Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/656DFC990036FFBF05ED25316BEECBC39854A0BB.cer
File:                     656DFC990036FFBF05ED25316BEECBC39854A0BB.cer (raw, json)
Hash identifier:          wk+fvVPfzz60sgHqYQorYSuhTMdNzylD8T3PXdjIgCo=
Subject key identifier:   65:6D:FC:99:00:36:FF:BF:05:ED:25:31:6B:EE:CB:C3:98:54:A0:BB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1EB848668C0E6915A07C841FC60918353CBB661D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/656DFC990036FFBF05ED25316BEECBC39854A0BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 10 Nov 2024 10:18:27 +0000
Certificate not after:    Sun 09 Nov 2025 10:23:27 +0000
Subordinate resources:    AS: 269025
                          IP: 45.178.128.0/22
                          IP: 2804:5e50::/32
Validation:               Failed, certificate revoked on Tue 14 Jan 2025 12:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b8:48:66:8c:0e:69:15:a0:7c:84:1f:c6:09:18:35:3c:bb:66:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 10 10:18:27 2024 GMT
            Not After : Nov  9 10:23:27 2025 GMT
        Subject: CN=656DFC990036FFBF05ED25316BEECBC39854A0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:e2:b9:27:34:60:9b:4c:9b:cc:3b:d9:da:
                    65:2f:73:2f:f9:a4:06:d5:90:93:a2:6c:80:54:94:
                    ec:f7:ae:ee:c2:49:82:46:b7:44:ce:80:b9:f3:5a:
                    22:13:0b:c7:8f:08:02:16:af:8a:e0:b9:13:2c:a8:
                    cc:99:ab:41:b9:f6:c3:ef:43:91:64:5b:f0:6c:ee:
                    5c:3d:fb:57:9f:be:53:cd:cc:61:0e:5e:bc:63:bf:
                    c8:df:23:73:10:56:5c:87:dd:a1:1e:7f:fe:e0:64:
                    e8:90:de:a8:e9:83:c7:ce:23:03:73:f8:8c:26:51:
                    19:3f:a8:ce:19:6b:6d:00:e7:7a:d1:21:93:38:b4:
                    81:c4:84:08:10:f6:b3:68:69:fe:be:67:90:93:4d:
                    f2:01:1b:c9:5d:b1:aa:b2:41:d8:03:9b:e2:9b:ff:
                    78:99:c9:c8:29:b7:c3:01:3e:51:ef:23:ea:aa:e7:
                    f7:2f:87:7d:26:3c:de:d0:ed:f2:6e:32:7b:f7:af:
                    bc:16:3f:0c:82:d2:c6:11:35:65:c4:3e:80:d9:74:
                    c2:0b:f7:9e:ef:8c:dc:ad:50:88:ff:12:32:de:f7:
                    15:c7:3b:03:70:a1:ac:30:5f:70:9a:6f:19:d8:fb:
                    d7:29:5a:c7:98:7b:40:be:59:fe:bd:14:9c:5b:01:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:6D:FC:99:00:36:FF:BF:05:ED:25:31:6B:EE:CB:C3:98:54:A0:BB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/656DFC990036FFBF05ED25316BEECBC39854A0BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.128.0/22
                IPv6:
                  2804:5e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269025

    Signature Algorithm: sha256WithRSAEncryption
         93:d2:c7:5a:2d:6f:29:b2:1b:89:df:4f:68:d6:f7:6d:43:2e:
         7d:75:bb:68:d8:92:6a:98:4d:65:0e:ea:21:41:cd:78:ec:f6:
         7b:e0:85:a8:fd:49:f2:4f:f0:96:6d:ac:21:12:e3:c0:1d:20:
         d0:9b:5f:b9:06:1c:5c:84:4a:c2:33:fd:98:2a:00:82:6b:ff:
         b9:ed:f7:9e:ff:50:f0:a4:5c:e4:98:59:2b:77:a5:09:96:3f:
         48:ea:ba:c7:70:eb:7a:47:9a:dd:94:6f:8f:fe:25:57:d7:af:
         92:91:8f:e2:35:34:d5:fd:d1:43:86:7b:6f:71:b3:44:92:0a:
         62:5b:88:ce:37:e8:7e:96:ee:f9:16:4a:f8:f0:ce:a0:9b:73:
         e1:12:20:7c:b3:18:a4:38:55:6e:59:05:3b:b1:c2:7d:df:18:
         aa:07:4e:c5:e0:13:bc:38:9e:74:38:4b:50:ef:8f:cd:1a:a8:
         17:df:1e:52:de:e8:ec:3a:6d:45:cd:04:84:cc:c0:7b:02:35:
         bd:f8:c2:cc:1c:a4:d7:90:51:a4:21:6d:32:f5:87:4a:47:e5:
         ec:95:25:22:04:39:55:58:c2:64:01:27:27:62:48:a9:cf:29:
         85:c8:46:49:24:01:97:21:e9:fd:b4:8a:79:72:d6:15:87:04:
         da:36:da:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:46 2025 by rpki-client