Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7.cer
File:                     9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7.cer (raw, json)
Hash identifier:          8+CqO2X69xrWG3k6MGlAY6Gx+ekRUQCTAor86au33l0=
Subject key identifier:   91:31:EF:4D:B8:9B:41:21:0E:2B:A1:BD:8C:79:B4:1D:7A:FC:1F:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       08C7913AAE4C3D8CE095341F87C95B94179E2539
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Dec 2024 19:57:56 +0000
Certificate not after:    Tue 09 Dec 2025 20:02:56 +0000
Subordinate resources:    AS: 266481
                          IP: 170.83.88.0/22
                          IP: 2804:387c::/32
Validation:               Failed, certificate revoked on Tue 21 Jan 2025 05:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c7:91:3a:ae:4c:3d:8c:e0:95:34:1f:87:c9:5b:94:17:9e:25:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 10 19:57:56 2024 GMT
            Not After : Dec  9 20:02:56 2025 GMT
        Subject: CN=9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:15:25:93:54:0f:fa:4a:33:79:de:05:5b:91:
                    45:9c:3f:5d:a2:16:82:61:40:cc:46:2d:ec:99:0a:
                    ca:bc:80:3a:37:3e:9b:bc:90:10:b5:8c:73:77:dd:
                    af:ca:4e:8f:47:69:bb:74:78:d6:15:ae:5a:22:6f:
                    fa:46:c1:45:45:c2:6a:e1:bb:93:27:5a:e9:49:68:
                    50:28:4c:7a:33:fa:71:02:bc:f1:31:d9:52:91:61:
                    2b:85:96:83:da:52:61:20:85:68:f9:26:f0:5c:16:
                    c3:a9:bb:2e:88:e1:b8:cb:79:03:2e:0c:79:fa:23:
                    44:d4:6d:3f:28:10:ea:a6:6b:56:35:5b:57:dc:a7:
                    9f:54:1e:79:23:10:1b:5e:bd:14:a3:e8:e1:9a:14:
                    11:63:aa:32:f4:49:8c:7f:fa:15:82:e5:b1:da:b8:
                    ad:39:bd:8b:80:ce:41:cc:89:72:0e:54:45:7e:fe:
                    65:b0:c6:db:8e:12:d6:d2:5f:43:d3:d3:cd:b8:73:
                    ad:75:49:ff:f9:ce:59:0d:a7:05:86:d0:33:46:59:
                    f6:d9:91:aa:47:11:da:2b:c6:92:66:70:5f:98:c8:
                    ec:03:a5:51:8a:44:28:4a:83:1c:ff:f9:b2:1b:af:
                    97:2d:24:bd:db:4d:1a:c0:bd:2e:96:90:58:6d:6f:
                    09:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:31:EF:4D:B8:9B:41:21:0E:2B:A1:BD:8C:79:B4:1D:7A:FC:1F:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.88.0/22
                IPv6:
                  2804:387c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266481

    Signature Algorithm: sha256WithRSAEncryption
         75:50:24:b4:3f:46:2c:d3:af:17:45:d7:5d:08:40:e8:1a:3c:
         eb:ce:55:d3:c0:7f:90:51:1f:d7:02:7e:8d:9d:4c:b9:85:7a:
         d6:0e:eb:da:7c:7e:4b:33:55:5f:94:ca:9f:a1:f0:2d:fc:db:
         39:49:6e:86:a0:81:ba:b8:0e:6c:04:13:0f:99:e7:e9:39:46:
         87:b1:85:b7:fb:f8:11:b4:e5:6f:86:ed:23:76:49:7c:55:fd:
         96:0d:57:af:d3:c0:5a:cd:8b:77:2e:31:2f:22:32:c9:41:e4:
         00:83:57:16:25:41:e8:14:20:64:41:e6:f0:80:9a:4e:ca:01:
         65:25:0b:f9:dc:53:a8:d4:82:20:c4:c6:57:d6:12:93:9e:0b:
         96:dc:85:a2:52:60:74:b1:18:53:97:84:67:9e:87:de:5c:e5:
         38:94:db:49:54:a4:6a:4c:96:07:ce:bc:47:1e:e7:2f:48:0f:
         37:da:95:5a:28:87:56:5d:4d:4f:38:65:06:47:0b:b1:4c:22:
         f5:db:44:6f:3c:72:f5:82:4f:58:b6:26:ef:ef:b8:57:e8:e6:
         05:d1:45:cc:82:d7:98:76:d8:d4:bd:20:9a:c3:3d:55:50:cf:
         8e:0a:25:18:e4:2a:38:43:88:14:83:45:e4:3a:a5:89:16:56:
         aa:65:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:12:12 2025 by rpki-client