Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer
File:                     99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer (raw, json)
Hash identifier:          HGKjrdY8pBRkxr2q102DEO9UUXtjLU+V0oTPImfEAIs=
Subject key identifier:   99:D9:81:59:99:A6:E5:37:F4:4A:7D:30:D9:A1:7C:E7:45:3F:2F:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3ED5551F0D28EE5B151178B6DB79E39AC0C2CCF2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 02:57:49 +0000
Certificate not after:    Fri 06 Mar 2026 03:02:49 +0000
Subordinate resources:    AS: 269120
                          IP: 45.179.4.0/22
                          IP: 2804:5fbc::/32
Validation:               Failed, certificate revoked on Thu 03 Apr 2025 23:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d5:55:1f:0d:28:ee:5b:15:11:78:b6:db:79:e3:9a:c0:c2:cc:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 02:57:49 2025 GMT
            Not After : Mar  6 03:02:49 2026 GMT
        Subject: CN=99D9815999A6E537F44A7D30D9A17CE7453F2F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e0:e4:8e:fa:3a:2b:53:e7:3d:1c:41:66:c5:
                    00:1f:b6:a2:82:c1:04:6c:2d:6f:35:b8:e7:ad:5e:
                    5b:2f:f3:5e:d1:ee:8a:a7:e2:9c:b3:1c:38:0b:e7:
                    e7:52:e0:e4:72:ee:33:4a:cd:45:46:b0:29:b5:79:
                    4e:6d:14:e0:7e:d7:77:8f:e1:03:3a:66:f8:2c:ab:
                    7f:14:77:9a:f1:69:a0:7d:28:87:36:7a:9b:fc:d7:
                    55:15:ac:5b:e0:e3:f8:52:ce:ed:ee:f8:5d:0d:f0:
                    6b:58:2b:b9:90:9c:ba:db:dd:27:32:90:31:c6:e1:
                    92:6b:35:20:b1:a0:68:15:eb:01:3b:ad:fb:e5:55:
                    ea:40:80:4d:e6:89:2b:e7:00:86:29:3e:99:70:e6:
                    f2:a1:68:4b:55:28:d1:b3:a8:4a:dc:e5:01:aa:bc:
                    e5:75:9e:5e:15:6d:76:a0:72:29:e4:44:9c:6b:34:
                    c2:89:93:9d:82:d2:51:eb:51:c0:a6:b0:96:be:8e:
                    fe:e5:0b:0a:34:b0:6d:44:ce:74:c6:4e:0f:9d:f2:
                    2e:ce:61:1a:36:f2:6b:5f:27:f4:c6:85:1e:d5:fc:
                    a0:36:03:10:37:8e:d9:a6:e9:44:1d:cb:5e:d9:e5:
                    47:09:9e:33:6d:bf:c9:ac:f6:e5:cb:2f:43:16:ea:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:D9:81:59:99:A6:E5:37:F4:4A:7D:30:D9:A1:7C:E7:45:3F:2F:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.4.0/22
                IPv6:
                  2804:5fbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269120

    Signature Algorithm: sha256WithRSAEncryption
         15:79:c2:3d:61:7f:05:e8:25:34:1f:b1:5e:99:19:b9:8c:e9:
         09:2e:4a:c9:e0:f5:ff:a9:0b:4d:2a:07:87:89:75:3b:02:5f:
         49:35:5b:98:eb:a9:db:1e:99:22:b8:b2:06:92:aa:a7:36:e2:
         f3:04:2e:ec:ce:7a:3c:0b:ce:72:63:ee:05:f6:d3:4f:5f:4d:
         13:e8:8e:c4:a4:0f:8d:41:21:c2:9e:5a:e0:ea:10:39:d1:57:
         7a:6a:20:6b:c1:6c:07:58:8a:e1:5a:79:77:76:1b:56:e8:9d:
         7e:07:20:bf:4f:a8:5c:b4:08:52:22:de:92:b0:87:90:6d:41:
         97:5c:4e:ec:c9:2f:03:57:7e:c0:7f:26:01:48:21:66:29:2f:
         f9:23:7f:24:94:a2:36:82:9d:d6:c9:13:d5:d8:26:ea:a4:41:
         d8:70:68:79:7f:31:20:d7:ef:87:90:db:a5:67:ab:cd:ee:2c:
         e7:e4:1b:c8:84:a5:1f:6c:84:5b:d6:a5:62:5b:f4:c2:89:d6:
         21:53:df:53:c7:73:70:93:1e:9d:ed:f0:4a:cb:e7:37:55:1c:
         34:66:38:a7:f4:b8:18:14:78:be:59:88:c4:d0:f2:83:a9:38:
         35:c3:20:06:4b:dd:b6:2e:a8:2e:e3:8a:97:d4:92:2a:b9:f0:
         ab:9c:93:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:16 2025 by rpki-client