Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8149914A5A868AC0F10A7545DFFB214778D69D8A.cer
File:                     8149914A5A868AC0F10A7545DFFB214778D69D8A.cer (raw, json)
Hash identifier:          gKpqtLCi3QWDu6hAlkLltPXZXQUZ/S358Q3R4zMptCM=
Subject key identifier:   81:49:91:4A:5A:86:8A:C0:F1:0A:75:45:DF:FB:21:47:78:D6:9D:8A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25B95AF8601879EEA1439CDE36BE03353E4CC893
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/8149914A5A868AC0F10A7545DFFB214778D69D8A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Jan 2025 01:32:48 +0000
Certificate not after:    Sat 03 Jan 2026 01:37:48 +0000
Subordinate resources:    AS: 265943
                          IP: 131.196.160.0/22
                          IP: 2804:4030::/32
Validation:               Failed, certificate revoked on Tue 07 Jan 2025 15:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b9:5a:f8:60:18:79:ee:a1:43:9c:de:36:be:03:35:3e:4c:c8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  4 01:32:48 2025 GMT
            Not After : Jan  3 01:37:48 2026 GMT
        Subject: CN=8149914A5A868AC0F10A7545DFFB214778D69D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:4a:5f:e3:c9:83:0e:8a:85:1f:e0:22:aa:
                    05:22:1e:68:25:9c:d9:34:81:a6:f8:de:0f:c2:c2:
                    37:40:04:47:8e:97:3f:66:33:96:37:e7:35:d0:c8:
                    3c:bb:c6:72:03:75:ed:e1:9a:4b:ce:14:f6:30:32:
                    a4:37:98:c2:28:5a:53:57:a8:02:56:ad:d4:54:d4:
                    46:f7:a9:98:3e:8c:5d:b0:89:f3:7b:71:c9:ea:f8:
                    c1:9e:1f:8e:76:93:82:25:fb:4c:1a:9d:10:d4:49:
                    fa:f8:ef:97:bd:cf:6a:e1:aa:4b:87:29:d9:a2:59:
                    f1:98:68:52:07:44:8f:4b:fe:68:a1:ba:c0:13:0b:
                    20:04:0a:04:8e:79:13:7e:4d:a2:6a:3f:1e:1e:f8:
                    d5:58:82:a7:b2:5b:40:ea:ce:20:02:50:d3:c4:66:
                    f8:52:e4:25:2e:64:c1:05:14:80:0f:8b:64:5f:5b:
                    b4:c1:b9:e7:df:1c:11:6f:37:0d:22:60:f2:53:33:
                    c8:d8:94:79:78:bd:4a:e2:d7:13:d3:89:68:fd:c2:
                    04:62:d9:88:b1:0a:b4:13:1d:36:ad:2e:e1:5f:89:
                    55:54:db:f5:f1:40:54:aa:cf:b2:1b:2f:44:75:42:
                    4b:02:a7:b9:7b:15:1a:c2:ea:91:d8:16:aa:9a:99:
                    4c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:49:91:4A:5A:86:8A:C0:F1:0A:75:45:DF:FB:21:47:78:D6:9D:8A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/8149914A5A868AC0F10A7545DFFB214778D69D8A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.160.0/22
                IPv6:
                  2804:4030::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265943

    Signature Algorithm: sha256WithRSAEncryption
         91:13:ed:6f:5a:16:52:19:ec:c8:6b:0d:6a:3b:69:36:55:98:
         da:5c:20:ba:3f:7b:b5:08:e0:ea:0c:47:2a:51:72:99:07:bf:
         be:9e:ca:01:95:75:a0:2d:9c:2c:fc:c3:83:ab:f0:d6:68:4d:
         b4:fe:a1:2a:24:04:03:0f:22:e5:7a:48:8c:10:ad:89:a2:03:
         8c:5f:b6:24:c6:f8:03:f6:fe:2c:d3:35:36:68:36:72:6c:be:
         3e:bf:59:46:ff:3d:f2:d3:9d:cd:93:10:7c:4a:e5:b6:b3:bf:
         db:6f:d7:dc:35:45:48:c5:e3:3b:6f:a6:36:fb:20:50:e0:f8:
         79:9a:e8:6e:4e:d8:0c:b1:f0:31:c0:46:f7:2d:22:8f:ee:c1:
         4c:73:7a:b1:ae:35:06:87:0c:19:8b:cc:3e:8d:b6:db:80:a2:
         09:4d:7e:8d:01:f3:14:69:d6:27:0b:7d:da:4a:da:63:70:34:
         71:b0:7f:7f:19:ae:da:f2:83:3e:3e:3f:17:e2:0f:74:2f:a9:
         77:ea:c5:06:e9:3a:e7:83:17:61:15:85:8c:c6:fa:db:82:0b:
         55:c4:23:3a:92:0a:33:01:f3:42:55:c0:f4:b3:f6:3a:81:2c:
         cf:12:aa:e2:98:6b:e7:3c:4b:70:af:2e:8b:96:e6:7b:6c:bf:
         84:bb:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:27 2025 by rpki-client