Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.cer
File:                     56F98FD5AAD5AA0A2C1665689B464A1E16C89914.cer (raw, json)
Hash identifier:          jjpuMobK2PyzpkwdSyVlb4usC96ibI4I15xPBWbeCv4=
Subject key identifier:   56:F9:8F:D5:AA:D5:AA:0A:2C:16:65:68:9B:46:4A:1E:16:C8:99:14
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2CC9B3725C963361A146BBCD7E1ECC62A9125DD1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Jan 2025 20:57:59 +0000
Certificate not after:    Tue 20 Jan 2026 21:02:59 +0000
Subordinate resources:    AS: 271712
                          IP: 177.21.148.0/22
                          IP: 2804:7fd4::/32
Validation:               Failed, certificate revoked on Mon 17 Mar 2025 23:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c9:b3:72:5c:96:33:61:a1:46:bb:cd:7e:1e:cc:62:a9:12:5d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 20:57:59 2025 GMT
            Not After : Jan 20 21:02:59 2026 GMT
        Subject: CN=56F98FD5AAD5AA0A2C1665689B464A1E16C89914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:5f:4e:00:81:b8:51:3c:0a:93:94:82:f4:
                    dc:26:2f:f6:73:f3:c1:3e:c6:22:83:e6:82:be:1e:
                    59:c4:17:e2:89:e4:80:ae:d0:82:20:bf:30:95:7f:
                    57:17:ce:a8:f7:27:7b:88:75:5a:ba:13:34:1e:48:
                    24:f4:ac:a7:cb:63:47:0d:46:b7:08:6f:d8:d0:82:
                    da:46:fb:55:d1:0d:d7:89:67:ae:b6:c2:62:8a:6f:
                    40:51:69:9b:12:97:91:7d:40:41:f5:91:de:a2:3d:
                    58:c8:c1:3b:f6:a3:01:0f:8e:09:9b:dc:f0:05:93:
                    31:df:dc:03:61:b6:a6:86:3d:57:27:9e:51:95:12:
                    18:9f:ef:3d:d5:94:37:27:c1:b7:0f:bd:98:20:1d:
                    9c:c2:7f:38:95:c2:26:5e:5d:60:f6:1b:67:92:9a:
                    1c:5a:1d:cd:9e:ab:dd:64:31:58:d4:f3:a0:85:62:
                    76:f9:e5:08:2d:c2:a2:3c:49:c7:92:92:0c:dd:cf:
                    8b:96:31:83:9f:c0:fd:d5:db:88:99:18:98:ff:08:
                    11:87:f5:f4:99:25:df:78:e4:47:f2:0f:d8:b0:f7:
                    72:11:c2:97:ec:76:fa:08:a7:58:06:d9:b3:d6:5c:
                    29:b8:b3:cf:28:28:5a:1a:93:53:a9:a2:09:3e:82:
                    31:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:F9:8F:D5:AA:D5:AA:0A:2C:16:65:68:9B:46:4A:1E:16:C8:99:14
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.148.0/22
                IPv6:
                  2804:7fd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271712

    Signature Algorithm: sha256WithRSAEncryption
         a3:b3:82:32:21:cd:82:b3:7a:4c:b4:c1:e6:ef:3d:55:a3:76:
         8a:0d:f4:4f:a1:5c:80:26:a6:58:cc:93:ec:c0:e4:67:5e:34:
         26:66:72:7e:77:38:78:bc:2a:9d:49:1a:c5:49:7d:47:b5:b2:
         6d:c9:f9:a9:ed:e9:be:57:df:96:4a:c5:53:32:06:a0:75:41:
         e5:65:16:52:79:77:e7:77:ab:e4:2e:cd:c7:6d:32:5f:70:4e:
         8b:02:93:ef:c6:f4:91:97:6e:36:4c:92:50:a3:23:e0:d2:f8:
         76:ca:f5:b6:3f:e0:33:b9:de:1e:eb:94:1b:15:3f:bf:72:53:
         2e:1f:6c:2d:f7:b8:2c:19:e6:ce:de:8e:6d:13:93:ad:18:08:
         54:94:21:8c:e6:33:51:62:48:57:8c:a5:a0:26:c4:07:fa:e0:
         9e:6c:46:fe:5b:01:9c:d5:ce:d5:a0:00:fa:38:ad:c8:cb:4f:
         a2:d1:24:d8:67:a0:78:33:05:d9:58:a9:63:39:87:cd:74:cf:
         e1:11:77:3b:ba:ec:7c:83:92:59:d1:f3:c1:9a:1e:a4:34:88:
         ca:99:8f:43:b1:5c:44:be:e8:45:97:53:53:cb:65:43:83:81:
         a9:80:80:5a:fc:28:90:ad:d4:02:49:26:c4:b3:da:03:b2:c2:
         78:2a:4b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:53:05 2025 by rpki-client