Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.cer
File:                     8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.cer (raw, json)
Hash identifier:          Bt5ApwJHi7RTdkHkahv5f82IAzgoMD1bsSIwL/E7zIc=
Subject key identifier:   8D:1A:F9:C9:91:F2:66:97:CD:C4:A1:CD:B5:E5:34:2B:F9:C8:E1:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       05A84528EEB0247163638AA543F0390DAE97BBAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 06:33:37 +0000
Certificate not after:    Fri 06 Mar 2026 06:38:37 +0000
Subordinate resources:    AS: 267062
                          IP: 45.228.8.0/22
                          IP: 2804:4790::/32
Validation:               Failed, certificate revoked on Fri 04 Apr 2025 07:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a8:45:28:ee:b0:24:71:63:63:8a:a5:43:f0:39:0d:ae:97:bb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 06:33:37 2025 GMT
            Not After : Mar  6 06:38:37 2026 GMT
        Subject: CN=8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:0d:83:21:2d:44:c6:6e:79:07:a2:60:2c:
                    f8:87:d5:6b:ea:11:7f:da:33:54:67:81:fb:4e:0e:
                    f2:5a:74:22:73:84:06:e4:8c:00:cb:1f:c2:46:a2:
                    7b:03:3e:df:f4:17:3c:4a:ed:e1:ab:cd:35:35:b1:
                    bc:5b:43:6c:e4:90:84:10:71:d9:3e:b8:68:96:7c:
                    ae:fa:da:dd:8e:17:a2:15:92:68:7e:e1:7b:f8:b1:
                    ff:50:5c:7a:64:a9:d6:6e:4b:b9:e0:5d:54:b3:0f:
                    52:22:59:59:32:1a:ad:18:cd:75:8d:8e:ed:ba:6a:
                    5d:06:03:11:d0:4f:50:a4:b3:11:aa:01:a9:e1:35:
                    4e:20:a2:7b:4e:5d:8f:e2:76:5e:e2:4b:71:ff:43:
                    52:5e:98:d8:1a:ef:38:a7:c6:c3:ca:dc:b8:73:20:
                    d8:a6:72:c4:6f:af:c3:b2:12:66:f7:9c:b7:fa:1d:
                    d7:9b:6c:24:b1:df:1f:4b:bb:01:66:59:62:5e:47:
                    9d:28:57:89:82:43:4c:72:2c:28:75:5f:55:5a:a6:
                    fd:2a:40:eb:9c:31:dd:2a:09:82:51:ca:c7:85:61:
                    19:67:6a:4f:b2:16:d1:c7:a9:24:08:4e:57:64:06:
                    9c:e4:09:ba:7d:b9:37:55:e8:b8:28:54:23:17:a1:
                    b8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:1A:F9:C9:91:F2:66:97:CD:C4:A1:CD:B5:E5:34:2B:F9:C8:E1:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.8.0/22
                IPv6:
                  2804:4790::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267062

    Signature Algorithm: sha256WithRSAEncryption
         a0:f8:24:5c:50:ec:d0:97:c8:77:48:98:60:33:2d:16:17:e1:
         fa:8b:4b:6d:7c:09:1d:7b:6e:69:4a:e0:97:40:3f:f0:a1:c8:
         c7:70:69:f1:3e:08:c9:7b:7d:bc:5a:17:bf:b3:07:63:a1:4a:
         2c:66:1d:83:a2:31:57:a0:b7:03:78:50:2a:07:38:f1:98:c7:
         87:ec:44:f9:60:29:ea:72:cc:0b:90:ad:4d:70:d9:86:25:48:
         43:e2:b1:7f:c6:2d:6b:51:21:d1:61:94:13:da:9d:1e:be:d1:
         49:75:17:25:68:0b:b4:f4:ae:56:3b:24:0b:32:e5:53:10:48:
         8d:58:44:76:a7:39:a4:c0:fd:3c:d4:19:fb:1f:3a:78:c9:bb:
         8b:77:8b:99:a4:f8:b5:02:85:d9:67:4e:77:87:c8:ab:34:e2:
         7d:05:17:16:6d:2a:cc:ba:b6:31:eb:5e:c4:d4:32:05:10:dc:
         99:0e:d2:fe:16:56:cb:33:f1:a5:f3:37:ed:a0:44:09:8f:fb:
         c7:e1:02:f4:7e:6b:d9:d2:48:3e:a0:5f:a2:05:8d:ab:7e:49:
         55:75:d1:dd:7c:a4:60:09:c6:61:5d:e4:40:29:19:bc:90:ad:
         c8:4e:c4:16:fb:c2:8d:88:2a:89:ec:76:dd:6b:3e:10:bd:1a:
         6a:70:2d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:10:02 2025 by rpki-client