Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D16F8CC6962D7B1B6799110DF0CCFCC9A7AF2C8C.cer
File:                     D16F8CC6962D7B1B6799110DF0CCFCC9A7AF2C8C.cer (raw, json)
Hash identifier:          nfuspPh94h1G41wekTpk44Dxf/0zZpbCcHiMp6pG9x4=
Subject key identifier:   D1:6F:8C:C6:96:2D:7B:1B:67:99:11:0D:F0:CC:FC:C9:A7:AF:2C:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       07A0F79A46263B405A173772458B6A474609AED0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/D16F8CC6962D7B1B6799110DF0CCFCC9A7AF2C8C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 07 Dec 2024 23:18:23 +0000
Certificate not after:    Sat 06 Dec 2025 23:23:23 +0000
Subordinate resources:    AS: 271208
                          IP: 179.49.136.0/22
                          IP: 2804:77ec::/32
Validation:               Failed, certificate revoked on Sat 28 Dec 2024 02:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a0:f7:9a:46:26:3b:40:5a:17:37:72:45:8b:6a:47:46:09:ae:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  7 23:18:23 2024 GMT
            Not After : Dec  6 23:23:23 2025 GMT
        Subject: CN=D16F8CC6962D7B1B6799110DF0CCFCC9A7AF2C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f0:51:27:a3:33:f9:53:c4:50:84:6b:e1:4d:
                    c2:fb:53:4d:9f:75:24:2d:38:68:d8:64:93:47:fe:
                    dc:98:55:73:13:d5:7c:6e:99:ca:41:2b:d8:aa:58:
                    ec:c6:3c:81:97:21:a1:3e:bc:c5:d0:30:d3:80:f0:
                    ca:08:7d:f0:51:fa:4e:b7:d2:9a:ca:91:46:e9:f2:
                    c4:df:70:ea:b6:3f:58:2f:3c:80:50:30:40:49:f5:
                    c1:46:26:bc:55:a2:37:93:b2:d4:d9:15:b5:d8:bf:
                    6f:00:4a:74:8c:1e:f7:fa:74:48:79:ac:dd:df:e1:
                    10:5d:5f:a3:6f:f2:c5:71:2f:89:a1:66:aa:ca:97:
                    a0:1a:84:d2:40:13:10:bd:fc:6b:9b:e0:dd:8c:bd:
                    04:42:6e:ae:51:56:8d:b8:36:5b:b6:47:c1:ad:c5:
                    0b:91:d7:69:44:48:69:d1:3e:81:ae:d7:6d:c8:c9:
                    85:76:0c:7c:2e:62:46:6c:f7:9b:5b:52:55:08:45:
                    db:e2:a2:da:65:2a:1c:5d:c6:76:c9:58:30:40:b7:
                    74:e5:50:78:d2:a7:b7:96:9b:1d:bb:3e:5d:67:a5:
                    2f:ac:2f:1a:08:19:8e:8b:4d:b1:d0:36:e7:00:17:
                    97:a3:65:1f:cd:23:d3:81:ab:84:67:95:12:c5:a8:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:6F:8C:C6:96:2D:7B:1B:67:99:11:0D:F0:CC:FC:C9:A7:AF:2C:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/D16F8CC6962D7B1B6799110DF0CCFCC9A7AF2C8C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.136.0/22
                IPv6:
                  2804:77ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271208

    Signature Algorithm: sha256WithRSAEncryption
         b3:d3:72:e3:02:c7:89:41:c2:8c:e8:cd:9c:46:37:f8:19:0e:
         1f:7c:eb:ce:26:12:81:48:ce:4b:07:3d:ae:ca:06:75:31:fd:
         4e:02:9c:c8:9a:91:87:3a:5d:f3:63:76:42:53:8f:b3:25:32:
         e2:aa:66:1f:9d:7d:12:e0:f3:b1:22:31:a6:b1:9e:51:49:37:
         32:b4:48:9f:dd:d1:7c:bc:c5:3d:37:ae:e4:81:99:f1:1d:db:
         14:5c:ea:dc:a4:24:0f:4a:0b:a7:ac:4e:0c:ff:2a:ba:d8:a3:
         da:17:6a:2f:a0:bd:97:a9:b3:ec:23:c1:e5:40:42:b7:91:2b:
         70:68:b9:e7:ea:c8:7e:77:89:84:e7:be:53:38:3d:06:34:e2:
         de:6b:a6:cb:9e:1a:a0:ba:ac:96:aa:97:d7:12:64:34:3d:ee:
         93:58:8a:4e:68:ad:a4:af:37:86:15:25:25:17:2f:d5:dc:4b:
         9e:79:0b:c2:34:55:b5:f4:7c:9e:d6:49:77:59:98:2c:34:18:
         a3:57:c8:d4:90:cb:88:a9:45:a4:13:33:c4:cc:a3:a0:f1:59:
         36:6c:65:1b:08:af:e4:3d:ad:56:e1:24:ef:73:13:64:a3:03:
         1f:82:8b:30:8f:2c:7b:c0:dc:d6:8d:d7:bf:b9:dc:1e:2f:74:
         44:d5:78:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:14 2025 by rpki-client