Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.cer
File:                     CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.cer (raw, json)
Hash identifier:          sGI80Om5KBrz5yIj70VYrbXqiHUI0ka9OQcYZMwOkh8=
Subject key identifier:   CD:8C:8F:1F:67:0F:CC:ED:D9:D0:34:09:B0:D7:E7:C4:E0:98:D3:24
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1E672CCC8806565E825D5FE2FA0D11C8B11F73A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Dec 2024 13:08:55 +0000
Certificate not after:    Thu 25 Dec 2025 13:13:55 +0000
Subordinate resources:    AS: 269163
                          IP: 45.181.24.0/23
                          IP: 45.181.27.0/24
                          IP: 2804:6060::/32
Validation:               Failed, certificate revoked on Tue 21 Jan 2025 10:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:67:2c:cc:88:06:56:5e:82:5d:5f:e2:fa:0d:11:c8:b1:1f:73:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 26 13:08:55 2024 GMT
            Not After : Dec 25 13:13:55 2025 GMT
        Subject: CN=CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:0f:2d:7f:22:da:02:cb:28:d3:f4:5b:dc:04:
                    a8:e7:48:5e:af:4a:d6:81:ea:14:10:ea:d0:9c:e2:
                    61:b7:78:59:40:6c:53:76:93:3a:52:dd:63:70:96:
                    2d:47:f5:88:0f:85:d9:cd:19:82:e3:a1:fa:06:3f:
                    17:c3:b7:cc:a1:b6:76:9c:c2:14:b9:5d:c7:2b:9f:
                    71:1f:44:bc:1d:15:59:25:a5:f0:dc:f3:58:2d:f5:
                    40:c9:67:37:aa:78:72:c8:38:a3:41:58:d9:fd:22:
                    d4:b8:a3:05:a3:21:e3:e2:6a:11:ea:c9:37:8a:1b:
                    fc:ec:dc:15:8b:a7:56:41:57:0e:41:8d:ce:d1:43:
                    24:8d:f6:72:1e:6e:22:64:90:b3:0b:d7:37:d3:ad:
                    dc:bd:c5:d9:db:b4:fd:8b:ca:07:d0:b7:56:e2:da:
                    e0:04:79:be:5e:72:f0:58:05:df:98:a2:12:93:df:
                    e9:ee:bc:84:43:fd:96:8e:d4:a6:c8:9a:aa:27:56:
                    9f:b1:55:60:b6:da:28:dc:f4:ce:14:34:ac:1a:7f:
                    49:69:4d:b7:e9:3c:25:49:9e:74:07:18:40:88:df:
                    8b:22:20:65:e9:85:cb:7e:68:48:c3:3f:be:fb:94:
                    6a:21:e1:0d:d1:c5:05:fd:0c:c7:e0:df:d3:60:3c:
                    5d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:8C:8F:1F:67:0F:CC:ED:D9:D0:34:09:B0:D7:E7:C4:E0:98:D3:24
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.24.0/23
                  45.181.27.0/24
                IPv6:
                  2804:6060::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269163

    Signature Algorithm: sha256WithRSAEncryption
         ae:38:70:77:05:12:e1:dc:50:13:5a:bd:f3:e7:ed:d0:ad:04:
         59:52:4a:78:fb:89:17:69:cf:a6:2d:6e:33:97:79:57:9c:1c:
         61:fb:c7:a9:02:1e:8d:6b:f0:61:2f:2a:ec:eb:e7:75:0f:10:
         d0:ef:1b:de:5b:ad:66:55:2c:ff:74:f5:7d:54:22:09:72:89:
         08:0a:7b:6c:11:a9:e8:2c:ab:e2:41:30:fd:15:d9:85:63:63:
         2d:f5:a5:b0:cc:5f:6f:f5:05:ce:74:55:7e:f6:c3:06:ec:96:
         95:f3:0d:eb:8b:01:35:f8:37:8e:7f:c3:24:fc:a1:66:1e:08:
         95:98:a4:26:b0:15:8d:e9:3c:93:3a:e9:2b:d4:19:2b:56:72:
         dd:9e:39:39:82:be:26:3f:68:0c:c4:d3:38:d2:3c:24:96:ee:
         ce:7b:ee:51:c9:c1:4c:d8:58:01:45:d1:00:00:58:e1:1a:7f:
         5e:98:ae:fe:ec:e4:5a:d3:9c:cc:dd:9d:ef:50:d8:fa:31:bb:
         c5:30:2d:7f:61:eb:69:b6:e9:f1:9b:50:c9:ba:5d:93:f9:c5:
         71:f5:26:44:78:63:10:f8:e6:79:da:27:c7:0d:43:56:38:12:
         af:f5:39:2e:d2:55:8c:b6:e9:ae:2f:f0:e2:8e:7d:eb:07:e5:
         bd:95:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:17 2025 by rpki-client