Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer
File:                     DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer (raw, json)
Hash identifier:          8ei1g6CkuUusUffy9XHtf+4kXHT3Z7f/D5r7mud2hIE=
Subject key identifier:   DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D27189AC714FDF0308A9761D2DE58B4BD6C7A3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Dec 2024 19:00:21 +0000
Certificate not after:    Fri 05 Dec 2025 19:05:21 +0000
Subordinate resources:    AS: 264246
                          IP: 138.118.56.0/22
                          IP: 2804:24e0::/32
Validation:               Failed, certificate revoked on Sun 15 Dec 2024 17:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:27:18:9a:c7:14:fd:f0:30:8a:97:61:d2:de:58:b4:bd:6c:7a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  6 19:00:21 2024 GMT
            Not After : Dec  5 19:05:21 2025 GMT
        Subject: CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:40:63:3c:b5:c8:0c:14:f5:1a:da:44:b2:
                    e9:8d:3e:74:23:58:be:a7:fc:30:2a:bc:6b:db:8a:
                    37:29:25:70:c9:ab:ee:49:c7:b3:8e:52:e5:e4:a9:
                    a9:10:ef:3b:cc:98:96:dd:52:4a:ec:7c:db:a5:a3:
                    de:c5:b1:3a:34:da:ab:2b:f1:72:91:5a:2a:22:e1:
                    c4:42:1a:f8:25:3f:b3:a0:76:cb:b6:7e:27:1c:bd:
                    0e:77:89:b5:b6:25:d1:16:9a:7c:3c:5b:d5:b2:99:
                    fa:58:22:a4:f3:b0:59:12:50:7c:67:50:b6:7a:af:
                    56:92:76:d8:09:58:31:c4:cd:1d:9f:df:63:7f:ed:
                    c0:b9:71:9f:87:41:db:0b:2f:31:45:a0:02:37:ad:
                    71:9c:43:cc:ff:86:eb:9a:02:81:b1:ae:bc:3b:86:
                    ce:d9:16:8c:b6:18:c1:b8:3a:64:c0:c7:9b:3a:57:
                    21:1b:79:12:eb:c0:c8:e5:cd:e9:27:ce:42:55:84:
                    25:c1:1b:45:56:ba:cb:b7:0c:c1:99:b7:6f:4f:d4:
                    1a:f8:26:88:28:f6:df:fc:63:76:fa:2f:e5:89:19:
                    cc:23:5b:81:f0:fb:ed:76:09:42:13:70:e8:01:53:
                    f5:a1:44:03:14:c4:e0:18:d7:41:1e:23:0d:15:70:
                    c8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.56.0/22
                IPv6:
                  2804:24e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264246

    Signature Algorithm: sha256WithRSAEncryption
         08:6e:83:55:30:80:6f:72:5a:96:07:a6:38:14:65:7c:38:98:
         e6:22:f4:c4:c1:36:99:57:1d:2e:8a:bb:18:b1:dd:7c:88:5d:
         fc:73:2a:13:c6:4e:54:90:29:3d:ae:d4:e0:14:0c:29:c6:c3:
         8d:67:50:c9:6e:d7:d7:e3:1d:c3:36:33:6f:ba:82:6e:cc:22:
         ed:df:9a:05:0a:50:d9:6d:2e:a5:49:21:e7:08:1d:fa:fd:a8:
         7b:3f:24:7c:2d:b6:d2:0d:7b:6e:15:07:d1:88:84:3d:69:84:
         e9:99:ef:7c:a2:10:2e:f0:2b:c7:2e:9d:e7:9a:d1:64:64:92:
         b4:ed:fd:da:ea:c6:ba:0d:52:fe:fb:ee:ba:e8:b4:9c:f1:3b:
         11:22:2a:1d:99:40:95:f1:3d:5c:4e:a8:bf:10:32:7a:35:39:
         4e:8d:3d:8f:4c:0f:a7:71:27:e6:45:f5:fa:96:30:19:03:a8:
         7b:11:8a:1d:b1:0e:a8:2e:1d:4f:31:e4:80:ef:d3:a8:a9:b3:
         dc:21:38:b8:6f:ae:31:84:a1:54:f3:31:e0:2c:00:ca:b7:b8:
         a7:1f:c7:e4:78:54:8a:bd:72:ea:68:13:3e:bd:ee:36:1c:29:
         00:3e:38:97:d4:9a:d6:31:ae:74:e7:7e:f2:4d:a2:99:c5:43:
         d2:f4:a3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:35 2025 by rpki-client