Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BC2C84F1276E3BA78B7C89D74C95D8AF78D4C409.cer
File:                     BC2C84F1276E3BA78B7C89D74C95D8AF78D4C409.cer (raw, json)
Hash identifier:          lR6gyVBe5Fvo6Y7QssdEymhf0/AsXGIkC9Svgvf9/9Q=
Subject key identifier:   BC:2C:84:F1:27:6E:3B:A7:8B:7C:89:D7:4C:95:D8:AF:78:D4:C4:09
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       558ED1233360A232D3215B19055994B6785D9C03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/BC2C84F1276E3BA78B7C89D74C95D8AF78D4C409.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Dec 2024 18:55:50 +0000
Certificate not after:    Wed 03 Dec 2025 19:00:50 +0000
Subordinate resources:    AS: 61657
                          IP: 131.100.252.0/22
                          IP: 2804:1c80::/32
Validation:               Failed, certificate revoked on Fri 10 Jan 2025 18:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8e:d1:23:33:60:a2:32:d3:21:5b:19:05:59:94:b6:78:5d:9c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  4 18:55:50 2024 GMT
            Not After : Dec  3 19:00:50 2025 GMT
        Subject: CN=BC2C84F1276E3BA78B7C89D74C95D8AF78D4C409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:02:c3:de:22:41:2c:1d:c3:7e:af:40:7c:
                    a4:4e:8d:98:ea:b2:aa:12:26:a8:93:08:88:88:ed:
                    09:1b:74:78:bf:1f:47:69:e9:c4:c7:44:34:10:11:
                    1e:66:3e:e6:19:ff:4c:16:5d:cb:8d:5d:dd:f2:01:
                    32:1b:83:8b:80:88:aa:3d:6b:17:74:a0:4f:2e:4c:
                    6c:6e:ee:84:2f:cf:3c:e5:8f:b9:c1:16:8d:e2:4f:
                    97:e6:f7:0a:f2:74:15:39:5e:f7:20:67:61:6a:f7:
                    70:ff:35:9f:43:dc:06:38:49:83:ae:1e:43:37:6e:
                    1c:71:49:94:98:cf:30:ea:ad:1a:8c:74:f9:f6:1d:
                    c5:a6:fd:13:4b:b9:19:3a:60:c0:dd:0b:41:da:e2:
                    41:c0:da:4e:8c:73:ca:ce:65:9c:0b:f4:80:49:5b:
                    d0:ed:f1:d1:20:b1:63:12:a9:e7:57:25:be:89:ce:
                    7d:03:c3:38:49:e1:cf:a7:23:c8:ae:8b:e5:b1:dd:
                    e9:16:96:f7:c2:2a:cb:e5:93:db:b8:4e:e9:36:a5:
                    1b:c0:23:18:68:32:a8:1a:84:49:c4:07:44:f9:2b:
                    34:37:75:83:93:29:29:86:6d:f4:7d:f1:50:a6:ac:
                    c5:16:4e:d1:44:59:85:ba:2a:38:6e:41:e1:fa:b5:
                    eb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:2C:84:F1:27:6E:3B:A7:8B:7C:89:D7:4C:95:D8:AF:78:D4:C4:09
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/BC2C84F1276E3BA78B7C89D74C95D8AF78D4C409.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.252.0/22
                IPv6:
                  2804:1c80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61657

    Signature Algorithm: sha256WithRSAEncryption
         1a:f1:84:02:49:28:d7:10:bc:ec:f7:c1:b0:cf:9b:c0:8e:21:
         3e:60:10:a0:66:2e:38:36:14:6a:ac:c2:78:38:d3:a2:4c:3f:
         3d:da:3e:91:5a:e1:85:49:97:e1:7d:ca:f7:29:8e:bb:9b:88:
         0c:aa:51:69:7e:1b:07:5f:84:7a:77:a9:da:76:70:5a:08:10:
         cf:01:93:17:46:6e:84:86:73:82:2d:69:02:2e:2a:35:27:01:
         d6:28:ae:37:82:7f:df:56:e1:86:b2:8e:b2:19:e0:56:07:10:
         a4:6c:91:e8:60:f9:bb:f3:dc:76:a6:00:58:cc:98:c2:b8:42:
         5b:f6:1a:90:8e:f0:46:69:a9:c9:37:49:fa:c4:0a:2f:e4:6d:
         31:64:cf:91:8c:e6:db:c6:f4:2d:33:0a:ed:4a:81:20:d4:cf:
         47:85:53:0c:8e:22:56:28:14:cc:08:48:b8:2d:7b:89:97:5e:
         cd:fb:2e:94:b7:9e:c3:0c:0f:44:44:27:b5:f2:89:9e:c1:49:
         b0:7d:7a:68:69:a8:56:4a:5c:d1:87:76:f2:7c:10:33:22:1d:
         ac:9b:9a:27:e7:7e:ca:f6:82:26:6c:f0:a4:d7:eb:6c:28:bd:
         b1:02:ec:cf:2f:00:60:4d:25:3d:1c:66:67:b2:52:d2:2d:8a:
         6e:f8:d6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:52:44 2025 by rpki-client