0e:9d:e6:ac:87:0c:7f:
         44:82:ed:e8:a3:73:2d:8d:0c:64:d5:35:28:01:4e:f0:a1:24:
         2a:83:5e:9b:53:92:db:67:c2:0d:ed:68:d2:54:8a:52:fe:6f:
         d2:44:1c:d4:a6:5b:79:63:af:54:6e:11:3d:d3:64:75:07:76:
         2b:79:e9:e4:62:a4:c0:98:d8:f8:4d:12:06:24:41:2b:22:c3:
         b5:27:96:d9:9d:80:53:e8:68:37:da:65:10:d4:f7:d6:63:52:
         32:0f:37:b2:49:17:7d:4d:49:16:a6:26:a2:0a:c5:62:df:8f:
         92:14:25:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:54:47 2025 by rpki-client