Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D2568211B5DA60BB77462DB5E1209EE0F6A93089.cer
File:                     D2568211B5DA60BB77462DB5E1209EE0F6A93089.cer (raw, json)
Hash identifier:          23oZZNYZxz6OJYM7MFQrocLKOqou95yepM8EdLE/rdk=
Subject key identifier:   D2:56:82:11:B5:DA:60:BB:77:46:2D:B5:E1:20:9E:E0:F6:A9:30:89
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       772E0575777651276E0B8146A99FD55783462DC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/D2568211B5DA60BB77462DB5E1209EE0F6A93089.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jun 2024 18:27:48 +0000
Certificate not after:    Tue 24 Jun 2025 18:32:48 +0000
Subordinate resources:    AS: 271634
                          IP: 179.0.108.0/22
                          IP: 2804:7e98::/32
Validation:               Failed, certificate revoked on Tue 10 Dec 2024 17:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2e:05:75:77:76:51:27:6e:0b:81:46:a9:9f:d5:57:83:46:2d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 25 18:27:48 2024 GMT
            Not After : Jun 24 18:32:48 2025 GMT
        Subject: CN=D2568211B5DA60BB77462DB5E1209EE0F6A93089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:ab:e1:51:81:23:c1:66:66:0c:cb:a5:38:
                    1b:8f:f2:32:ad:3a:17:9f:4c:00:a2:0c:87:18:d8:
                    67:53:d7:24:d2:f5:95:9d:01:f1:23:7c:4d:4e:2f:
                    d4:b3:1f:8e:a2:f0:41:4d:87:8e:49:20:8b:34:cf:
                    45:b6:d2:86:b6:ce:c0:47:bf:91:dc:98:bb:1a:1d:
                    a8:93:6a:5c:f8:37:88:dc:5b:88:83:6e:8c:5b:59:
                    f7:0c:7d:29:46:bf:5c:e3:7d:ee:02:1b:96:b4:03:
                    61:8d:1b:83:1e:ff:cd:e9:95:32:e0:71:ab:db:32:
                    f8:cc:13:66:8c:47:20:b6:53:f3:50:19:0e:c8:24:
                    eb:96:b5:d0:c4:8e:fa:cd:5d:08:53:0c:3e:7e:db:
                    4e:23:44:46:88:7c:09:6c:d7:d8:7e:e7:09:30:ae:
                    97:67:d9:7f:c6:91:87:70:82:46:01:61:33:04:a0:
                    77:9e:ca:5a:2e:c6:15:18:4e:cb:04:52:11:94:35:
                    e6:e9:3d:82:5f:30:92:d9:05:06:5b:4c:a3:c6:72:
                    80:e2:35:fb:c5:71:c0:72:e9:8f:9d:3c:5a:aa:83:
                    66:47:f5:c4:bb:92:ff:9a:d2:b5:da:46:03:5b:35:
                    bc:04:0f:5b:f8:39:63:64:7d:4c:af:5c:fd:db:02:
                    a1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:56:82:11:B5:DA:60:BB:77:46:2D:B5:E1:20:9E:E0:F6:A9:30:89
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/D2568211B5DA60BB77462DB5E1209EE0F6A93089.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.108.0/22
                IPv6:
                  2804:7e98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271634

    Signature Algorithm: sha256WithRSAEncryption
         a0:5b:3d:a3:ff:e2:02:af:06:62:2f:f3:47:9c:7e:d2:f9:3e:
         65:0a:9d:54:10:40:a5:1c:cf:f2:90:30:4c:44:cb:14:62:67:
         a5:db:f4:eb:26:57:fd:df:c0:ce:7d:0e:56:b8:20:6d:53:0c:
         74:1b:67:ab:c4:f2:0a:14:fb:07:64:8c:d5:32:0f:93:a3:5f:
         79:ec:a7:83:9c:b3:dc:25:05:01:84:bb:8a:65:06:99:f1:81:
         ad:32:83:eb:87:98:4a:25:74:f1:57:59:eb:2b:26:d0:10:5c:
         81:90:a6:d9:30:a2:63:a1:2b:35:89:96:ff:60:38:db:71:ff:
         c2:47:8c:d0:2d:3e:5d:7a:72:85:a1:b2:ad:a8:f4:f4:11:1a:
         71:ff:6b:62:91:ff:b6:49:5c:90:4a:1e:a9:43:f7:91:37:fa:
         0b:99:56:4b:44:c2:d4:29:de:d4:69:70:71:63:ac:36:38:ec:
         20:f4:96:62:3c:ef:c9:ab:86:d0:94:00:87:9e:49:b3:b7:ab:
         3c:0d:43:ba:06:d5:04:07:3e:db:d3:f7:e2:d0:39:f7:35:42:
         4f:39:2e:4d:6a:84:0e:22:59:48:88:a6:37:44:31:44:0f:92:
         3a:9d:59:39:78:ad:b3:86:ea:69:ec:74:3c:62:39:00:5a:22:
         2a:91:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:35 2025 by rpki-client