Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DDF13098A1638513ADF14ADA12869BB266EDED56.cer
File:                     DDF13098A1638513ADF14ADA12869BB266EDED56.cer (raw, json)
Hash identifier:          ZCW24pCA79HwmocHyo8tdfm+7gZRA/IHBIF2jMVcYiI=
Subject key identifier:   DD:F1:30:98:A1:63:85:13:AD:F1:4A:DA:12:86:9B:B2:66:ED:ED:56
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D3067A1243AFCE6D46757FB5A12BC25491A9E0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4jrtfYJLdofHPHdadATDgM4dwhki3YPDoqyddCU88e52/0/DDF13098A1638513ADF14ADA12869BB266EDED56.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4jrtfYJLdofHPHdadATDgM4dwhki3YPDoqyddCU88e52/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Jan 2025 20:09:32 +0000
Certificate not after:    Thu 08 Jan 2026 20:14:32 +0000
Subordinate resources:    AS: 268466
                          IP: 45.161.160.0/22
                          IP: 2804:51a0::/32
Validation:               Failed, certificate revoked on Thu 16 Jan 2025 06:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:30:67:a1:24:3a:fc:e6:d4:67:57:fb:5a:12:bc:25:49:1a:9e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  9 20:09:32 2025 GMT
            Not After : Jan  8 20:14:32 2026 GMT
        Subject: CN=DDF13098A1638513ADF14ADA12869BB266EDED56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:a0:ce:09:30:14:4f:aa:a7:ef:02:06:44:
                    dd:2b:eb:7f:e1:70:11:0b:db:2b:ef:3b:99:51:fa:
                    b0:c5:6e:5a:5d:b4:a1:60:c1:4d:bb:ac:12:b8:3f:
                    40:dc:dc:9f:56:10:fe:b0:70:bf:52:7a:87:a0:03:
                    1f:25:ab:54:d0:b8:8b:3d:3c:e6:02:90:c4:ab:4e:
                    55:f6:b6:d7:4f:8d:ba:2f:ce:df:8e:a0:13:5b:bc:
                    3d:98:71:f2:ca:05:1a:3c:be:8e:92:f4:c0:89:da:
                    4f:4c:a4:bb:1d:b8:ec:6d:b2:e0:15:59:4d:ea:74:
                    ac:e7:7c:c4:46:d5:83:64:e2:66:c2:76:cb:e4:2d:
                    34:36:c6:e2:47:e2:ca:72:a6:7e:9f:b8:17:75:77:
                    50:df:46:4d:4a:71:ed:5f:a7:99:fe:ac:a7:01:46:
                    b7:45:a7:19:ce:12:12:a2:0f:4f:73:da:93:c8:c6:
                    8c:4b:10:9f:68:d4:1d:88:f8:94:ae:23:a1:1c:52:
                    82:ef:94:4e:2c:f3:3d:5e:65:af:ed:7f:15:11:b4:
                    fe:f9:cf:68:64:5b:8b:e4:f9:32:0e:3d:42:32:3e:
                    c5:5d:6b:bb:24:21:8d:2a:c2:dd:08:86:5a:f7:3b:
                    8d:02:da:1f:6c:ab:e9:fc:9e:e1:d8:f4:5a:d5:75:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:F1:30:98:A1:63:85:13:AD:F1:4A:DA:12:86:9B:B2:66:ED:ED:56
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4jrtfYJLdofHPHdadATDgM4dwhki3YPDoqyddCU88e52/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4jrtfYJLdofHPHdadATDgM4dwhki3YPDoqyddCU88e52/0/DDF13098A1638513ADF14ADA12869BB266EDED56.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.160.0/22
                IPv6:
                  2804:51a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268466

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:f2:4f:48:b3:05:1a:51:ec:5f:fc:cb:b8:bf:fe:d3:c7:
         ef:29:58:e2:b6:57:de:61:af:8e:ca:56:5b:ef:d4:8f:06:46:
         82:f0:9e:cd:20:e3:5b:2e:ad:fd:27:d1:3f:1a:a7:4f:d1:f3:
         70:03:00:a9:d4:2f:e2:79:35:da:1a:af:5c:be:25:96:0a:84:
         1b:fd:78:28:50:37:fb:3a:34:91:ef:c4:ef:5b:0b:7f:a7:9b:
         65:08:cf:65:0a:7b:4b:b5:f5:94:10:e6:e3:b8:94:e8:42:ba:
         e7:fd:15:fb:50:76:e5:e3:c9:31:e1:75:dc:89:90:48:2e:49:
         cf:e7:25:df:50:e0:4c:7c:19:d2:ac:58:fe:cc:6d:9f:fb:b4:
         35:07:13:c1:d6:69:de:54:c7:63:50:e0:58:57:01:9e:c4:e0:
         28:d0:cc:7b:dd:63:a8:7e:fe:63:44:aa:e4:5f:71:eb:00:b2:
         1f:9d:c1:87:e9:06:14:3c:0e:62:bb:bb:25:4d:14:53:4f:0c:
         b1:2b:54:46:f9:64:9e:a0:a9:05:e1:cf:51:ba:d0:10:71:36:
         32:af:28:58:8c:94:85:99:95:1f:38:99:ac:40:d3:2d:ec:0b:
         e8:68:46:ca:90:e2:1f:ab:d3:5b:be:13:5e:d0:e4:46:63:ef:
         c8:c7:b5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:33:24 2025 by rpki-client