Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
File:                     96F3E99149446CE908CDA1678FD9180CD4020D16.cer (raw, json)
Hash identifier:          YCt/yq+pa3uLW4hEROsyiFl3sDzedBqBixg3BXaVJQc=
Subject key identifier:   96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       71F72F0E4D0FF0EE459CEBB6D47D188F99FFC52B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.mft
caRepository:             rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Dec 2024 18:37:25 +0000
Certificate not after:    Tue 02 Dec 2025 18:42:25 +0000
Subordinate resources:    AS: 52601
                          AS: 263652
                          IP: 170.83.100.0/22
                          IP: 177.74.224.0/20
                          IP: 177.124.72.0/21
                          IP: 2804:10dc::/32
                          IP: 2804:383c::/32
Validation:               Failed, certificate revoked on Sun 12 Jan 2025 03:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f7:2f:0e:4d:0f:f0:ee:45:9c:eb:b6:d4:7d:18:8f:99:ff:c5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  3 18:37:25 2024 GMT
            Not After : Dec  2 18:42:25 2025 GMT
        Subject: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:fa:15:c9:c4:82:ae:e6:3d:d2:b9:ea:37:
                    3e:d9:54:85:7d:13:a3:e0:16:0e:d2:5f:b9:66:c6:
                    81:9d:58:e3:a7:43:30:3e:a4:55:43:c7:88:ba:42:
                    5f:22:ee:64:61:f6:4c:76:67:8c:3b:2d:4a:80:01:
                    ad:0f:b4:d5:0d:c5:b3:14:e9:a7:ca:0c:92:5b:25:
                    40:b1:a0:62:43:33:d1:f8:16:d7:8e:0c:80:af:19:
                    6c:f7:e2:89:61:05:9f:c7:fa:1d:2c:5e:0a:6f:bc:
                    b8:e3:33:42:35:a2:40:f6:09:c7:c1:5a:5d:46:2b:
                    99:38:b9:17:1a:e7:a1:c5:85:a3:67:e9:a4:3b:18:
                    d9:49:82:46:b6:1a:80:a1:a6:aa:ad:b7:00:8b:27:
                    77:76:41:47:93:24:cb:0c:ca:01:28:a9:7c:22:6e:
                    6c:21:7e:ee:0e:c4:be:c4:21:3f:b8:31:d3:94:ce:
                    26:f7:83:ce:2b:6a:a3:ac:c2:ba:d9:97:f2:e1:69:
                    15:99:0f:44:7d:53:29:3f:64:ef:b0:f3:53:f2:45:
                    18:bc:6a:7e:af:45:ef:80:47:7b:ad:d2:a0:bd:cf:
                    65:8e:35:08:6f:08:09:9b:40:fe:01:94:ed:bc:d6:
                    af:45:9f:a2:6e:84:79:34:a5:15:83:42:e9:dc:87:
                    39:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.100.0/22
                  177.74.224.0/20
                  177.124.72.0/21
                IPv6:
                  2804:10dc::/32
                  2804:383c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52601
                  263652

    Signature Algorithm: sha256WithRSAEncryption
         1e:0f:d9:9b:13:fa:ad:e0:8b:6c:46:63:5f:03:7c:f5:39:85:
         45:0e:e2:7a:16:87:ac:d9:f9:dd:9a:1d:35:4e:07:2a:b9:2d:
         fc:af:4e:2a:4f:d5:3b:43:b5:76:39:fb:2b:21:01:ff:6f:89:
         ac:3c:18:64:42:29:32:e1:ee:04:41:85:0c:79:00:5b:d9:80:
         fa:3b:72:c7:e7:e4:74:41:52:b0:08:b7:5f:8f:28:2a:ba:04:
         7f:b3:75:db:f0:b9:63:9e:2a:82:94:d6:59:4d:45:8a:01:66:
         59:2f:0b:9e:c3:78:b3:4c:d6:c9:4e:98:30:f7:cf:b6:3a:73:
         e0:6a:33:fb:8c:cf:80:cb:57:c9:e7:20:df:e8:7c:a5:76:f5:
         3c:78:8c:76:5d:23:fd:05:61:dc:02:d7:f9:64:07:86:6f:86:
         2d:32:4f:9f:4c:c9:97:7f:b1:61:1c:71:fe:2e:19:cb:92:9a:
         d7:30:8a:1a:fc:26:9d:4c:2f:f2:d6:02:92:27:0b:a5:63:fd:
         83:59:be:de:d2:81:76:4f:66:ae:36:19:57:26:08:f7:41:83:
         ed:c2:f3:70:e7:50:3a:0c:48:94:85:e0:77:d2:ad:cd:37:6b:
         41:76:84:11:ea:e6:ce:9a:c6:a4:eb:ac:86:2d:97:ca:b6:03:
         2a:71:40:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:35 2025 by rpki-client