Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F4E23FB60CE63477A4DC163768AA1DED94832613.cer
File:                     F4E23FB60CE63477A4DC163768AA1DED94832613.cer (raw, json)
Hash identifier:          WbL7EcNHb7OhpfsXGI2i/+XDkfa2BFmkwktcPYOB4+M=
Subject key identifier:   F4:E2:3F:B6:0C:E6:34:77:A4:DC:16:37:68:AA:1D:ED:94:83:26:13
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E12B8A7328C489B2334552F2EE4919A0B108186
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/F4E23FB60CE63477A4DC163768AA1DED94832613.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:25:17 +0000
Certificate not after:    Wed 04 Mar 2026 18:30:17 +0000
Subordinate resources:    AS: 11097
                          IP: 192.207.194.0/24
                          IP: 200.0.70.0/24
                          IP: 200.202.128.0/18
                          IP: 2801:80:1400::/40
Validation:               Failed, certificate revoked on Thu 06 Mar 2025 17:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:12:b8:a7:32:8c:48:9b:23:34:55:2f:2e:e4:91:9a:0b:10:81:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:25:17 2025 GMT
            Not After : Mar  4 18:30:17 2026 GMT
        Subject: CN=F4E23FB60CE63477A4DC163768AA1DED94832613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:65:0c:b1:78:da:20:a2:8f:5f:e0:2e:fa:
                    93:1d:a0:a9:fc:7c:33:60:ba:71:c4:5c:59:d8:b6:
                    fe:e9:0d:23:44:26:de:a3:2b:85:33:26:f6:41:52:
                    37:05:da:65:52:6d:db:cf:73:94:50:1a:14:42:2d:
                    63:4d:03:a8:91:dd:0f:0f:84:85:e6:f8:22:59:79:
                    d5:93:06:12:d9:81:a2:d6:33:ca:c9:df:35:56:d6:
                    81:a4:af:c1:19:db:08:15:7d:71:58:b8:aa:8e:fa:
                    54:2b:49:88:24:28:d1:3a:d8:4e:f3:ae:56:9b:17:
                    84:a1:27:5d:b2:c5:56:b1:6c:57:f0:db:f2:4c:e0:
                    c1:c2:28:e1:1a:48:3f:9c:72:b8:33:cd:d8:16:38:
                    4e:aa:5b:3e:c2:1e:80:cb:21:9b:ca:cc:4e:f7:d3:
                    93:2d:c6:cf:37:85:9b:dc:0d:d3:18:74:06:82:70:
                    5e:1b:f2:73:7a:71:d4:c3:ce:14:eb:5c:60:d3:3f:
                    11:73:45:4e:6b:cf:1f:22:93:3d:df:47:6a:71:06:
                    3c:25:79:09:76:5c:3f:09:e0:38:34:42:87:25:2b:
                    c7:a3:f2:5a:7d:05:fc:de:65:b9:3f:2c:7d:01:08:
                    46:40:a7:2f:98:23:e4:a8:01:ba:44:18:80:78:20:
                    b3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:E2:3F:B6:0C:E6:34:77:A4:DC:16:37:68:AA:1D:ED:94:83:26:13
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/F4E23FB60CE63477A4DC163768AA1DED94832613.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.194.0/24
                  200.0.70.0/24
                  200.202.128.0/18
                IPv6:
                  2801:80:1400::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11097

    Signature Algorithm: sha256WithRSAEncryption
         22:f2:5f:37:ad:d4:82:73:7b:63:13:f9:fc:24:62:3f:c6:6f:
         01:d3:e2:32:c8:08:f3:a7:43:cb:6d:1a:cf:fc:db:26:32:75:
         e9:7c:22:b4:22:a5:9b:4a:f2:12:90:d2:f3:72:c0:3b:89:25:
         2f:f7:8a:28:08:5f:9e:2f:b7:7f:a1:08:86:00:be:c9:69:e0:
         11:85:28:24:76:0f:20:a2:88:cf:fd:f4:75:42:64:17:b2:a0:
         7b:e3:21:2e:d3:38:dd:31:bb:60:54:be:a0:1f:58:26:6d:15:
         28:8a:a3:5b:17:93:b9:7c:76:24:49:79:a5:84:64:a9:7c:14:
         e8:1b:b0:38:f0:6b:a9:4d:c6:82:4e:b8:5d:62:dc:1a:fa:d6:
         23:af:29:c7:43:e7:ea:3f:85:1e:0d:2f:f0:8a:df:6a:88:6e:
         94:d4:08:4a:00:b4:42:ad:e6:af:f5:19:34:fd:11:d6:30:60:
         1f:bc:b3:f0:ac:17:e1:db:f8:5c:ce:dc:46:04:ca:fe:24:51:
         0d:81:4b:50:54:57:da:4e:29:0f:c3:96:30:b0:b1:4e:fb:cf:
         b6:9a:17:ff:16:06:a3:c5:56:20:91:de:ed:08:1b:5b:02:c8:
         0e:fa:42:b1:39:9b:d0:06:21:68:95:42:ca:f8:48:08:8f:04:
         aa:98:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:10:43 2025 by rpki-client