Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8339052B577355D40CA84D3619A30FDA96B01F94.cer
File:                     8339052B577355D40CA84D3619A30FDA96B01F94.cer (raw, json)
Hash identifier:          VyR9AD9UDGp23OZHXZZsKc58s3+P5te/RYPUVU6CHgg=
Subject key identifier:   83:39:05:2B:57:73:55:D4:0C:A8:4D:36:19:A3:0F:DA:96:B0:1F:94
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       524A25C5E8C72230F53BFAA41B5184690C1CB964
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/8339052B577355D40CA84D3619A30FDA96B01F94.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Jan 2025 11:19:02 +0000
Certificate not after:    Fri 02 Jan 2026 11:24:02 +0000
Subordinate resources:    AS: 271137
                          IP: 201.54.188.0/22
                          IP: 2804:76d4::/32
Validation:               Failed, certificate revoked on Sun 26 Jan 2025 20:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4a:25:c5:e8:c7:22:30:f5:3b:fa:a4:1b:51:84:69:0c:1c:b9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  3 11:19:02 2025 GMT
            Not After : Jan  2 11:24:02 2026 GMT
        Subject: CN=8339052B577355D40CA84D3619A30FDA96B01F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:31:02:75:7e:ff:6f:d7:e2:af:f3:b4:7e:78:
                    8b:64:e9:91:6f:c1:cc:33:2d:7f:5c:52:fb:eb:c9:
                    20:f6:fa:38:23:0d:20:5a:6e:c0:1c:17:27:a4:bf:
                    cd:90:7e:c8:bf:70:fc:75:36:83:8e:77:ae:de:40:
                    3a:da:68:c6:64:6d:f7:c3:68:c0:68:ce:8d:78:c7:
                    12:8f:92:77:8d:47:c7:81:23:42:09:5f:95:f5:09:
                    99:b0:2a:17:b0:cf:8c:e9:fb:f4:66:05:c0:51:84:
                    8a:93:44:60:b0:dc:a9:f5:64:b7:df:65:2d:fc:0b:
                    4d:e4:ba:64:cf:ef:d5:a0:01:a1:4a:53:08:de:8b:
                    81:99:2b:9c:8f:cc:75:0b:72:20:e7:6f:9a:6e:57:
                    95:f1:05:de:c4:41:44:d2:48:2c:97:03:8e:28:3b:
                    e1:f7:7b:5b:77:5e:ea:22:ea:d2:13:eb:9f:03:a2:
                    23:d8:cf:9b:1c:f6:fd:8b:ad:c1:16:06:cb:49:54:
                    ce:9b:32:54:a0:c3:2b:19:80:fe:d1:2f:4e:4b:35:
                    f0:1a:b2:f1:0b:a6:75:91:ca:31:fc:e1:1e:6b:05:
                    fe:60:9b:c4:f5:a5:ac:20:54:29:6e:90:7b:32:c0:
                    27:4b:93:ee:d7:95:ff:b1:a3:50:84:df:e2:db:6e:
                    13:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:39:05:2B:57:73:55:D4:0C:A8:4D:36:19:A3:0F:DA:96:B0:1F:94
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/8339052B577355D40CA84D3619A30FDA96B01F94.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.188.0/22
                IPv6:
                  2804:76d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271137

    Signature Algorithm: sha256WithRSAEncryption
         17:8d:57:f6:0d:5d:29:44:36:94:a6:7c:be:89:dc:c9:85:43:
         fd:65:be:bd:18:c5:05:af:2b:30:32:31:17:b0:1e:e1:9b:5a:
         b8:e0:92:3c:27:11:a0:d3:7e:4d:02:24:47:c0:a9:47:5b:e6:
         b3:a5:f4:2d:f4:c5:a4:d3:cd:05:ee:eb:e7:c6:55:5a:18:4a:
         b5:c2:db:82:fd:d7:1a:5a:c4:b5:aa:c1:77:1f:c7:77:3b:92:
         b6:7a:34:56:69:d5:42:c2:40:7b:98:7c:65:6e:51:17:1d:73:
         db:de:e3:d0:99:bc:f3:7f:aa:e3:56:ee:7d:77:1c:99:a8:fd:
         81:07:6b:91:e0:9d:fe:60:e8:43:e6:f1:76:55:27:b3:89:98:
         a4:c3:22:b3:34:46:81:79:f7:65:7e:73:9f:d6:4d:01:b3:ab:
         6a:02:ef:43:8b:17:be:71:5f:e3:a4:db:24:63:91:50:10:f1:
         e0:f3:5f:f3:e3:6e:25:c2:c6:3a:7e:46:03:d4:8d:09:c8:f7:
         ae:60:09:68:19:f2:98:12:07:8d:18:c2:73:12:50:25:0d:93:
         34:98:62:ce:9e:86:a2:b7:00:91:26:44:75:64:37:d5:90:85:
         01:3b:f1:1e:df:a6:d4:c3:0e:7a:a3:e6:3a:ff:74:e5:5e:02:
         96:ca:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:17:04 2025 by rpki-client