Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C01E06AE731531A6330570ED75B507D6A9514B6A.cer
File:                     C01E06AE731531A6330570ED75B507D6A9514B6A.cer (raw, json)
Hash identifier:          Mn10Xa40PAbHwXhUmbLc/96o4RlRkGk8g+mOOPuNcC8=
Subject key identifier:   C0:1E:06:AE:73:15:31:A6:33:05:70:ED:75:B5:07:D6:A9:51:4B:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0A70029B4F0BC8D00F08E547F94965CB9FB54DE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/C01E06AE731531A6330570ED75B507D6A9514B6A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Nov 2024 16:43:52 +0000
Certificate not after:    Thu 27 Nov 2025 16:48:52 +0000
Subordinate resources:    AS: 265467
                          IP: 168.196.232.0/22
                          IP: 2804:3498::/32
Validation:               Failed, certificate revoked on Thu 30 Jan 2025 10:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:70:02:9b:4f:0b:c8:d0:0f:08:e5:47:f9:49:65:cb:9f:b5:4d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 28 16:43:52 2024 GMT
            Not After : Nov 27 16:48:52 2025 GMT
        Subject: CN=C01E06AE731531A6330570ED75B507D6A9514B6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:a4:32:fb:e7:40:9e:87:81:d5:a3:a8:b4:
                    7f:1f:13:49:a3:2c:5d:3e:35:ac:e8:69:1c:c1:8c:
                    89:8c:3b:58:d0:5e:1b:d6:fd:cd:5f:18:40:77:ba:
                    70:e2:2e:e4:0f:6e:83:9c:49:1a:a5:78:71:4f:2f:
                    5f:16:7c:80:24:2e:db:2f:a7:b0:bc:f0:d4:37:f0:
                    14:eb:2a:2d:7f:de:f6:6e:46:ac:19:f5:12:71:7f:
                    af:40:d5:a7:98:c0:f1:06:61:f6:54:2f:b0:06:c6:
                    b3:6b:24:53:15:9b:fa:ff:06:1b:18:d3:c4:8a:12:
                    49:2d:b9:c7:03:7e:6b:5e:50:54:22:d6:77:f2:be:
                    1c:f9:59:35:02:81:e0:3d:77:f4:9b:65:e8:5f:7d:
                    4b:be:64:fc:70:9d:a8:38:2e:f1:5d:9f:39:67:53:
                    d3:25:06:03:ef:14:46:84:35:8e:53:a1:91:36:41:
                    6c:f1:26:42:fb:c1:17:eb:db:be:34:52:e5:ab:69:
                    bf:c6:2d:f4:06:fd:de:f6:93:65:d4:0f:70:dd:92:
                    aa:2c:9b:03:cf:f5:09:74:4f:85:23:89:b5:b8:f7:
                    f9:c8:57:39:6a:81:37:59:f6:59:d8:6f:d7:eb:32:
                    a7:c1:bb:1f:b8:94:be:6d:fc:64:e9:f8:dd:f8:e4:
                    c6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:1E:06:AE:73:15:31:A6:33:05:70:ED:75:B5:07:D6:A9:51:4B:6A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/C01E06AE731531A6330570ED75B507D6A9514B6A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.232.0/22
                IPv6:
                  2804:3498::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265467

    Signature Algorithm: sha256WithRSAEncryption
         0f:fb:be:85:01:d9:1a:f4:b6:a7:27:8e:92:1d:d7:51:f1:83:
         66:ed:a9:5c:5c:78:15:57:cc:33:ba:de:96:4c:26:88:31:be:
         2b:91:f0:08:6e:f1:31:6c:de:3f:b7:87:2e:c5:cd:07:8f:61:
         08:ce:03:47:c1:6f:c9:60:72:5d:b7:d7:99:12:f9:0f:c6:32:
         70:74:ef:9d:e2:5e:df:a8:42:06:e4:35:8d:f4:e6:28:b4:86:
         f1:c9:02:5b:88:a4:53:89:17:c6:d0:71:c7:b7:87:52:e2:b1:
         d0:13:aa:da:93:cc:f3:7a:db:39:a4:59:73:4c:c1:f0:3d:ae:
         ae:f1:b2:58:95:62:51:21:ba:e9:2c:66:0e:81:51:29:89:25:
         a2:6b:53:29:78:a1:f7:6b:e2:08:b0:0a:31:e5:3a:78:98:55:
         13:f5:5b:0d:0f:76:9a:a7:9b:db:9c:4b:91:e0:c1:36:c4:a4:
         e5:a2:37:c6:e8:14:da:32:b4:71:43:83:b8:9a:74:64:a9:2b:
         2d:89:6a:da:f1:ad:bf:c5:2a:f0:91:33:ea:98:fb:2a:2f:73:
         81:64:c8:e8:11:32:5f:81:5a:e3:53:9a:c4:84:70:00:e9:02:
         c6:93:25:97:88:8f:0f:19:9d:8d:15:44:6b:b2:2a:0b:d0:52:
         8f:55:d1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:47:45 2025 by rpki-client