Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9AA45195B4C3DD3FC59F8A256C1111D59F3D3207.cer
File:                     9AA45195B4C3DD3FC59F8A256C1111D59F3D3207.cer (raw, json)
Hash identifier:          FGEz3lglb/v4fHf7CvO3EoMkadWVGduT0JEfcg0q/qE=
Subject key identifier:   9A:A4:51:95:B4:C3:DD:3F:C5:9F:8A:25:6C:11:11:D5:9F:3D:32:07
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11D59A18D7DAB60F7745E2039744AB3322C73EE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/9AA45195B4C3DD3FC59F8A256C1111D59F3D3207.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Mar 2025 21:48:55 +0000
Certificate not after:    Wed 18 Mar 2026 21:53:55 +0000
Subordinate resources:    AS: 273380
                          IP: 2804:8dc8::/32
Validation:               Failed, certificate revoked on Sun 30 Mar 2025 20:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d5:9a:18:d7:da:b6:0f:77:45:e2:03:97:44:ab:33:22:c7:3e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 19 21:48:55 2025 GMT
            Not After : Mar 18 21:53:55 2026 GMT
        Subject: CN=9AA45195B4C3DD3FC59F8A256C1111D59F3D3207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c1:2b:26:b7:84:30:65:a9:f1:48:55:5e:bb:
                    b4:89:a4:91:d1:27:25:c3:a5:e5:f4:69:12:fe:a8:
                    5d:f0:b9:4e:e8:11:af:2b:cc:5d:7d:cd:d7:32:e5:
                    a6:e5:e6:14:5c:84:9c:06:04:b5:ef:b0:e7:da:0d:
                    32:fb:25:56:a4:b4:8e:0a:2d:7b:08:01:07:d9:5b:
                    52:44:a9:93:7e:e6:70:39:4d:b7:9a:2d:a7:16:dd:
                    f9:31:af:dc:fd:10:3d:53:28:02:83:d9:9e:36:e9:
                    51:56:79:af:5a:c7:0d:85:d9:98:72:60:93:fe:af:
                    ea:f3:d3:e0:01:44:49:87:8b:bc:7b:06:68:92:25:
                    23:ad:27:d0:74:af:f0:bb:54:68:30:cd:4f:27:e4:
                    14:22:0c:94:f6:55:0c:57:3a:ad:31:b6:1a:f7:fe:
                    ab:71:14:99:e7:f5:d6:e7:6f:fe:b5:9e:6c:e0:12:
                    72:0a:fd:c0:d9:8e:29:49:ac:88:59:69:d6:44:94:
                    06:1f:52:76:38:8f:65:07:70:e6:25:d6:0d:ca:25:
                    22:62:fe:63:40:4e:b9:69:1d:f3:be:e7:1a:a8:07:
                    33:ca:af:13:02:e2:9f:83:6b:25:cb:df:52:5c:90:
                    2a:06:f2:11:64:67:7c:33:7a:9c:52:b7:ca:8a:c9:
                    f5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:A4:51:95:B4:C3:DD:3F:C5:9F:8A:25:6C:11:11:D5:9F:3D:32:07
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/9AA45195B4C3DD3FC59F8A256C1111D59F3D3207.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8dc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273380

    Signature Algorithm: sha256WithRSAEncryption
         46:c0:0e:97:5b:17:54:95:af:bd:a6:e6:5a:14:7b:53:b5:00:
         16:7a:1b:ba:8f:8e:2a:b5:77:e3:6b:a1:b5:6e:fe:ab:3f:04:
         83:66:6c:02:f8:03:88:a8:65:6a:ee:77:ca:86:ec:07:0c:f2:
         b9:62:35:fb:10:44:0b:c2:3e:93:c7:7d:f7:ca:77:db:8d:f6:
         37:97:fd:76:97:75:e5:d4:6a:55:38:f9:17:72:55:25:29:be:
         c4:ce:04:d7:80:78:f5:19:33:1e:d6:69:46:f5:b6:ea:73:e8:
         e3:7e:ed:a7:71:35:be:0b:d0:ef:01:00:b9:9f:b9:92:98:76:
         71:17:1c:5f:4a:e8:cd:4b:01:fb:fb:be:76:12:32:d9:72:cb:
         96:bc:7a:ae:91:f1:44:7e:68:79:94:35:4e:44:67:83:96:90:
         d3:05:6e:a9:8b:6a:c0:01:a2:11:f8:94:17:b5:75:bb:dd:17:
         0b:3b:1e:2c:59:2d:87:f2:7d:64:b3:03:f5:28:6a:65:20:9a:
         da:71:e6:2c:5c:d9:c8:a1:82:76:65:b8:c9:09:0f:dc:d6:59:
         f1:cb:37:ff:7b:eb:62:14:60:3c:7d:26:2f:d1:77:30:48:b9:
         c0:b9:d9:6a:46:f0:e4:bc:ef:c8:67:53:82:92:8d:fa:e6:0d:
         db:a0:0c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:42 2025 by rpki-client