Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D49897FBE2B5FD58B5978425C1E4E1BAB455FDB2.cer
File:                     D49897FBE2B5FD58B5978425C1E4E1BAB455FDB2.cer (raw, json)
Hash identifier:          euSXO+Pw5F2b35QBnnwV+s2rADoE9/vMAd/l2iG/CyM=
Subject key identifier:   D4:98:97:FB:E2:B5:FD:58:B5:97:84:25:C1:E4:E1:BA:B4:55:FD:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       68498FD8BFAFD48C937265A6260083361958CE15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/D49897FBE2B5FD58B5978425C1E4E1BAB455FDB2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 29 Jun 2024 16:40:07 +0000
Certificate not after:    Sat 28 Jun 2025 16:45:07 +0000
Subordinate resources:    AS: 263339
                          IP: 191.36.192.0/20
                          IP: 2804:1498::/32
Validation:               Failed, certificate revoked on Mon 13 Jan 2025 22:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:49:8f:d8:bf:af:d4:8c:93:72:65:a6:26:00:83:36:19:58:ce:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 29 16:40:07 2024 GMT
            Not After : Jun 28 16:45:07 2025 GMT
        Subject: CN=D49897FBE2B5FD58B5978425C1E4E1BAB455FDB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:db:21:fe:27:17:90:ba:23:24:f0:1f:c3:7c:
                    0c:40:13:7b:4c:1f:ec:18:df:0d:01:b8:91:55:d0:
                    08:74:d2:48:ca:9a:64:32:18:18:f6:72:ca:5b:a9:
                    a1:2b:9c:8c:5a:c3:7c:aa:90:ae:21:16:6f:bb:e8:
                    d8:cb:34:7e:c3:67:b8:29:f8:ce:9d:ac:c0:73:85:
                    e6:5a:6d:c7:a1:18:9c:a6:1f:04:b5:07:65:70:7c:
                    fa:bc:3a:8e:d3:c8:47:80:41:14:48:c7:33:a7:52:
                    bb:5d:e2:7a:5c:ad:89:af:bd:b8:f8:14:18:7e:f1:
                    13:7e:9b:fc:c2:f5:31:49:92:63:3e:d5:60:aa:a8:
                    f8:84:e8:2d:62:7a:dd:21:13:ab:ed:cb:4a:71:d8:
                    66:9e:05:d5:b8:f0:99:ec:35:b7:cf:bf:ce:24:70:
                    da:ed:92:93:bc:0d:02:47:8d:fb:50:51:81:8b:f8:
                    dc:0d:6d:7c:fa:f1:9f:2f:31:27:5c:60:5f:cc:ee:
                    c1:17:af:60:ed:dd:2a:2e:46:20:13:95:0f:a7:62:
                    ec:33:f0:0a:b5:bf:a6:d0:fa:51:d5:3d:49:c8:b0:
                    9e:9d:d1:2e:5c:6d:c5:e2:10:7d:f4:2b:4f:13:f8:
                    55:17:09:07:13:00:fd:84:cd:e2:d4:48:87:e5:2a:
                    6f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:98:97:FB:E2:B5:FD:58:B5:97:84:25:C1:E4:E1:BA:B4:55:FD:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/D49897FBE2B5FD58B5978425C1E4E1BAB455FDB2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.192.0/20
                IPv6:
                  2804:1498::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263339

    Signature Algorithm: sha256WithRSAEncryption
         6d:0d:0c:4d:cd:0f:88:64:7a:8e:da:cc:07:db:ba:a2:69:3e:
         75:d5:cd:19:60:ff:7f:78:10:c9:be:67:72:36:1a:9b:3a:55:
         4e:fb:f5:25:96:04:af:93:fe:06:29:2e:db:be:47:7d:63:67:
         38:8f:48:f8:0c:64:02:de:41:83:88:72:c1:b6:82:9d:c9:23:
         f5:40:3a:39:1f:5a:70:a9:ff:1a:0f:f1:ce:43:ef:09:46:27:
         bc:5f:25:14:68:44:fd:b4:18:31:77:3e:ea:25:da:1b:c2:cb:
         a2:b4:16:02:56:4d:7d:f7:55:99:bb:69:9e:69:41:b7:f1:44:
         77:15:35:b9:08:74:6b:dd:bb:46:39:2b:c5:56:69:65:dd:0f:
         a9:de:2b:9e:23:75:47:a5:e6:e4:bc:d9:5f:dc:ee:35:2d:6e:
         e1:4e:4a:01:20:c7:b6:3d:24:45:0e:00:47:0f:dd:86:80:5e:
         1b:f4:7b:9d:94:e0:9a:86:c5:bf:d9:e3:5f:80:cb:91:62:16:
         c4:b3:63:d9:60:a1:0b:75:04:7a:fb:88:59:87:e2:a8:4f:56:
         61:cd:b3:b4:b2:e8:bf:5e:2d:96:24:a2:de:a4:03:53:89:ab:
         72:39:73:a9:04:aa:79:ef:32:21:8d:0d:60:d4:ca:77:f0:bf:
         5d:04:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:10 2025 by rpki-client