Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A1A01ED7E13E03145F46A33DC2488023EF6CA8F.cer
File:                     5A1A01ED7E13E03145F46A33DC2488023EF6CA8F.cer (raw, json)
Hash identifier:          3NC1VlC7QJgli13vBbLYaMaZJoo/WLORIKFcnOwlQjg=
Subject key identifier:   5A:1A:01:ED:7E:13:E0:31:45:F4:6A:33:DC:24:88:02:3E:F6:CA:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3137C9E22595F72B6C88CEBBF98DF818BBA87508
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/5A1A01ED7E13E03145F46A33DC2488023EF6CA8F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Feb 2025 16:00:04 +0000
Certificate not after:    Wed 18 Feb 2026 16:05:04 +0000
Subordinate resources:    AS: 267959
                          IP: 45.166.96.0/22
                          IP: 2804:55d4::/32
Validation:               Failed, certificate revoked on Thu 13 Mar 2025 14:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:37:c9:e2:25:95:f7:2b:6c:88:ce:bb:f9:8d:f8:18:bb:a8:75:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 19 16:00:04 2025 GMT
            Not After : Feb 18 16:05:04 2026 GMT
        Subject: CN=5A1A01ED7E13E03145F46A33DC2488023EF6CA8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e0:8e:38:7a:aa:64:8e:1c:95:d3:6c:07:4c:
                    53:b8:e4:0a:51:12:0b:3e:4c:bd:64:76:05:6a:02:
                    3d:cf:17:6b:9e:5f:28:00:9d:45:94:ec:1c:d0:2b:
                    54:97:30:47:46:d6:ea:5b:b6:fb:16:25:14:06:f9:
                    ac:40:1b:b8:b6:88:09:28:a4:5c:9c:2b:a0:b0:6d:
                    30:3d:7d:39:4c:d8:c2:2a:15:a3:49:93:ca:3b:c3:
                    ae:8a:2f:19:ab:67:84:4e:09:29:e8:8d:0d:27:5f:
                    67:75:3c:4b:c7:f5:cb:67:19:d4:ca:34:92:67:6d:
                    ef:45:c5:8f:14:ed:4e:ec:98:3a:f3:cb:34:e6:7c:
                    30:e7:2c:ed:99:bf:39:9b:15:8f:cd:cf:10:e1:e4:
                    e0:84:15:a9:32:16:bc:35:8b:4d:2b:07:6f:a0:c6:
                    00:78:de:df:80:bd:4e:9d:51:3a:cb:17:e4:1f:86:
                    12:d1:cd:0d:c4:05:c2:d9:d8:6b:a9:c0:bd:99:5b:
                    ff:b1:b3:1b:42:60:ba:e7:10:34:08:50:8f:85:20:
                    11:15:0f:3d:90:36:cc:88:12:e2:70:ed:3d:b5:79:
                    24:5b:c9:57:cd:e1:e0:89:a1:13:bf:07:b7:67:69:
                    ee:cb:86:18:45:fe:44:42:0c:da:e0:a0:74:4d:96:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:1A:01:ED:7E:13:E0:31:45:F4:6A:33:DC:24:88:02:3E:F6:CA:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/5A1A01ED7E13E03145F46A33DC2488023EF6CA8F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.96.0/22
                IPv6:
                  2804:55d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267959

    Signature Algorithm: sha256WithRSAEncryption
         7c:01:80:4a:2a:dd:54:05:88:5a:c9:e5:67:e6:d9:39:9b:b2:
         ec:ea:5f:26:86:f6:f2:c9:75:ee:95:30:3c:7b:d8:ff:13:ce:
         05:5c:fb:c3:8a:f9:0e:5d:9b:71:a5:31:2f:a0:ca:9c:b3:5c:
         4f:d7:3a:46:fb:26:77:d7:4a:9c:74:8e:3e:3a:5e:e8:20:43:
         b7:9f:2f:df:e1:eb:dc:60:8a:30:ac:20:69:e8:1d:9c:c4:5d:
         e9:26:62:a8:23:2d:33:8c:fb:62:1a:fb:f4:4d:ca:70:23:eb:
         15:6a:aa:81:8a:e0:f8:bb:84:db:59:fb:b3:69:d9:39:79:d3:
         92:c9:6a:a0:6e:3c:3d:c2:7c:fe:34:44:ae:26:10:41:c5:4c:
         ba:9b:fb:8e:31:63:a1:26:38:7a:41:a8:09:c6:b6:9b:a2:bb:
         67:85:4d:35:da:4d:d7:75:dc:b3:ed:42:22:be:f3:b0:45:4d:
         31:8b:44:50:43:9e:78:30:cd:c3:a5:f5:52:d1:03:22:e3:f7:
         d9:a3:dc:0f:25:62:3f:70:fa:dc:bc:77:85:45:0e:45:1e:b9:
         8b:2f:3e:cc:c7:fd:b9:b3:ae:82:ac:99:89:48:a8:53:9f:7f:
         da:f8:a4:a4:ed:f7:b4:67:97:d6:75:05:c3:a2:6b:44:e9:e3:
         4b:99:5c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:02:08 2025 by rpki-client