Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer
File:                     A5A5E563B461C001EA666874188010075B6CA70D.cer (raw, json)
Hash identifier:          lJWemYnNNDKKnTREXg1sdnmRu2qLcgM2XJFT6KbsQFw=
Subject key identifier:   A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       26C9C05CC5F7E2BBE9083B2CC04CE04C3DE29233
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/A5A5E563B461C001EA666874188010075B6CA70D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 05 Jan 2025 18:53:24 +0000
Certificate not after:    Sun 04 Jan 2026 18:58:24 +0000
Subordinate resources:    AS: 262503
                          IP: 45.181.228.0/22
                          IP: 167.249.168.0/22
                          IP: 177.66.192.0/22
                          IP: 177.91.52.0/22
                          IP: 2804:2be0::/32
Validation:               Failed, certificate revoked on Sun 26 Jan 2025 23:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c9:c0:5c:c5:f7:e2:bb:e9:08:3b:2c:c0:4c:e0:4c:3d:e2:92:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  5 18:53:24 2025 GMT
            Not After : Jan  4 18:58:24 2026 GMT
        Subject: CN=A5A5E563B461C001EA666874188010075B6CA70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:63:a3:c1:93:af:61:58:a2:ce:74:3b:57:
                    83:a8:90:ca:6e:0e:e8:4f:41:e5:8e:89:19:9e:cb:
                    71:ad:b7:4c:2a:f6:33:32:d9:3c:7c:1e:58:a5:d2:
                    e2:cf:86:88:a7:5f:0f:8f:19:b2:cf:fa:99:88:6a:
                    fa:ef:1b:af:9a:67:4b:44:da:6e:73:f8:af:76:ca:
                    60:12:80:22:8e:9f:92:38:b6:f9:27:92:72:1e:2c:
                    9d:a5:71:a7:0b:cb:77:0a:9c:4f:49:a0:a7:7b:8a:
                    27:61:7a:68:e6:8c:c5:59:2b:5f:c1:14:4e:c4:37:
                    0e:5c:bd:96:b6:c2:b5:95:71:8e:f7:1e:da:aa:a3:
                    39:10:a5:8a:1f:89:16:d0:8d:e3:ac:f5:d7:5e:20:
                    a1:35:1e:5c:98:20:ec:92:41:2f:a9:b6:78:25:d3:
                    9a:c3:f1:d2:11:35:75:94:1e:b1:47:64:11:61:a3:
                    35:3c:1e:3b:4c:35:77:a6:e8:9b:4c:ea:f5:a3:14:
                    ed:e4:c4:4a:80:53:d2:28:69:5d:87:c2:58:29:fe:
                    69:e8:f7:15:98:ba:cb:df:1b:e4:ef:65:20:4d:9a:
                    7c:45:f8:46:9b:98:11:02:33:7c:11:df:e8:a9:9e:
                    ba:d3:4d:d2:d5:7f:6c:2b:a7:0d:77:49:e9:68:9c:
                    bb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/A5A5E563B461C001EA666874188010075B6CA70D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.228.0/22
                  167.249.168.0/22
                  177.66.192.0/22
                  177.91.52.0/22
                IPv6:
                  2804:2be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262503

    Signature Algorithm: sha256WithRSAEncryption
         3d:e5:e0:0c:19:0f:04:5b:86:ba:86:a8:f8:5e:8a:4d:71:58:
         2b:dd:58:f4:f4:cb:66:d9:99:15:2b:73:3f:0a:0b:50:6a:50:
         50:e9:ae:a5:fe:f8:23:cf:27:7f:e5:54:7c:5a:74:dd:a6:ee:
         7f:84:cd:35:a7:94:9d:ed:8a:04:17:1b:10:1d:77:ae:e1:5b:
         bc:50:cd:7b:19:35:90:af:ce:7f:38:5f:51:fe:c3:4c:8e:68:
         e9:f1:7a:6a:72:e3:14:0f:04:50:d4:9c:58:93:98:65:42:e1:
         9b:e5:c6:b2:0e:cc:e5:91:de:f2:77:71:f0:d6:4d:13:4e:15:
         37:5f:2a:89:ff:ad:2a:36:ee:9b:f8:fa:b9:74:a0:95:27:43:
         ea:5d:7f:a2:b4:a5:81:4d:1b:8f:ba:f0:7e:7c:60:9a:2e:28:
         51:5e:fa:49:63:96:72:4c:5f:b3:d1:3d:c7:4c:06:64:d0:d4:
         92:f0:60:e1:7f:e9:d1:3b:2e:1a:42:1b:5c:ec:52:ea:98:70:
         03:a2:c3:b7:84:cc:0a:aa:c6:87:4d:27:34:b5:b1:e0:91:b1:
         16:ed:55:db:80:dc:e0:18:d0:9b:72:2e:82:6f:b9:cc:91:2d:
         eb:9b:79:b1:02:3e:46:58:5c:d3:a0:2f:ea:a1:f1:29:fc:66:
         8a:2b:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:43:01 2025 by rpki-client