Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7.cer
File:                     801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7.cer (raw, json)
Hash identifier:          6AzttK/2s/AMrh6JqBMgPvpQt8IrDlROjMHJAyy9sAQ=
Subject key identifier:   80:1F:F8:CE:80:8C:FA:AA:DB:7C:04:20:FD:EA:11:0B:55:C4:F7:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       394A6B2ECF29E77749A1D72793A4EE4343FCD46C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Sep 2024 12:45:17 +0000
Certificate not after:    Wed 10 Sep 2025 12:50:17 +0000
Subordinate resources:    AS: 267096
                          IP: 45.229.24.0/22
                          IP: 2804:4814::/32
Validation:               Failed, certificate revoked on Tue 03 Dec 2024 01:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4a:6b:2e:cf:29:e7:77:49:a1:d7:27:93:a4:ee:43:43:fc:d4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 11 12:45:17 2024 GMT
            Not After : Sep 10 12:50:17 2025 GMT
        Subject: CN=801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:1f:6f:92:64:9a:62:0c:0b:81:18:a4:96:
                    7a:7b:72:d2:79:45:af:15:65:d1:ad:b7:67:d2:7a:
                    22:19:73:9b:4e:99:62:1b:7c:6a:90:61:ba:a8:0e:
                    46:04:af:9a:a4:97:0e:76:1d:48:e6:30:cc:83:e8:
                    32:4d:9e:0a:8e:20:86:d9:57:bd:ac:48:a7:ed:ef:
                    87:74:b9:6d:c6:c0:33:9b:b6:ab:8c:5c:5d:c5:4a:
                    fa:d2:89:c1:79:7e:2f:bb:bf:d4:34:48:17:7c:e4:
                    22:f8:6a:0c:68:e7:fe:6c:ab:63:fb:0a:ec:27:16:
                    71:7d:8c:7b:45:7c:27:5f:8d:08:a3:9f:50:f6:4c:
                    b4:fd:bb:70:0d:2e:86:ff:29:9e:bd:5f:f9:0c:ad:
                    3a:8f:45:5f:8b:cd:46:ae:ac:a6:98:cf:6e:22:b1:
                    f7:3f:cc:44:47:f9:eb:cc:82:55:0e:52:4a:be:70:
                    34:4b:16:f2:6a:65:c9:d7:59:8e:6b:fe:79:62:cb:
                    43:45:79:01:e8:fc:82:54:54:8b:ce:f0:84:9a:4b:
                    93:7b:82:3b:10:e1:bc:7b:83:71:9c:7b:dc:b1:60:
                    18:9d:00:e7:5f:26:eb:c6:07:c5:4a:a2:d4:bc:5b:
                    27:05:e0:d4:de:74:b6:ec:7d:2f:e2:dd:b8:df:60:
                    10:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:1F:F8:CE:80:8C:FA:AA:DB:7C:04:20:FD:EA:11:0B:55:C4:F7:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.24.0/22
                IPv6:
                  2804:4814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267096

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:84:2a:ef:93:5f:5d:83:74:09:46:d5:c0:30:d4:a0:a0:
         54:6e:49:04:42:8f:79:c6:99:ea:74:59:e7:97:18:28:62:21:
         99:d5:4b:31:ef:ba:31:f3:dd:11:f7:dd:91:e1:2f:1d:b2:da:
         4c:05:cf:d9:8b:3b:b3:07:98:8c:58:bc:bd:46:be:12:e6:9c:
         38:54:a6:09:a0:e1:d0:fb:53:6b:59:29:36:1b:c1:64:a8:23:
         fe:67:1a:b9:d5:05:eb:77:54:60:1b:10:dc:16:06:23:61:95:
         c0:2e:32:f3:c8:a0:5b:d8:cc:68:66:b0:e7:d6:36:c0:de:e9:
         48:0b:57:23:12:ed:27:40:99:82:2d:55:e4:cf:ee:bd:d5:f9:
         c5:4f:21:9f:ad:b0:1a:a7:93:9e:78:db:18:00:ac:92:14:f0:
         84:b2:c1:42:4b:d1:af:6c:b8:1f:05:32:3f:df:da:a3:ad:cc:
         87:a0:31:d0:0b:aa:6a:d3:15:fe:10:14:62:95:0b:1c:55:22:
         1a:d3:e3:29:73:24:3e:0d:57:4d:ff:f9:b2:d9:3f:74:7e:92:
         48:b8:45:8d:70:8e:03:bc:55:1b:02:b3:82:52:ba:6a:81:8b:
         8b:b3:02:a7:17:2a:b4:ac:23:f0:aa:57:22:b9:63:fd:b6:3f:
         30:29:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:23 2025 by rpki-client