Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/331D6DB2D537E12874EED8E26C9C4CE7CA039D88.cer
File:                     331D6DB2D537E12874EED8E26C9C4CE7CA039D88.cer (raw, json)
Hash identifier:          KOJzsEGvb9gdF7b0o1B9kUPhINtZHIJ9ht7YY9tYCEU=
Subject key identifier:   33:1D:6D:B2:D5:37:E1:28:74:EE:D8:E2:6C:9C:4C:E7:CA:03:9D:88
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B758610E106028B9932D0AF16E11FDEA5C10AD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/331D6DB2D537E12874EED8E26C9C4CE7CA039D88.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Dec 2024 17:31:51 +0000
Certificate not after:    Thu 04 Dec 2025 17:36:51 +0000
Subordinate resources:    AS: 269167
                          IP: 45.180.92.0/22
                          IP: 2804:6070::/32
Validation:               Failed, certificate revoked on Fri 06 Dec 2024 13:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:75:86:10:e1:06:02:8b:99:32:d0:af:16:e1:1f:de:a5:c1:0a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  5 17:31:51 2024 GMT
            Not After : Dec  4 17:36:51 2025 GMT
        Subject: CN=331D6DB2D537E12874EED8E26C9C4CE7CA039D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:f6:c5:98:24:eb:6f:08:7d:d9:6d:ff:ff:
                    4e:e7:0a:be:3a:96:ac:dd:50:f4:42:4b:5d:64:b6:
                    b4:da:23:68:ff:c8:6d:21:fd:78:0f:bb:e0:fc:c1:
                    00:c3:57:67:3b:86:9f:b9:2c:25:4e:2f:ab:b7:8b:
                    16:32:c8:b7:72:69:20:9b:82:31:d9:16:9f:5f:dd:
                    d1:f3:e0:1e:97:e8:ed:ab:db:97:9f:28:04:b3:ac:
                    e7:d5:f0:ea:82:eb:2b:62:88:c3:c9:51:3d:b6:8e:
                    44:f7:b5:e4:dd:76:9d:21:8f:ba:cb:c4:d1:5e:5c:
                    82:18:17:ad:de:91:32:0c:4b:13:15:7a:59:f9:9a:
                    16:ca:8c:d9:fd:2c:92:8f:75:50:01:ba:fb:59:82:
                    6a:26:f3:0d:47:50:78:e0:e1:30:08:c5:1e:b0:65:
                    d7:91:98:2e:e7:4a:bb:e9:55:65:06:e0:01:c3:68:
                    09:35:67:69:ea:8a:58:dc:db:4b:c6:6a:f0:16:c0:
                    68:cb:21:2c:28:e7:c8:7c:cb:db:67:63:f1:45:fa:
                    4f:49:48:2d:64:e1:2b:1f:cd:ee:69:21:7b:c5:d9:
                    29:0c:b6:26:6c:37:15:53:29:e8:3f:8b:72:3c:7a:
                    e7:d1:1c:c1:de:a0:8c:7b:fc:44:dd:3f:20:ef:4d:
                    e0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:1D:6D:B2:D5:37:E1:28:74:EE:D8:E2:6C:9C:4C:E7:CA:03:9D:88
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/331D6DB2D537E12874EED8E26C9C4CE7CA039D88.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.92.0/22
                IPv6:
                  2804:6070::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269167

    Signature Algorithm: sha256WithRSAEncryption
         d8:7d:60:0c:d7:77:6a:12:93:22:1f:7f:6a:25:57:1a:cd:bf:
         95:83:d1:0f:c3:15:3a:37:c3:f6:41:a9:43:7b:2a:c3:e5:50:
         50:c2:2f:a4:8e:57:d9:c9:d2:99:c0:52:df:cb:2f:52:98:91:
         9f:25:b0:99:47:ff:2d:01:b6:3c:21:0e:c0:ee:84:7d:90:67:
         6d:f8:6d:3a:94:e4:6e:c7:a5:27:cb:90:30:0c:de:96:04:5f:
         05:c5:de:a9:6d:38:1c:64:55:24:be:86:4d:6a:3c:73:16:90:
         f9:0f:99:44:e5:42:72:e9:4f:0c:b2:34:d2:e8:aa:1c:46:1c:
         b2:4c:35:0c:db:00:3d:e9:c6:31:53:cb:27:9e:79:cc:22:dd:
         88:78:8e:f6:4c:18:3c:d7:4b:c8:29:47:30:d8:0b:e0:76:d9:
         27:e4:a8:0a:69:61:b6:2c:68:b9:89:17:5b:43:4e:75:fc:7d:
         fb:a5:f5:9c:99:91:fa:af:ac:29:b3:8e:63:be:dc:09:4d:b1:
         dc:96:30:81:9d:21:13:f0:02:db:10:03:9b:c7:06:87:72:0b:
         a6:0f:ea:9f:45:43:94:f7:e7:4d:bf:9c:ea:be:64:21:c8:6a:
         b3:2c:cc:a3:f8:4a:8e:9a:9f:66:39:ed:3f:31:80:c3:44:fc:
         0a:72:3d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:21 2025 by rpki-client