Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/891DE37D11D1861D3136E0F4521059CA698EBF78.cer
File:                     891DE37D11D1861D3136E0F4521059CA698EBF78.cer (raw, json)
Hash identifier:          ahkiXlgyUAwvCPpsBf2JXtQZZnyrz//XitciOXonKx8=
Subject key identifier:   89:1D:E3:7D:11:D1:86:1D:31:36:E0:F4:52:10:59:CA:69:8E:BF:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0592B1CF05A669076E151A1EE49D64CEE66E8A86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/891DE37D11D1861D3136E0F4521059CA698EBF78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Mar 2025 19:20:49 +0000
Certificate not after:    Tue 17 Mar 2026 19:25:49 +0000
Subordinate resources:    AS: 271294
                          IP: 201.221.116.0/22
                          IP: 2804:7940::/32
Validation:               Failed, certificate revoked on Tue 25 Mar 2025 19:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:92:b1:cf:05:a6:69:07:6e:15:1a:1e:e4:9d:64:ce:e6:6e:8a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 18 19:20:49 2025 GMT
            Not After : Mar 17 19:25:49 2026 GMT
        Subject: CN=891DE37D11D1861D3136E0F4521059CA698EBF78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:2b:61:aa:26:c4:d3:4b:6e:5b:a2:86:f1:
                    d4:71:c1:6b:d9:86:78:a2:3d:0e:2d:cf:59:da:50:
                    c2:7c:d7:90:d7:3a:af:ee:04:78:8f:83:54:e8:8e:
                    07:7a:82:f2:00:74:3f:8d:4c:45:b8:93:84:8c:15:
                    e1:62:82:d9:09:b4:17:07:60:ec:b8:57:9d:82:d2:
                    ca:c5:de:10:22:0e:03:9c:26:6d:af:08:74:78:47:
                    6f:5d:8b:c5:fe:5a:52:53:be:06:c7:d9:85:05:6b:
                    81:c8:b2:8a:e6:26:30:4b:5f:73:68:93:e5:87:fa:
                    17:2f:84:d9:23:f2:ec:05:c7:1b:dc:da:7b:ca:4e:
                    ad:9e:6d:1d:d8:bc:f1:e5:2c:42:d0:ff:9d:6d:e3:
                    bf:bb:6a:b2:a6:0e:8e:97:6c:ea:7e:71:59:c9:48:
                    83:40:6d:55:85:8b:1c:eb:29:48:06:42:7c:4e:1b:
                    16:14:39:ab:a3:53:93:52:d7:cc:86:e9:bf:0c:31:
                    47:e0:5d:5d:41:d7:1e:f3:17:24:b0:85:06:2f:4b:
                    8a:ed:e4:cd:fe:6b:8a:f3:ab:15:5c:9d:bd:b7:89:
                    67:20:9f:f9:f6:a8:4b:54:dd:a3:83:5f:d7:41:f3:
                    4f:5e:94:64:f6:37:c4:c4:bd:ac:93:3f:e8:d1:53:
                    44:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:1D:E3:7D:11:D1:86:1D:31:36:E0:F4:52:10:59:CA:69:8E:BF:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/891DE37D11D1861D3136E0F4521059CA698EBF78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.116.0/22
                IPv6:
                  2804:7940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271294

    Signature Algorithm: sha256WithRSAEncryption
         5f:8d:41:a2:5c:34:29:ea:d3:00:37:19:39:58:46:a5:47:65:
         01:34:f8:7a:5f:24:a4:89:37:c2:1c:75:92:7e:8c:26:5f:1e:
         5c:ca:9c:c9:6d:f4:5e:48:5d:95:08:b6:ef:0f:f3:66:bf:bc:
         f2:a4:1e:f5:c5:bb:43:37:bb:08:87:68:b3:ed:6a:27:df:26:
         52:d1:17:39:3c:4b:32:3e:e6:2d:74:61:a2:f9:d7:1d:30:e1:
         86:ed:ad:bd:1d:4c:1c:02:e9:76:bb:01:4c:ee:64:1b:04:5b:
         b6:34:61:14:78:77:ee:d8:cf:f1:c7:15:23:53:04:4a:eb:3d:
         ac:cf:08:65:db:a3:e1:ad:94:e5:3b:9a:32:cd:a9:f1:87:d2:
         eb:b0:bb:0a:39:96:ab:d9:8d:d4:59:23:8f:db:00:52:c6:92:
         fb:40:c2:43:06:43:09:7d:10:33:82:b3:1c:21:b1:ef:aa:f5:
         2f:3b:70:a8:fa:de:da:cf:ee:c4:de:c3:8d:77:cd:d0:98:63:
         37:87:e2:48:eb:5d:47:b9:5f:3e:84:8f:16:21:a2:70:52:ed:
         d4:50:e5:c5:a2:68:88:27:57:23:52:57:58:9b:e5:48:b9:dd:
         fe:ce:ab:95:03:39:13:92:0e:36:51:a7:67:83:49:5e:8b:ee:
         80:e1:25:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:49:00 2025 by rpki-client