Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/77FFD52ED5FC858764B864C9CC2498F407AC3AB2.cer
File:                     77FFD52ED5FC858764B864C9CC2498F407AC3AB2.cer (raw, json)
Hash identifier:          HYlr3WTNc26Y81i86LcTm2pqmQyW8/1PxUVjQRGssoI=
Subject key identifier:   77:FF:D5:2E:D5:FC:85:87:64:B8:64:C9:CC:24:98:F4:07:AC:3A:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       44FA63A02D301AC439C1B29AFD7F55EDCA6F71F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/77FFD52ED5FC858764B864C9CC2498F407AC3AB2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Nov 2024 14:01:36 +0000
Certificate not after:    Thu 20 Nov 2025 14:06:36 +0000
Subordinate resources:    AS: 272750
                          IP: 187.49.148.0/22
                          IP: 2804:8814::/32
Validation:               Failed, certificate revoked on Tue 03 Dec 2024 09:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fa:63:a0:2d:30:1a:c4:39:c1:b2:9a:fd:7f:55:ed:ca:6f:71:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 14:01:36 2024 GMT
            Not After : Nov 20 14:06:36 2025 GMT
        Subject: CN=77FFD52ED5FC858764B864C9CC2498F407AC3AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:83:1c:e1:24:56:1e:50:e4:18:7e:fc:c0:
                    31:b5:3e:e9:b6:d1:ee:a2:a5:d1:8e:80:af:5b:e8:
                    8f:60:f2:91:2c:79:cc:96:e8:e1:59:d7:a0:08:ff:
                    b2:69:b6:d1:3b:03:9a:d2:64:b9:cf:d4:8f:d0:b7:
                    24:0a:f4:e1:2c:f3:c4:cb:df:75:45:a4:93:78:e2:
                    de:ce:c1:05:20:00:aa:a7:0e:b0:81:09:ef:70:25:
                    f6:28:86:af:4f:7f:90:1b:f5:b3:42:2f:d8:ca:fe:
                    41:ff:79:00:00:d0:d4:de:a6:41:4f:32:73:bf:06:
                    fc:c9:55:9e:7a:44:88:fa:c1:e3:c6:94:7e:a5:9a:
                    51:38:b0:11:76:c4:59:2f:f2:77:eb:4a:48:43:45:
                    bb:ea:02:c4:5e:45:c2:2d:49:ad:65:d6:4f:9f:09:
                    59:f7:65:b1:23:f1:92:19:60:bf:62:98:7b:6c:97:
                    41:c7:b1:99:db:3f:98:ef:2e:66:cb:ca:92:39:33:
                    8a:8c:06:95:e0:ee:49:15:75:93:db:64:13:12:7c:
                    8c:8a:da:35:d4:d5:ab:39:5e:f4:9f:47:6a:74:ad:
                    82:bb:e8:dc:d7:42:f1:be:4d:af:de:55:3e:fb:7e:
                    45:ed:d8:99:fb:5a:c8:df:dd:24:a4:ef:3c:a0:ca:
                    50:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:FF:D5:2E:D5:FC:85:87:64:B8:64:C9:CC:24:98:F4:07:AC:3A:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/77FFD52ED5FC858764B864C9CC2498F407AC3AB2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.148.0/22
                IPv6:
                  2804:8814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272750

    Signature Algorithm: sha256WithRSAEncryption
         b0:08:b1:ed:6f:1e:fc:fd:44:97:eb:c2:74:5c:ad:c4:ef:5a:
         e3:3b:6f:2f:c8:ba:9e:e4:b7:27:59:75:b0:b0:40:60:da:69:
         d9:9e:85:c2:19:43:5b:b5:a0:71:56:aa:f0:11:33:47:96:5f:
         75:fd:da:b5:42:58:6a:3b:45:b4:98:6d:df:8c:f7:a5:57:fa:
         fc:c9:44:11:d1:f2:a1:bf:95:77:4f:da:2f:6c:fa:eb:d5:60:
         4d:72:cb:80:c3:9e:4e:78:5f:9e:61:18:f8:b9:51:75:ef:22:
         b2:51:43:b4:8a:2b:24:54:2c:84:3a:a6:f2:1b:e7:52:c2:64:
         48:71:ef:06:d2:ae:fa:78:2d:ee:37:86:09:cb:a9:64:f2:b6:
         18:6c:30:9f:2f:83:cb:31:dd:18:b5:9f:65:c6:f0:ac:52:00:
         db:f4:3f:39:fd:bc:47:36:6f:9f:f8:4b:92:54:b0:c2:ce:42:
         c0:df:63:77:a4:91:38:6d:75:cd:bd:32:66:6f:95:af:00:d3:
         4d:99:e4:af:f4:f5:b7:3c:7c:f4:4d:6b:f8:ed:cd:01:09:6c:
         81:e2:6f:89:33:bd:25:5e:f4:1a:8c:7f:12:94:45:49:bb:a4:
         89:fe:3c:ae:0c:bd:22:a8:a5:b9:e3:33:ab:78:89:e9:97:96:
         dd:62:0a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:06 2025 by rpki-client