Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.cer
File:                     A5D7C61DBB9645C282D594045FD27D9E265B6A5F.cer (raw, json)
Hash identifier:          7w0+TFUWZ60WjwBwesIutUt9AX2J8OGWVun0gwS5wAQ=
Subject key identifier:   A5:D7:C6:1D:BB:96:45:C2:82:D5:94:04:5F:D2:7D:9E:26:5B:6A:5F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3249298D1BCD208CDC1D1930EE338DE1901677D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Jan 2025 16:20:32 +0000
Certificate not after:    Thu 15 Jan 2026 16:25:32 +0000
Subordinate resources:    AS: 61756
                          IP: 131.100.72.0/22
                          IP: 2804:1be8::/32
Validation:               Failed, certificate revoked on Sat 15 Feb 2025 11:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:49:29:8d:1b:cd:20:8c:dc:1d:19:30:ee:33:8d:e1:90:16:77:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 16 16:20:32 2025 GMT
            Not After : Jan 15 16:25:32 2026 GMT
        Subject: CN=A5D7C61DBB9645C282D594045FD27D9E265B6A5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:c1:ec:45:c9:ce:41:c2:13:a0:32:59:20:
                    83:0b:80:31:d5:99:2c:99:8c:b6:ea:c4:4e:8c:58:
                    c0:35:0e:b4:a0:bd:e4:50:21:35:c9:10:0f:af:ac:
                    90:0c:54:1e:9e:eb:0d:cb:91:ac:eb:25:23:ef:a2:
                    e7:89:0f:1a:61:c4:8b:42:fb:27:b6:59:82:0b:56:
                    ff:69:44:34:e3:9a:08:9e:96:2d:77:98:d3:ee:e0:
                    2a:80:d9:40:f6:ee:f3:c0:cc:ce:fd:cf:c5:20:44:
                    ea:ea:fb:8d:ee:4a:8a:f9:fe:0c:98:e1:25:4f:f0:
                    46:92:e9:e1:66:07:ab:3b:06:82:cb:d6:b5:bf:2c:
                    4d:ce:c1:1c:db:05:82:eb:24:04:29:de:a9:e6:40:
                    7b:26:3c:f6:2f:5c:f9:9e:34:75:c1:5f:b6:c6:46:
                    60:aa:c5:e1:36:e7:95:26:cc:37:83:24:54:c0:4b:
                    50:b4:84:24:8a:50:e8:a0:1a:73:a1:ec:66:56:4b:
                    35:07:23:b5:15:90:ed:72:82:06:5c:db:08:bd:1b:
                    eb:bd:20:d6:b7:86:5b:aa:78:d6:56:0b:0e:bf:6a:
                    6f:8e:df:71:97:86:83:e6:89:97:d1:3d:c6:14:aa:
                    59:31:eb:a3:81:23:46:dd:22:4f:c4:1a:f5:cc:65:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:D7:C6:1D:BB:96:45:C2:82:D5:94:04:5F:D2:7D:9E:26:5B:6A:5F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/22
                IPv6:
                  2804:1be8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61756

    Signature Algorithm: sha256WithRSAEncryption
         71:0e:14:5b:03:96:e3:e3:d9:5f:84:8e:55:73:8a:93:49:37:
         91:34:cd:e6:4e:3a:8a:de:1d:e6:df:9c:8d:2d:9a:45:71:bc:
         39:10:81:f8:4d:92:c2:d0:71:f9:04:0f:57:c2:ed:5e:db:5c:
         3f:36:1d:7a:b8:66:2e:62:06:55:83:84:4d:eb:35:0d:a3:d8:
         4f:db:b6:33:dd:24:4b:71:a5:d8:e5:5b:5c:f8:56:f7:13:2c:
         61:22:87:43:51:35:69:43:7a:61:f4:66:d8:ba:65:7e:04:da:
         3b:ca:de:26:35:73:7e:46:4b:73:1f:79:2c:75:a6:63:10:a4:
         c5:de:0c:a5:66:dc:5d:16:6f:6e:7a:3f:e8:ce:14:c2:6a:b9:
         4b:51:89:80:11:df:f9:db:fa:c4:ca:c6:ed:3f:3a:8f:a9:40:
         7c:e1:c1:51:28:c7:94:4f:00:af:2f:a6:d1:e3:8a:23:03:13:
         0f:81:9b:07:d5:3b:e1:90:91:e4:09:db:39:62:5c:b3:05:4b:
         81:ea:92:8c:b7:eb:c9:d4:80:b5:e2:cf:18:ca:e0:3b:88:a0:
         01:c4:d7:f4:f6:e5:48:15:a3:fd:7f:10:30:c4:f3:b9:69:f6:
         14:bc:43:40:fe:93:5e:66:8f:62:bb:d0:22:f4:fa:a2:74:42:
         a2:8f:42:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:07 2025 by rpki-client