Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F54A45C02B8BA402B904166FDD6AAC077CB8CAEF.cer
File:                     F54A45C02B8BA402B904166FDD6AAC077CB8CAEF.cer (raw, json)
Hash identifier:          5Hn/Q+0ZUoH80EOOju53nds4uj9wOpYF6XrNNhr5qOA=
Subject key identifier:   F5:4A:45:C0:2B:8B:A4:02:B9:04:16:6F:DD:6A:AC:07:7C:B8:CA:EF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       43AC313D1433FA61921F19622DBFBBB5BE4BC739
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/F54A45C02B8BA402B904166FDD6AAC077CB8CAEF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Jan 2025 18:43:58 +0000
Certificate not after:    Wed 28 Jan 2026 18:48:58 +0000
Subordinate resources:    AS: 271437
                          IP: 45.225.80.0/22
                          IP: 2804:7b88::/32
Validation:               Failed, certificate revoked on Sun 16 Feb 2025 15:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ac:31:3d:14:33:fa:61:92:1f:19:62:2d:bf:bb:b5:be:4b:c7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 29 18:43:58 2025 GMT
            Not After : Jan 28 18:48:58 2026 GMT
        Subject: CN=F54A45C02B8BA402B904166FDD6AAC077CB8CAEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:94:8e:1a:86:04:0d:a9:4b:39:05:12:f7:38:
                    9d:bd:cd:10:b4:d6:bc:9b:82:b8:5e:25:4e:11:fd:
                    33:fb:d2:df:f5:26:d9:f6:00:34:c8:17:0a:46:a9:
                    65:20:22:ab:23:30:94:ac:80:41:6d:32:e7:b7:3f:
                    42:f3:63:9b:15:22:38:cb:ca:b4:b9:ea:33:be:5a:
                    9c:67:b7:c9:ac:42:c6:28:8a:3e:3e:b2:1d:a9:38:
                    b6:dc:48:9f:36:f4:2c:bf:8c:7b:dd:50:71:58:d3:
                    9b:8c:dc:09:2f:f7:47:82:19:49:c3:24:f8:a2:b5:
                    43:dd:4c:11:56:4e:4d:28:8b:9f:4e:9b:83:26:5a:
                    cb:6d:c1:d4:05:11:e8:11:dd:70:96:b5:fa:8b:1e:
                    e6:e4:5a:77:2b:e8:b5:d0:5e:7c:0d:7b:89:08:c4:
                    aa:70:2d:e2:c5:da:78:cc:30:53:e9:e3:17:71:4e:
                    02:18:22:bb:6e:a0:ae:df:5a:09:35:6a:1d:8e:64:
                    88:1f:04:55:72:52:08:bd:89:8d:ab:a4:82:82:08:
                    d7:d5:fc:99:fb:8c:be:1e:9f:36:3b:2f:ef:30:0e:
                    fa:da:30:0f:74:89:1f:28:6a:b7:4c:0d:28:e1:3f:
                    3a:7a:d6:d1:66:a2:41:35:e5:f3:5d:dd:ae:68:ce:
                    11:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:4A:45:C0:2B:8B:A4:02:B9:04:16:6F:DD:6A:AC:07:7C:B8:CA:EF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/F54A45C02B8BA402B904166FDD6AAC077CB8CAEF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.80.0/22
                IPv6:
                  2804:7b88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271437

    Signature Algorithm: sha256WithRSAEncryption
         b7:4c:2c:d1:05:b5:d9:9d:68:d6:0f:2e:74:be:a6:9c:3b:6a:
         d8:aa:d3:1e:7f:30:a5:d7:c8:6a:fe:45:dd:55:ec:03:de:64:
         b9:1f:ef:a1:89:06:8f:6d:d6:62:e6:94:0a:d3:23:54:ea:86:
         b6:f5:a9:b7:28:6c:e1:cc:26:b0:42:99:99:b6:61:42:49:25:
         93:70:7f:55:ec:4f:5f:0e:97:b0:65:65:97:ae:f3:44:c8:89:
         64:e2:a9:a0:fc:fc:02:bf:45:98:96:d2:32:75:1c:b4:d1:b7:
         6b:08:7d:6e:0f:d3:7c:77:fa:da:5b:3a:7c:ee:25:ab:fe:25:
         f3:14:71:b3:10:81:ed:8b:4e:ae:32:8d:97:48:6f:8b:ec:89:
         66:17:83:e5:f4:17:be:f1:e9:f5:0c:5d:ac:40:62:83:12:99:
         71:4b:47:04:3d:e5:72:5b:dd:00:3f:a5:d7:a2:74:10:e4:67:
         bc:65:2e:a6:89:67:98:52:fb:70:08:27:3d:66:89:cd:2c:cb:
         eb:f5:58:bc:3b:33:f7:99:ec:f4:70:07:fd:b5:b5:40:75:cf:
         88:ed:39:18:22:50:62:f8:c6:80:15:10:04:8d:1d:9f:2d:67:
         f7:76:6a:9a:52:dd:0f:11:5c:7b:4a:8f:bf:c5:05:0e:75:9c:
         13:2d:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:40:18 2025 by rpki-client