Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8AF533141D3555FA3A251444F1A8E556BE76DF24.cer
File:                     8AF533141D3555FA3A251444F1A8E556BE76DF24.cer (raw, json)
Hash identifier:          VnMIm7FqsJ19wmNn7ACSF2rFY7QY7Ex6Oloc5KlJHTI=
Subject key identifier:   8A:F5:33:14:1D:35:55:FA:3A:25:14:44:F1:A8:E5:56:BE:76:DF:24
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       75B3E8CFDBAEE8E9BE4EB15D8DF36AC3EB84D30F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/8AF533141D3555FA3A251444F1A8E556BE76DF24.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Mar 2025 15:50:20 +0000
Certificate not after:    Mon 16 Mar 2026 15:55:20 +0000
Subordinate resources:    AS: 11432
                          IP: 200.155.128.0/18
                          IP: 200.170.192.0/18
                          IP: 200.194.248.0/21
                          IP: 200.201.128.0/19
                          IP: 2804:138::/32
Validation:               Failed, certificate revoked on Mon 17 Mar 2025 16:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b3:e8:cf:db:ae:e8:e9:be:4e:b1:5d:8d:f3:6a:c3:eb:84:d3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 17 15:50:20 2025 GMT
            Not After : Mar 16 15:55:20 2026 GMT
        Subject: CN=8AF533141D3555FA3A251444F1A8E556BE76DF24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9f:29:98:05:0a:c5:af:c4:d7:15:05:46:93:
                    f7:ee:23:f0:50:a9:24:5b:74:a7:c3:63:84:84:36:
                    6c:cf:76:19:c9:e8:9e:cd:24:d8:9f:9a:ae:9d:a7:
                    10:e5:c0:1e:20:6d:0f:34:f0:7a:9a:65:db:4b:0a:
                    29:48:62:da:b9:cd:1a:d0:17:3e:f3:c1:de:e0:c3:
                    71:c0:0a:fc:c9:41:53:dd:dd:01:46:b3:fa:60:93:
                    c0:86:3b:6d:93:85:4b:a6:b5:aa:10:55:25:65:9d:
                    88:2f:1f:d2:38:ed:07:5b:fd:c0:1b:56:24:24:60:
                    4b:1c:59:24:8c:30:89:82:88:4e:a8:b4:78:89:f5:
                    26:ca:82:31:4f:ac:66:4f:19:6a:6e:e5:95:66:25:
                    06:36:ca:79:97:64:4b:5f:27:72:cb:ed:98:a7:34:
                    01:8a:03:8a:14:44:b8:be:ae:1e:c4:38:60:9f:85:
                    15:bb:63:7a:6c:3c:e1:58:b5:9c:5a:14:17:56:25:
                    34:cc:29:54:aa:c0:94:a7:c8:ee:f2:ea:14:84:87:
                    f4:3e:d3:cf:b8:f6:e8:f6:d7:11:c5:14:d3:cd:72:
                    88:48:0f:c7:1e:f9:1d:4c:eb:26:f4:97:13:27:59:
                    db:0d:46:26:01:62:7f:96:cb:4b:a6:97:18:18:1d:
                    b8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:F5:33:14:1D:35:55:FA:3A:25:14:44:F1:A8:E5:56:BE:76:DF:24
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/8AF533141D3555FA3A251444F1A8E556BE76DF24.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.128.0/18
                  200.170.192.0/18
                  200.194.248.0/21
                  200.201.128.0/19
                IPv6:
                  2804:138::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11432

    Signature Algorithm: sha256WithRSAEncryption
         9d:f9:31:85:18:0b:32:be:b6:2a:75:75:04:e5:0c:fd:02:be:
         e0:c0:86:b5:f3:f9:7b:a1:3e:79:64:e3:39:a5:a9:33:ed:4c:
         2a:5b:03:a3:45:71:e9:96:5b:82:c5:39:6f:32:9d:66:ef:a0:
         fc:12:69:4f:15:76:04:6c:c5:b9:ab:f8:13:16:43:48:22:61:
         bd:c9:23:a9:ae:24:ab:79:65:72:6f:ee:b0:79:a8:0c:1d:45:
         9f:53:b1:47:f8:ab:9c:30:a3:18:81:4b:5c:e3:c9:18:f4:0a:
         5c:72:f1:da:19:60:31:44:7c:a0:8d:95:8f:d1:eb:77:4c:b1:
         23:52:8d:af:2c:af:b1:ce:6c:7a:93:9c:e0:42:f1:96:96:5a:
         4e:44:02:91:b2:1f:3d:8d:08:3a:64:2d:ea:af:a0:ea:f2:b7:
         a0:02:21:bb:a2:ac:fc:c7:bb:33:6b:58:73:e2:41:4b:5a:80:
         a8:51:68:0c:aa:85:60:27:41:5c:a2:15:db:89:76:a0:be:1b:
         38:83:07:27:26:3d:de:7c:99:e2:79:f7:6a:a8:3e:0b:ed:87:
         57:a0:f2:37:a0:66:92:35:0c:aa:7a:bd:66:6f:8e:de:d3:7d:
         09:f4:f8:39:08:f1:df:18:32:9e:a8:0f:ee:b7:0d:84:da:2c:
         ac:7e:f5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:54:34 2025 by rpki-client