Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A83552DD491BD00AFE7312837A02580BDFA873A3.cer
File:                     A83552DD491BD00AFE7312837A02580BDFA873A3.cer (raw, json)
Hash identifier:          GtfG1xSm+mvwQh8kySwqcZ7pBr4cQiP729C7WlFqF8w=
Subject key identifier:   A8:35:52:DD:49:1B:D0:0A:FE:73:12:83:7A:02:58:0B:DF:A8:73:A3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       783AE164B600BF08C8D44CD6D3F03831520DC0D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A83552DD491BD00AFE7312837A02580BDFA873A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Jan 2025 14:14:26 +0000
Certificate not after:    Sat 03 Jan 2026 14:19:26 +0000
Subordinate resources:    AS: 61756
                          IP: 131.100.72.0/22
                          IP: 2804:1be8::/32
Validation:               Failed, certificate revoked on Thu 16 Jan 2025 16:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3a:e1:64:b6:00:bf:08:c8:d4:4c:d6:d3:f0:38:31:52:0d:c0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  4 14:14:26 2025 GMT
            Not After : Jan  3 14:19:26 2026 GMT
        Subject: CN=A83552DD491BD00AFE7312837A02580BDFA873A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:cf:21:05:bd:bc:79:d2:a5:ee:29:25:b9:
                    15:6c:0e:5f:e5:42:24:d0:7b:60:be:31:18:74:c9:
                    fe:13:fd:e1:d8:2a:77:52:3b:ed:23:25:61:6e:df:
                    5d:59:d9:9f:85:db:e0:fa:2a:62:38:6e:8e:8f:1f:
                    4d:6f:40:9a:a6:4e:56:30:c0:4f:f1:ba:2d:3c:45:
                    46:fd:a8:37:46:6f:cb:b0:9f:11:b6:8b:a7:05:3c:
                    c3:51:4d:2c:dd:00:20:9d:bc:8d:0f:4c:44:57:c2:
                    ee:0a:ce:b7:f8:5d:ad:fd:3a:07:b1:fc:1e:2e:80:
                    f9:09:73:29:7e:48:0b:97:7c:42:6a:e8:05:ce:be:
                    df:6b:1f:a0:94:f1:21:b5:31:ec:9e:65:f6:67:fa:
                    b2:d4:bc:3f:df:f2:7c:1c:cc:a3:6f:f1:ec:98:e6:
                    a2:f8:18:bc:aa:35:bc:50:be:1b:f1:b2:bb:bc:f8:
                    a9:20:c0:98:0f:03:4e:fe:8c:e7:61:3b:8a:97:cc:
                    9e:72:5e:45:73:6d:d3:13:8d:2a:6a:7a:fd:f7:d2:
                    5f:e2:9c:1a:36:53:24:c3:17:bb:5b:7e:14:3b:a2:
                    78:8f:d8:12:a9:ff:a1:bf:c6:a0:0e:3e:31:1e:bc:
                    05:1a:fc:86:69:98:74:b9:27:53:35:3c:c8:35:19:
                    34:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:35:52:DD:49:1B:D0:0A:FE:73:12:83:7A:02:58:0B:DF:A8:73:A3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A83552DD491BD00AFE7312837A02580BDFA873A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/22
                IPv6:
                  2804:1be8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61756

    Signature Algorithm: sha256WithRSAEncryption
         a0:2e:78:a6:45:24:65:e9:22:5e:29:23:72:68:93:3f:ef:47:
         90:f1:7c:c5:a4:83:ed:59:ee:cd:74:34:be:e6:5c:1c:5d:96:
         ef:23:51:9a:3e:d6:c8:5e:bd:b8:47:f5:83:de:21:5f:7b:f9:
         8d:1b:83:95:99:f3:b4:e3:70:06:7f:6a:93:1f:a3:1a:4a:28:
         f7:7c:b2:c2:6e:d9:b8:e4:e8:05:3a:57:57:71:83:a3:b7:5f:
         76:00:3d:76:e3:67:fd:4e:50:52:bc:95:cc:92:ba:86:aa:ed:
         e1:53:6f:4e:d9:e3:e7:2b:f9:b4:58:ea:ae:8f:a1:75:0f:ea:
         11:83:e4:85:84:e2:fe:f2:0f:de:fc:ff:9d:98:64:7d:da:80:
         17:3a:98:27:67:b0:95:4a:91:79:7a:0e:b6:e0:ef:5b:6b:3a:
         34:60:c7:0a:f8:5b:20:8a:1b:ab:52:cc:02:a1:40:b0:52:b2:
         8c:df:5b:3d:6c:98:b6:7a:e7:39:35:74:87:26:d2:61:1f:68:
         61:37:7c:c2:41:03:3b:e1:16:8c:31:99:62:2b:8b:46:99:33:
         b7:7a:cf:10:da:d2:17:ff:e7:21:38:65:b5:e0:23:ad:0c:a0:
         6d:53:b3:e7:5e:f2:dc:31:e7:7d:e3:13:97:b8:8f:86:2f:3b:
         82:80:5a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:05 2025 by rpki-client