Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F398DBEDD8E5DB0E1332C156970F3DFDEA39FDF6.cer
File:                     F398DBEDD8E5DB0E1332C156970F3DFDEA39FDF6.cer (raw, json)
Hash identifier:          PWkL0fJGq+GCjxbWvUp7ay2E8+pGTDFEr3gNVvXI8b4=
Subject key identifier:   F3:98:DB:ED:D8:E5:DB:0E:13:32:C1:56:97:0F:3D:FD:EA:39:FD:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       595A2FD17D657A4AD18F4341800AD6E98B785C5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/F398DBEDD8E5DB0E1332C156970F3DFDEA39FDF6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Dec 2024 20:18:50 +0000
Certificate not after:    Wed 10 Dec 2025 20:23:50 +0000
Subordinate resources:    AS: 271007
                          IP: 170.254.236.0/22
                          IP: 2804:74d8::/32
Validation:               Failed, certificate revoked on Thu 19 Dec 2024 12:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5a:2f:d1:7d:65:7a:4a:d1:8f:43:41:80:0a:d6:e9:8b:78:5c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 11 20:18:50 2024 GMT
            Not After : Dec 10 20:23:50 2025 GMT
        Subject: CN=F398DBEDD8E5DB0E1332C156970F3DFDEA39FDF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:9d:6d:f4:a7:7b:29:bc:18:4f:f0:b3:36:
                    14:95:74:41:f3:bf:47:f0:d6:f7:d0:23:6a:f1:2b:
                    69:fb:89:65:07:c1:e3:91:ae:77:47:21:19:96:7c:
                    ab:67:fa:74:9d:4a:31:9d:6d:48:bc:75:b5:6a:fc:
                    67:b3:9f:82:bd:52:5b:19:fe:c3:c0:d3:db:4c:c2:
                    11:b0:62:2e:76:6a:7b:46:3d:41:fc:89:5f:ec:5a:
                    18:26:81:da:0d:36:46:9f:50:e4:fe:7c:bc:97:01:
                    4e:01:2f:30:5d:12:b1:fb:fd:50:2c:32:b6:b6:0a:
                    e3:ab:db:be:7c:46:53:02:81:b3:c9:54:df:c5:88:
                    98:74:c8:60:6b:52:9f:01:fe:5b:15:2d:48:91:31:
                    0e:5b:c5:93:9c:81:2f:2c:c0:ae:63:78:44:f2:97:
                    98:e1:9e:d2:3e:2b:b8:62:52:0d:ba:46:53:3c:70:
                    0c:db:e2:0c:85:d8:56:4e:71:1a:77:69:d8:57:92:
                    c3:3c:cf:54:86:d6:e7:f9:7d:de:54:a6:4e:19:4d:
                    c2:f8:ba:0e:c8:c7:13:ff:a2:f8:97:56:bc:e8:87:
                    a8:29:ef:4d:46:b7:81:2b:80:4d:20:e0:2c:48:cb:
                    0c:23:25:d5:69:79:69:fc:25:b7:6f:7f:56:ab:ba:
                    bd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:98:DB:ED:D8:E5:DB:0E:13:32:C1:56:97:0F:3D:FD:EA:39:FD:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/F398DBEDD8E5DB0E1332C156970F3DFDEA39FDF6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.236.0/22
                IPv6:
                  2804:74d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271007

    Signature Algorithm: sha256WithRSAEncryption
         db:cf:de:b2:57:22:a8:db:1b:7b:4f:aa:38:85:0d:53:1e:95:
         20:1a:ed:08:fa:13:8c:86:6e:31:2e:29:8f:b0:5d:f5:e4:f8:
         f1:6f:1d:e3:6d:b9:56:58:26:32:21:50:e6:03:9f:45:af:8b:
         cf:9c:53:22:48:d8:09:70:9b:96:61:b8:8f:21:51:86:2a:51:
         96:36:44:a8:17:9a:c6:78:81:30:78:07:1a:9a:89:33:07:70:
         20:fb:1a:70:7e:50:82:db:f6:39:34:54:56:bb:77:78:8d:5c:
         09:4f:84:39:4a:41:d7:57:ba:aa:99:9f:69:46:92:e5:8f:85:
         d7:7d:01:3c:48:db:a1:6b:a8:16:3a:03:65:45:cc:cf:40:2f:
         4d:d7:6c:d1:75:50:fb:fd:d5:2d:d6:65:20:bb:9e:0f:cd:06:
         da:3b:7f:95:05:b7:3c:7f:65:6a:82:22:23:79:ff:5c:37:68:
         f5:8c:02:1e:c1:14:34:41:51:6f:9d:ed:11:4c:eb:3d:27:c3:
         58:a9:cd:36:4c:fe:f9:fa:d8:ac:26:4e:d0:4c:fc:07:b3:c0:
         f3:f9:65:20:5c:ee:ae:31:a1:85:9f:2e:14:79:d3:5b:95:05:
         94:bb:cf:db:b5:71:c3:7d:6a:d1:1d:98:0f:21:6c:f3:2d:2f:
         8e:eb:d4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:55 2025 by rpki-client