Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6AC23F65ED5E489A22BDEDB300FBBF83742C594.cer
File:                     D6AC23F65ED5E489A22BDEDB300FBBF83742C594.cer (raw, json)
Hash identifier:          CfctkgfMF+5KUS+KbQkj0J1sJTCLsK6/DW7vi29UKbI=
Subject key identifier:   D6:AC:23:F6:5E:D5:E4:89:A2:2B:DE:DB:30:0F:BB:F8:37:42:C5:94
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1472EC4F73890B1618528E78702438E8ADECCB69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/D6AC23F65ED5E489A22BDEDB300FBBF83742C594.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Jun 2025 14:19:53 +0000
Certificate not after:    Wed 03 Jun 2026 14:24:53 +0000
Subordinate resources:    AS: 263165
                          IP: 191.52.248.0/21
                          IP: 2804:17b0::/32
Validation:               Failed, certificate revoked on Sun 08 Jun 2025 12:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:72:ec:4f:73:89:0b:16:18:52:8e:78:70:24:38:e8:ad:ec:cb:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 14:19:53 2025 GMT
            Not After : Jun  3 14:24:53 2026 GMT
        Subject: CN=D6AC23F65ED5E489A22BDEDB300FBBF83742C594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:ba:5c:f1:f5:c6:de:ca:3d:c8:a8:8b:7f:
                    29:9c:b6:d7:0d:19:9a:41:30:c2:d3:6e:18:d3:11:
                    8e:86:46:38:bd:3a:ea:ca:0c:34:44:63:93:fa:ef:
                    c4:c3:67:c1:98:28:af:22:b7:7f:50:ab:f0:ff:d6:
                    fd:24:2c:53:5c:96:df:05:db:0e:c9:23:53:97:8b:
                    dd:88:8f:e5:46:84:b5:e3:51:0c:57:43:88:7b:a1:
                    82:5a:c3:39:4f:ef:d5:77:25:f7:b8:75:8c:43:a8:
                    58:4c:56:4c:79:70:63:5d:29:5b:27:84:35:9d:b4:
                    a4:6a:b0:1b:2a:56:d1:91:2c:ad:41:03:e4:76:9e:
                    76:e5:86:32:ed:31:3e:ec:e5:cf:d7:07:da:1d:c1:
                    cd:0e:15:70:80:ec:71:77:79:75:71:df:a4:3f:42:
                    2c:7d:14:29:4f:0e:2c:d4:92:9c:8b:0c:ed:40:db:
                    9e:ac:a3:9c:70:75:76:78:fa:3c:d9:83:e7:26:51:
                    5e:b3:a1:00:c8:bd:f5:23:d7:7b:ca:12:93:8d:3c:
                    56:de:b8:19:18:8e:b2:65:a4:e5:70:eb:4c:56:56:
                    70:01:25:e0:6e:71:32:a4:66:d4:e8:4b:87:a0:83:
                    e2:66:8b:e5:fe:2e:fb:c1:39:86:a6:fe:29:a3:9b:
                    5a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:AC:23:F6:5E:D5:E4:89:A2:2B:DE:DB:30:0F:BB:F8:37:42:C5:94
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/D6AC23F65ED5E489A22BDEDB300FBBF83742C594.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.52.248.0/21
                IPv6:
                  2804:17b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263165

    Signature Algorithm: sha256WithRSAEncryption
         23:42:08:97:bb:4a:45:83:85:19:4c:49:6f:b5:e6:fe:76:02:
         b5:e3:0f:68:f4:ca:f1:62:05:af:07:f0:aa:a5:08:fa:7d:45:
         29:fa:91:5f:bc:84:ad:92:9e:d7:24:68:af:29:f1:11:f0:92:
         2f:0a:58:e6:15:c8:86:c5:62:76:b1:1e:66:fa:89:bc:36:ee:
         68:14:c9:be:4b:15:13:9a:ad:bf:51:12:53:b8:d4:92:63:90:
         d1:6c:97:7c:68:51:d6:77:9f:97:b6:4d:6e:12:2d:15:4e:61:
         6d:a1:3c:87:c1:0c:15:ad:af:1c:ab:12:f2:f7:91:fb:ef:0d:
         f5:7f:17:13:87:28:0b:5c:42:d2:78:14:93:41:1f:d1:b7:d6:
         98:0c:2f:c7:0b:90:d0:6b:ee:10:3c:0e:2c:d1:44:d5:d9:71:
         72:58:a5:91:96:53:4c:9e:a5:85:ee:57:b2:7f:6f:4a:c3:d9:
         d8:1a:18:36:35:9c:7c:6f:27:dc:54:17:84:55:c1:0e:46:81:
         a0:56:72:e2:8a:b4:bb:74:4c:22:4d:e1:17:be:7c:8f:1b:6d:
         a1:07:15:53:6d:2f:ba:c4:79:16:9c:f9:01:5a:f6:cb:77:d0:
         b1:6c:b2:ab:6d:b1:35:32:93:b0:4a:54:59:d2:e6:c6:31:c9:
         50:1a:6f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:18:13 2025 by rpki-client