Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/64421C24D9828B3D3608BEA1271D5D24DB932605.cer
File:                     64421C24D9828B3D3608BEA1271D5D24DB932605.cer (raw, json)
Hash identifier:          YUN+N2w4MtHWy34DNsSKInPOHDKa1T5PlAq/WbTrxBs=
Subject key identifier:   64:42:1C:24:D9:82:8B:3D:36:08:BE:A1:27:1D:5D:24:DB:93:26:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62F456C3203990EC268398A621AC4CB722F37AA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/64421C24D9828B3D3608BEA1271D5D24DB932605.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Dec 2024 20:22:25 +0000
Certificate not after:    Thu 18 Dec 2025 20:27:25 +0000
Subordinate resources:    AS: 61756
                          IP: 131.100.72.0/22
                          IP: 2804:1be8::/32
Validation:               Failed, certificate revoked on Thu 26 Dec 2024 17:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f4:56:c3:20:39:90:ec:26:83:98:a6:21:ac:4c:b7:22:f3:7a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 20:22:25 2024 GMT
            Not After : Dec 18 20:27:25 2025 GMT
        Subject: CN=64421C24D9828B3D3608BEA1271D5D24DB932605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2a:43:be:67:45:54:8c:37:1f:6f:55:77:14:
                    f7:ce:74:f6:a6:84:29:ad:70:2e:24:d8:12:94:a0:
                    ba:1d:5c:64:1e:30:43:06:26:70:f8:94:76:79:5a:
                    15:72:84:90:7e:a7:da:d4:ce:2c:a1:dc:46:45:33:
                    d9:61:de:0a:9e:95:75:65:dc:46:b4:45:5f:a4:bf:
                    24:34:d1:f9:ee:cb:ff:b5:1b:0e:cb:7a:f3:2f:f1:
                    72:bd:07:cf:18:c2:51:be:20:d8:7b:3f:9d:29:9c:
                    38:db:29:1f:5e:9f:d5:81:4b:aa:99:69:41:81:13:
                    6c:b5:47:8e:72:c7:67:46:80:5c:ba:d4:b6:ec:dc:
                    12:3c:22:9d:48:12:ce:52:2f:9a:d4:8f:16:9a:37:
                    2c:26:8f:21:0a:cf:54:e5:ff:52:03:06:f6:3e:8b:
                    55:5f:74:79:c6:76:67:7d:a5:35:e1:47:49:d5:70:
                    49:e7:b0:24:60:c2:bc:16:8c:f1:98:37:57:a7:c4:
                    b5:5f:aa:b8:10:90:76:56:03:c4:73:d6:a3:82:c9:
                    0b:0d:7c:35:79:34:fd:b8:f1:c1:15:af:38:6a:5d:
                    2b:82:d7:4f:76:3d:43:18:29:6b:63:f1:d4:7e:e4:
                    b6:8f:0c:97:4f:bc:71:46:bf:5f:2d:3f:56:f0:c8:
                    1a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:42:1C:24:D9:82:8B:3D:36:08:BE:A1:27:1D:5D:24:DB:93:26:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/64421C24D9828B3D3608BEA1271D5D24DB932605.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/22
                IPv6:
                  2804:1be8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61756

    Signature Algorithm: sha256WithRSAEncryption
         6c:97:77:db:79:ef:7a:5a:60:b5:01:70:f8:65:8b:d1:7f:4d:
         40:66:51:1e:b0:45:a3:f0:87:ef:27:43:a7:f9:2c:a4:4c:82:
         07:46:ed:31:02:78:e1:0f:ca:8d:8c:b2:e0:85:f2:0a:26:9a:
         35:8c:af:73:aa:60:96:c9:08:2c:73:6e:7e:ac:e5:f7:03:b9:
         a9:bf:2c:9f:8e:d5:fe:e1:da:dc:0a:24:f4:e6:da:32:97:01:
         34:ff:b2:55:07:d2:50:33:08:4c:b8:55:b7:d2:1b:f2:e5:8a:
         f8:43:a2:ac:f2:d8:44:20:ab:d4:07:7d:13:06:9c:c5:15:fb:
         1f:57:41:ca:7e:ce:9b:86:57:95:fe:1f:19:7f:c1:97:41:67:
         91:12:0b:35:54:d6:4e:90:df:da:fa:3a:10:34:99:31:9e:ef:
         5b:70:7e:78:3f:34:3f:79:63:54:75:b7:d2:fa:5f:30:aa:7d:
         32:b3:68:b6:c0:16:eb:3e:3e:66:5f:95:7b:db:97:34:11:4f:
         d7:9a:ca:9a:94:c0:13:8f:da:20:02:e8:03:0c:93:5a:7a:d3:
         36:d6:8d:3a:58:fd:0e:af:b5:3a:92:4d:a2:8f:22:ba:bf:44:
         8c:fc:96:98:25:47:af:fe:3b:21:f8:92:07:14:a5:5f:c1:94:
         89:95:af:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:28:52 2025 by rpki-client