Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9FC891638522D1DF8FFBB3CB155F0717F8A0091F.cer
File:                     9FC891638522D1DF8FFBB3CB155F0717F8A0091F.cer (raw, json)
Hash identifier:          t/6PheqgMY6mT0qVDrWpSKsLyV95MNxARcGC+fY65q8=
Subject key identifier:   9F:C8:91:63:85:22:D1:DF:8F:FB:B3:CB:15:5F:07:17:F8:A0:09:1F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18A39D0D4F8C8951A8461D5BCB14E8B5F321BE63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/27RnVyBwmShUeQLQ1NwGQMwrWmuJdjd7LsTTJdEpi99q/0/9FC891638522D1DF8FFBB3CB155F0717F8A0091F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/27RnVyBwmShUeQLQ1NwGQMwrWmuJdjd7LsTTJdEpi99q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Mar 2025 18:16:01 +0000
Certificate not after:    Mon 02 Mar 2026 18:21:01 +0000
Subordinate resources:    AS: 264043
                          IP: 143.137.200.0/22
                          IP: 2804:29e8::/32
Validation:               Failed, certificate revoked on Mon 31 Mar 2025 09:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a3:9d:0d:4f:8c:89:51:a8:46:1d:5b:cb:14:e8:b5:f3:21:be:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  3 18:16:01 2025 GMT
            Not After : Mar  2 18:21:01 2026 GMT
        Subject: CN=9FC891638522D1DF8FFBB3CB155F0717F8A0091F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:d4:a8:2e:af:dc:82:d8:2a:fb:96:fd:4a:
                    72:51:a6:b8:2d:70:1e:ce:0b:69:fb:04:51:c4:5a:
                    0d:f0:79:a6:aa:cf:0b:19:11:aa:7b:dc:b6:07:23:
                    76:44:3a:8e:9a:06:97:22:6f:e4:15:33:a7:c5:e2:
                    f7:a0:76:2f:51:00:94:a9:f1:d8:d6:27:6d:32:88:
                    60:4b:d7:a0:4e:de:45:e7:58:0b:03:c9:fe:52:c7:
                    17:44:19:78:ea:47:c3:b6:e7:78:24:3d:44:e7:96:
                    56:4e:61:79:4d:7f:69:08:c8:94:96:6b:a9:a1:1b:
                    22:5d:6c:32:92:ca:63:e9:76:e9:05:8b:55:b6:9a:
                    23:25:0f:ad:93:ff:06:91:48:b5:08:e3:a8:8c:08:
                    9c:4c:22:fa:43:ed:e7:1d:52:b4:98:e8:c6:67:7d:
                    9d:30:d8:fc:b9:77:94:47:f7:a4:23:c6:39:12:9f:
                    f4:9b:8a:2d:78:52:2d:03:18:27:72:6d:3f:0d:22:
                    95:35:be:a3:aa:89:45:64:be:ee:b0:ac:e2:f3:72:
                    38:32:e6:53:17:b5:f6:c4:92:24:7b:6e:ae:52:58:
                    71:b9:53:db:50:bf:5e:e2:77:d3:d4:a0:ed:ce:9a:
                    3d:c0:53:17:46:24:3b:b8:45:96:68:dc:2e:7a:15:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:C8:91:63:85:22:D1:DF:8F:FB:B3:CB:15:5F:07:17:F8:A0:09:1F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/27RnVyBwmShUeQLQ1NwGQMwrWmuJdjd7LsTTJdEpi99q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/27RnVyBwmShUeQLQ1NwGQMwrWmuJdjd7LsTTJdEpi99q/0/9FC891638522D1DF8FFBB3CB155F0717F8A0091F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.200.0/22
                IPv6:
                  2804:29e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264043

    Signature Algorithm: sha256WithRSAEncryption
         96:ab:07:77:1f:a3:31:37:4e:05:20:8e:3a:7a:6c:c8:c1:07:
         4f:ae:f0:66:8e:65:0f:e9:30:34:5b:e7:16:e5:a7:ed:23:9e:
         43:68:ea:b4:12:12:7d:b1:00:5a:f6:4f:52:98:51:57:20:19:
         0e:b5:82:76:bc:78:3f:cb:25:81:1d:32:43:c9:21:86:fe:fa:
         e3:7d:4b:f1:cc:9d:e4:ed:36:87:eb:c8:30:d5:f1:d2:61:32:
         13:d6:56:25:5a:44:c8:33:5e:b6:e6:09:07:8f:9c:d9:a2:b9:
         46:3b:6b:14:e0:f4:68:5b:98:db:98:6f:3d:d2:b9:10:fe:af:
         f8:15:fa:c2:02:48:62:6e:a7:95:a2:2f:a2:99:59:8e:72:17:
         e4:07:ad:96:b9:0e:af:d7:84:fb:36:da:d1:a3:5a:8a:9a:2e:
         2e:c7:ac:a7:77:b5:cb:47:7f:77:27:b2:7f:44:34:51:b7:f4:
         e7:7d:a0:2f:1f:4a:5e:65:ae:f0:e1:77:f2:64:31:73:e3:17:
         d2:6b:fe:8a:bc:3b:29:41:cb:14:e2:c5:93:e6:3a:5d:a6:6e:
         ac:10:d5:7c:75:bb:aa:fd:07:81:d1:4d:e1:6d:e7:40:83:0e:
         4e:7b:73:aa:cb:56:fd:6c:ba:96:10:a1:30:e6:69:e6:2e:33:
         de:17:8f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:30 2025 by rpki-client