Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5BCF4800DEF286925CD099151DD28B25A8A11EDB.cer
File:                     5BCF4800DEF286925CD099151DD28B25A8A11EDB.cer (raw, json)
Hash identifier:          vXxZuUBAqPVavn84r58cfxsYQ+F3jGPRdTcDjUgHurE=
Subject key identifier:   5B:CF:48:00:DE:F2:86:92:5C:D0:99:15:1D:D2:8B:25:A8:A1:1E:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4640A8BA347391131211E7C62962F9CBC4A77F4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5BCF4800DEF286925CD099151DD28B25A8A11EDB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Jan 2025 13:20:13 +0000
Certificate not after:    Fri 16 Jan 2026 13:25:13 +0000
Subordinate resources:    AS: 268029
                          IP: 45.168.52.0/22
                          IP: 2804:56e0::/32
Validation:               Failed, certificate revoked on Fri 17 Jan 2025 14:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:40:a8:ba:34:73:91:13:12:11:e7:c6:29:62:f9:cb:c4:a7:7f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 17 13:20:13 2025 GMT
            Not After : Jan 16 13:25:13 2026 GMT
        Subject: CN=5BCF4800DEF286925CD099151DD28B25A8A11EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:ce:82:2f:e0:af:b6:c4:50:d1:1c:2d:e0:
                    7b:2a:2d:d9:63:80:ba:1f:9d:63:a6:4a:fa:de:18:
                    c2:12:77:d2:93:b1:e2:5b:9b:61:29:da:f9:a1:c5:
                    9c:e9:fd:25:b6:f6:0d:61:a4:03:c1:de:c5:df:68:
                    d4:fd:da:bb:01:bb:95:80:0f:87:2d:63:fa:c1:bd:
                    11:e2:ce:80:2b:cb:61:21:11:ab:b8:23:4f:6a:5c:
                    c5:e4:02:98:c0:a4:a6:28:7f:11:58:95:11:c7:19:
                    da:9d:14:d9:ef:e9:fd:80:ce:49:81:49:71:5d:83:
                    4a:d1:ce:91:c4:a0:59:df:2a:ff:48:5d:68:9a:80:
                    e1:b9:7c:34:7a:1e:a0:23:fe:35:80:22:99:57:7d:
                    7b:f2:21:d6:7e:07:43:3b:ad:1e:00:79:cd:71:ff:
                    db:c9:2e:e3:62:8d:71:66:d1:e9:68:d8:4f:5c:b9:
                    f7:fd:43:e3:60:7e:00:69:3b:97:04:69:c3:b4:80:
                    7a:fc:e8:88:77:09:41:91:86:2e:2d:90:09:23:66:
                    0b:29:e2:72:e6:02:18:c6:8c:72:10:2d:df:45:b4:
                    aa:08:2e:69:a1:f2:fe:ad:5e:2a:00:df:6d:cb:a1:
                    d8:9f:ee:f6:ee:e2:b2:d5:1a:e4:16:13:a5:28:39:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:CF:48:00:DE:F2:86:92:5C:D0:99:15:1D:D2:8B:25:A8:A1:1E:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5BCF4800DEF286925CD099151DD28B25A8A11EDB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.52.0/22
                IPv6:
                  2804:56e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268029

    Signature Algorithm: sha256WithRSAEncryption
         02:f3:8d:e5:60:9b:fa:ef:d3:3b:85:8a:ec:8c:f5:68:c6:1b:
         24:73:67:98:d3:f7:ad:5f:fe:0c:f9:ce:9b:56:d8:50:ee:aa:
         9c:a4:af:a6:a2:13:b2:af:ee:41:96:8a:f7:c7:f3:6c:69:51:
         2a:6c:b3:d9:b4:60:0a:ea:79:d0:3a:54:47:23:50:ec:7b:d9:
         af:d6:ae:12:10:a0:1a:29:63:e5:8b:cc:3a:c3:19:22:cb:b7:
         3d:01:9f:64:e4:e0:50:61:67:2e:1a:31:f3:49:2b:4e:8b:6f:
         92:f6:8b:de:8b:dd:26:77:ec:e1:55:b2:75:16:a4:22:1e:e2:
         c8:3c:fa:fe:82:7c:34:61:9e:b5:b8:60:1f:b8:6e:9c:f0:27:
         f0:15:a8:29:78:fb:29:13:35:62:8f:b8:bc:31:14:ba:c8:b6:
         36:8a:ba:4a:63:5a:7e:74:a5:f3:40:fa:54:f3:fb:d8:4f:d7:
         bc:f4:4b:c0:5b:e1:27:bb:4e:35:3a:07:84:6f:29:6a:17:53:
         0f:ac:ac:d1:4e:a1:f3:14:d6:1c:fe:4e:65:17:cd:fc:6e:bc:
         34:cd:b7:18:a4:1f:63:89:11:10:e9:c5:f0:ee:98:32:fa:48:
         22:e1:89:ef:b6:96:27:b0:32:d3:39:7b:a2:46:13:fb:70:0b:
         ab:73:15:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:31:33 2025 by rpki-client