Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/97D3A19503990A77B10974CDCEE1CED41F9D742C.cer
File:                     97D3A19503990A77B10974CDCEE1CED41F9D742C.cer (raw, json)
Hash identifier:          A/o8CfFBx7988+7xyJE8ijsuHXmUIy9aNoSTSmTiJXQ=
Subject key identifier:   97:D3:A1:95:03:99:0A:77:B1:09:74:CD:CE:E1:CE:D4:1F:9D:74:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5152769AE83899DB2B98953EE0C7E4523DBA137F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/1/97D3A19503990A77B10974CDCEE1CED41F9D742C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Nov 2024 00:24:12 +0000
Certificate not after:    Fri 07 Nov 2025 00:29:12 +0000
Subordinate resources:    AS: 269410
                          IP: 45.186.40.0/22
                          IP: 2804:6428::/32
Validation:               Failed, certificate revoked on Wed 08 Jan 2025 11:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:52:76:9a:e8:38:99:db:2b:98:95:3e:e0:c7:e4:52:3d:ba:13:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  8 00:24:12 2024 GMT
            Not After : Nov  7 00:29:12 2025 GMT
        Subject: CN=97D3A19503990A77B10974CDCEE1CED41F9D742C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e3:35:d8:ab:50:a9:20:2d:38:6e:55:d3:9d:
                    e1:b6:58:a6:56:a1:a2:5a:4b:e3:f1:64:4b:34:ae:
                    42:ae:22:85:b3:ad:85:4c:9b:24:66:e3:5f:b3:97:
                    b2:90:22:4c:a3:69:a0:9b:83:83:b2:c0:d5:53:cc:
                    28:c9:34:ac:83:a9:59:93:e9:24:b9:a6:16:39:e1:
                    f5:70:ae:51:97:bd:6f:51:8f:09:14:d5:72:27:2b:
                    7d:59:2f:e0:c6:b5:c2:51:d1:3b:8e:46:e0:b1:e8:
                    e9:3f:28:0e:49:a0:58:74:a9:dc:52:87:f2:a2:2f:
                    c3:d4:d1:83:d2:d0:03:e6:ec:1b:0d:61:d0:c6:ce:
                    e0:b1:73:f5:5c:df:b9:48:05:2a:d0:8e:24:40:d8:
                    9b:41:a8:41:e8:83:8d:be:6d:c6:e7:c6:86:6f:ed:
                    60:9c:90:dc:0f:cd:be:ef:af:4c:0d:b5:3d:83:4c:
                    74:d8:75:4d:d7:9c:34:ae:dd:31:60:98:ea:ed:e0:
                    b9:44:21:9a:0e:4f:b1:80:27:5f:50:cb:3d:75:7f:
                    18:07:2d:d3:df:29:fa:2c:d1:f2:9f:f7:09:98:51:
                    be:68:5c:b2:6d:12:35:3f:56:3e:95:9a:a4:55:74:
                    1f:86:b5:1b:f3:56:26:9a:d6:ef:a6:ba:50:2d:93:
                    ef:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:D3:A1:95:03:99:0A:77:B1:09:74:CD:CE:E1:CE:D4:1F:9D:74:2C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/1/97D3A19503990A77B10974CDCEE1CED41F9D742C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.40.0/22
                IPv6:
                  2804:6428::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269410

    Signature Algorithm: sha256WithRSAEncryption
         b6:99:73:73:d3:da:b2:60:08:c1:b2:a4:aa:cf:44:d5:a8:fd:
         b1:15:0f:e2:6b:dd:b0:cb:6b:db:5c:71:b9:e7:32:ec:a8:7d:
         9d:92:00:55:88:72:07:d2:f0:0d:bb:3c:cd:c5:e4:3e:22:00:
         7c:48:df:04:5b:ea:8d:72:cd:e7:e9:67:8e:7f:b2:b3:45:18:
         04:ee:9a:81:e2:65:9e:13:db:b0:64:5a:c4:7a:16:a8:2a:b6:
         cc:7a:16:f6:43:75:6c:7b:64:22:ab:5d:15:cc:86:27:f8:7c:
         cf:e8:42:86:c8:df:0e:18:22:de:b7:98:dc:a6:4f:51:b4:0b:
         9d:ec:e4:1c:2e:35:14:a6:7a:eb:4a:59:c7:06:18:9d:29:23:
         f3:54:0a:f1:a5:de:24:8b:12:27:7f:9b:4d:f3:f9:cf:16:c1:
         95:7f:95:50:f2:08:26:ee:0f:85:3c:ac:72:81:09:60:6a:64:
         49:62:22:22:eb:6b:e5:83:ef:c6:42:d7:88:07:7e:3b:37:0c:
         ff:2c:5f:3a:15:39:37:52:d4:55:5e:16:3c:3e:00:e3:50:f3:
         7a:39:6f:46:63:8a:1d:5b:42:0c:3e:fe:08:13:cb:39:a9:6f:
         77:6f:5e:ae:34:c6:50:41:40:69:e3:6e:8b:ce:6b:3a:47:a2:
         78:d6:f4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:46 2025 by rpki-client