Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.cer
File:                     9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.cer (raw, json)
Hash identifier:          NJ8+4pP2H2+O6FvWBcWR2SWeIN0r5EzZMpD+D5R/MtM=
Subject key identifier:   9C:05:0C:4A:1C:62:1D:E7:91:F7:79:A0:F2:2E:B9:BC:65:B9:6C:C6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       487C10E492013A256CAD4D436EB3FE28F78640D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Dec 2024 02:55:31 +0000
Certificate not after:    Mon 22 Dec 2025 03:00:31 +0000
Subordinate resources:    AS: 272645
                          IP: 201.216.104.0/22
                          IP: 2804:8678::/32
Validation:               Failed, certificate revoked on Sun 09 Feb 2025 17:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7c:10:e4:92:01:3a:25:6c:ad:4d:43:6e:b3:fe:28:f7:86:40:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 23 02:55:31 2024 GMT
            Not After : Dec 22 03:00:31 2025 GMT
        Subject: CN=9C050C4A1C621DE791F779A0F22EB9BC65B96CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d5:69:cd:4a:90:c5:89:8e:e2:1a:03:08:6d:
                    de:b2:99:24:ba:e8:70:0f:91:16:07:f9:b6:92:2f:
                    a1:c0:25:f7:5f:30:ed:74:c8:51:44:13:94:e1:7c:
                    73:a5:3c:ea:0e:27:f6:de:3a:dc:42:7c:35:0e:6c:
                    54:ff:ad:ea:0d:5d:7b:86:8c:55:50:71:1b:b8:d0:
                    ae:d1:08:11:38:5d:96:cc:82:45:27:00:f4:a8:b6:
                    a5:76:80:3d:60:d1:28:df:0f:24:0c:47:c1:75:52:
                    c7:7a:1a:67:3c:84:2d:31:55:fa:a7:b2:69:f5:de:
                    b5:1d:4b:11:25:d1:2a:4e:85:03:ac:e7:8c:5d:6c:
                    07:2a:de:35:7e:9d:ea:81:de:45:74:cf:15:14:6e:
                    0e:2e:7c:8f:68:52:bc:28:df:63:42:8f:f0:a0:33:
                    fc:ba:00:e3:7a:93:13:29:3c:22:36:83:6e:b9:ed:
                    c6:63:26:1a:b0:88:19:c0:d2:79:b5:4d:4d:d5:e9:
                    3e:71:ef:91:ea:98:a3:e3:98:8d:ed:e3:f2:5b:e0:
                    a3:e5:e2:57:e3:b6:0a:4f:1f:3d:9b:7d:76:f8:18:
                    7f:c2:44:02:82:bc:24:1f:a2:bd:5f:c2:13:a3:8c:
                    bb:a5:9d:4a:37:4b:50:05:2e:4d:9d:61:36:03:64:
                    f5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:05:0C:4A:1C:62:1D:E7:91:F7:79:A0:F2:2E:B9:BC:65:B9:6C:C6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.104.0/22
                IPv6:
                  2804:8678::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272645

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:11:01:dc:99:e3:84:75:6c:62:5f:f2:9f:f0:28:3d:50:
         9e:24:04:87:b9:99:b5:8d:d0:5a:3a:bc:47:27:8e:4b:58:9d:
         f7:df:66:6e:29:2b:6d:4f:74:f4:6c:c9:2d:1f:d1:d7:2e:24:
         7d:4d:9e:0a:2f:50:6d:19:6f:b8:f8:9a:36:10:64:6b:15:16:
         97:e3:f4:39:d8:b9:9a:bf:a1:bd:3e:c7:bf:6b:d3:29:e9:b9:
         a9:e7:79:a3:a0:18:d8:0d:af:1b:c2:f6:d9:5d:9c:c0:83:ed:
         6a:a5:bc:ec:37:b8:28:a8:1b:29:6b:0c:2d:da:d2:4c:dd:a3:
         c3:b6:b8:73:d8:9d:c1:a4:9b:56:ef:be:bc:a0:42:68:6c:55:
         e8:d8:db:84:ec:d9:eb:98:a9:78:d4:0b:79:f6:cf:72:70:24:
         60:37:f4:ea:28:d0:98:e3:42:ad:e6:01:09:6c:5b:39:7c:84:
         62:74:d5:d5:97:40:27:a8:67:41:90:fc:a4:01:84:ce:64:3a:
         e5:44:d8:19:42:b2:b5:fb:8d:48:8e:7e:9c:8c:9d:8e:4a:93:
         a8:96:90:f9:b3:3b:bd:6b:22:a3:01:aa:a0:70:ba:91:ae:14:
         dc:9c:3f:50:a2:01:e5:95:b9:b8:2c:96:5a:d6:ec:4b:77:bf:
         eb:a5:1e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:08:08 2025 by rpki-client