Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E5410976DA8C8A05FEC3ADB9A4C3439D017D0B81.cer
File:                     E5410976DA8C8A05FEC3ADB9A4C3439D017D0B81.cer (raw, json)
Hash identifier:          dE7FDko7v4bTLKCDmxIBpfcdJZDB5DVN7is48+yphOo=
Subject key identifier:   E5:41:09:76:DA:8C:8A:05:FE:C3:AD:B9:A4:C3:43:9D:01:7D:0B:81
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       477DF133565F4811E9FCE9D0C7E879217E69775C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/0/E5410976DA8C8A05FEC3ADB9A4C3439D017D0B81.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Feb 2025 21:28:27 +0000
Certificate not after:    Thu 12 Feb 2026 21:33:27 +0000
Subordinate resources:    AS: 266519
                          IP: 170.245.8.0/22
                          IP: 2804:3908::/32
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 07:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7d:f1:33:56:5f:48:11:e9:fc:e9:d0:c7:e8:79:21:7e:69:77:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 13 21:28:27 2025 GMT
            Not After : Feb 12 21:33:27 2026 GMT
        Subject: CN=E5410976DA8C8A05FEC3ADB9A4C3439D017D0B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:a3:0d:3e:0f:04:5b:eb:74:56:3a:e8:d9:
                    ab:5b:d7:9e:24:b7:54:71:c9:6c:7d:d2:fb:8a:70:
                    a3:ce:ff:ea:e2:7f:47:6a:9d:30:ee:40:b2:e5:4a:
                    e2:68:45:fb:c0:45:4a:ca:91:45:89:d1:6a:65:7b:
                    29:90:b8:1b:26:01:30:dd:35:aa:c4:fe:fd:c6:ea:
                    d0:a3:20:6f:7c:7b:e5:e1:0f:7e:a6:9a:10:b4:11:
                    66:2d:eb:56:ef:75:66:53:4c:74:52:94:40:b3:25:
                    ff:4b:ed:44:9f:f8:26:98:4d:ff:6e:07:1b:43:8c:
                    d9:27:5c:ff:4a:29:0f:a7:3e:6c:4c:7b:4b:77:43:
                    bd:28:be:35:8c:17:c0:b9:39:f6:ec:17:ba:16:e0:
                    bb:d8:9d:08:30:fc:70:da:24:02:28:e8:7b:d7:75:
                    c7:d8:17:f4:ff:50:6b:68:0e:19:ff:28:41:59:db:
                    f5:0e:e5:26:67:3d:a2:38:e6:1c:38:2e:00:e4:93:
                    6e:e2:76:dd:c0:06:59:c6:13:3e:df:a6:d7:82:60:
                    2c:18:e8:65:48:6b:98:21:40:d5:05:de:8a:ed:78:
                    2b:7f:8b:fa:a9:38:72:26:0c:37:d3:91:e7:c5:87:
                    7a:75:3c:4d:af:28:94:5f:49:6c:7d:83:7a:63:8f:
                    ae:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:41:09:76:DA:8C:8A:05:FE:C3:AD:B9:A4:C3:43:9D:01:7D:0B:81
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/0/E5410976DA8C8A05FEC3ADB9A4C3439D017D0B81.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.8.0/22
                IPv6:
                  2804:3908::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266519

    Signature Algorithm: sha256WithRSAEncryption
         a0:cd:fe:fd:7f:16:46:a7:11:80:c1:60:8e:41:02:23:49:ba:
         20:f3:54:19:64:e0:59:6f:d8:bd:9a:9c:3e:3d:46:98:59:a7:
         5c:60:a6:00:fd:b2:3c:d5:a0:62:e5:9b:0d:0e:1f:fd:8e:b0:
         70:cf:24:4c:12:66:a0:a5:4d:e0:b2:fa:5d:45:3f:ad:6c:98:
         c9:5e:3b:4e:54:bb:5c:16:8a:af:7e:c3:6d:bc:96:ce:ed:ac:
         c6:c2:2b:ee:08:20:aa:a4:b2:d2:f8:c4:d8:54:50:ec:50:ed:
         f4:75:c6:84:6b:a6:07:31:97:fe:a3:c1:b0:26:57:9d:19:84:
         42:c5:6a:ec:5b:47:da:0c:f8:f5:e8:8d:74:14:b4:03:a2:bc:
         8d:37:f1:f0:d8:30:c4:95:3d:d8:7a:20:92:74:a4:96:f7:a9:
         4f:c5:11:3e:3f:7b:84:8d:1b:53:10:5c:d9:04:e4:1d:78:ff:
         9f:60:3e:f8:76:8c:f6:b0:2f:50:a7:af:7a:70:5a:46:94:96:
         f9:a3:ed:a3:6a:15:e6:34:dc:af:47:fc:1e:6e:e2:b8:8b:6f:
         dc:98:11:cd:a9:c9:e8:9f:31:ee:5c:01:1a:03:0d:cb:67:13:
         b3:20:17:18:75:fa:65:ff:79:37:09:5f:8f:86:ca:db:dd:63:
         7f:73:d4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:06 2025 by rpki-client