Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/84E0814966D770AF0F854632DA2007CD1FD56863.cer
File:                     84E0814966D770AF0F854632DA2007CD1FD56863.cer (raw, json)
Hash identifier:          W/ckgtB+yjj9Hifauu1eh+UXp36PqCguHJ4fe66Dj7E=
Subject key identifier:   84:E0:81:49:66:D7:70:AF:0F:85:46:32:DA:20:07:CD:1F:D5:68:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       083D31EFA2E8A85807AD637ACEFEC586DAB3A967
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/84E0814966D770AF0F854632DA2007CD1FD56863.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Dec 2024 16:51:15 +0000
Certificate not after:    Thu 25 Dec 2025 16:56:15 +0000
Subordinate resources:    AS: 264897
                          IP: 168.227.224.0/22
                          IP: 2804:2f88::/32
Validation:               Failed, certificate revoked on Sat 04 Jan 2025 13:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3d:31:ef:a2:e8:a8:58:07:ad:63:7a:ce:fe:c5:86:da:b3:a9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 26 16:51:15 2024 GMT
            Not After : Dec 25 16:56:15 2025 GMT
        Subject: CN=84E0814966D770AF0F854632DA2007CD1FD56863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:91:fe:34:39:8f:d9:4a:c8:1c:e3:08:d9:
                    ee:c3:8f:32:20:f8:1e:98:78:dc:1c:d7:d9:a3:df:
                    ef:e5:d0:97:86:d7:82:0d:70:50:f1:a5:1a:9f:d8:
                    24:57:de:ce:48:d1:ce:24:3c:20:79:16:31:f0:81:
                    73:d5:2e:49:00:d7:fe:40:de:94:26:95:e6:82:20:
                    9f:08:4a:19:0e:7e:23:d6:02:5d:42:65:78:4f:6d:
                    80:84:dc:90:1a:82:19:52:8c:8e:6e:8d:1f:bf:c1:
                    4d:7d:f7:cc:f3:00:93:6d:f9:64:25:85:8c:4b:3a:
                    a2:62:5d:34:64:3c:ee:e9:78:a3:de:15:6a:fc:92:
                    b6:27:4b:4c:e2:74:3c:b2:9c:8f:04:84:96:27:a2:
                    e5:10:75:a8:16:28:ad:91:aa:69:90:49:e1:4e:82:
                    79:6e:1c:eb:89:b3:05:d4:49:b2:45:d0:01:ed:14:
                    51:70:31:e0:05:dc:8e:99:be:d2:18:46:5b:b9:4d:
                    b4:be:22:1d:cd:18:d4:3c:21:b1:e5:d3:ad:fd:20:
                    24:d0:1a:92:b3:f9:56:8b:20:50:ce:40:a2:fb:94:
                    3f:7a:ad:b6:cf:51:8f:e8:d2:09:3c:b2:48:24:39:
                    0b:72:07:38:f0:1f:b8:43:68:a6:df:d4:b8:63:63:
                    32:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:E0:81:49:66:D7:70:AF:0F:85:46:32:DA:20:07:CD:1F:D5:68:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/84E0814966D770AF0F854632DA2007CD1FD56863.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.224.0/22
                IPv6:
                  2804:2f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264897

    Signature Algorithm: sha256WithRSAEncryption
         80:22:b5:c5:d6:50:a3:22:ca:21:e7:d9:41:ac:bc:73:25:77:
         ab:7f:94:79:53:64:87:4a:bf:82:eb:64:a6:2d:98:d8:9f:44:
         2a:88:30:fb:62:6a:5b:e9:66:79:2e:db:04:c0:eb:0f:e1:37:
         c8:6f:c2:32:15:50:1f:27:da:99:bd:00:b2:01:1d:93:c6:5b:
         37:26:e4:3c:18:94:19:f7:13:20:f8:46:a9:86:f7:0d:5d:8b:
         40:cc:f2:86:ca:58:22:d9:d0:e4:5c:33:cd:d5:45:44:8f:09:
         07:89:0b:bb:d7:29:f9:ff:7f:0f:58:26:b9:a9:30:8e:6b:53:
         20:c7:f6:37:c4:f9:47:54:9b:b2:87:2a:65:f6:16:14:d3:6f:
         a4:52:d6:a3:c8:b2:52:03:5e:92:ce:3b:6f:07:05:1c:6d:cc:
         8f:57:70:7a:82:b5:50:86:76:da:0d:66:6a:20:24:5f:b0:77:
         eb:bf:e0:30:8d:6d:c8:0c:88:88:23:72:fd:71:45:55:34:2a:
         2a:0e:50:e6:a0:51:c0:79:63:64:1b:ce:b1:9d:59:c3:c7:23:
         e0:63:86:9e:bd:a9:9c:b8:38:06:3b:b8:60:a7:d8:3e:e6:ea:
         0f:23:5c:3c:fe:93:ca:d3:1b:3d:01:13:e7:8c:f0:31:d7:ce:
         70:83:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:18 2025 by rpki-client