Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.cer
File:                     44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.cer (raw, json)
Hash identifier:          DYLQ7BWNouOfqRwktfNfOuIY/CAwZ5+uYkVWSru4dD4=
Subject key identifier:   44:F8:F4:99:11:B0:C0:42:B8:FF:5B:CC:2E:11:E5:73:3D:A7:4F:F9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       690D07B8E49488AFF1A173BA933F0C770BD1B9AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5nwjhw1GzbjKKYTdCVhYn4BKpE7nrjDq6w8975DctG4V/0/44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5nwjhw1GzbjKKYTdCVhYn4BKpE7nrjDq6w8975DctG4V/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 May 2025 21:10:22 +0000
Certificate not after:    Thu 30 Apr 2026 21:15:22 +0000
Subordinate resources:    AS: 265492
                          IP: 170.78.16.0/22
                          IP: 2804:34f8::/32
Validation:               Failed, certificate revoked on Wed 07 May 2025 19:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0d:07:b8:e4:94:88:af:f1:a1:73:ba:93:3f:0c:77:0b:d1:b9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  1 21:10:22 2025 GMT
            Not After : Apr 30 21:15:22 2026 GMT
        Subject: CN=44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:8d:12:93:3f:bb:3a:41:52:1a:79:f1:51:
                    62:7a:61:83:85:e9:8b:4d:6b:e6:a7:ee:8c:9a:c8:
                    06:fe:a0:a5:7e:13:bd:26:ca:72:20:2e:98:5c:ec:
                    7b:a9:31:bd:03:c1:98:e0:fe:a1:83:ef:40:e4:38:
                    79:91:06:84:c1:e2:c4:11:9e:88:15:72:ad:40:86:
                    62:61:5c:e0:d8:e6:55:1b:d5:6d:b3:17:30:cb:4a:
                    3d:07:15:8a:5d:ae:63:45:31:fa:89:8d:60:28:79:
                    61:b4:f1:45:1f:3a:5a:16:21:60:d0:83:31:e9:d2:
                    08:11:92:ef:3d:fb:c2:03:96:ba:08:2f:47:e9:df:
                    9f:cd:9e:98:cd:14:0c:71:a4:32:63:96:c9:2b:ed:
                    13:96:1c:3d:2c:fd:df:d1:5c:53:76:17:06:ca:c8:
                    f6:c5:e6:6a:ce:18:24:29:d2:df:10:4f:95:37:b1:
                    eb:34:98:ab:80:5a:22:46:89:25:e7:03:19:b6:19:
                    40:01:56:bc:5b:25:d5:9e:04:3e:e6:14:cb:92:e0:
                    fc:69:01:11:2c:bd:ed:6c:c1:a1:b4:45:4c:07:83:
                    17:2c:6a:ba:f4:0b:78:63:ab:ce:71:2d:e6:d6:6a:
                    90:5e:0d:ae:68:e8:72:c9:af:5f:bb:a9:5d:9d:48:
                    88:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:F8:F4:99:11:B0:C0:42:B8:FF:5B:CC:2E:11:E5:73:3D:A7:4F:F9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5nwjhw1GzbjKKYTdCVhYn4BKpE7nrjDq6w8975DctG4V/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5nwjhw1GzbjKKYTdCVhYn4BKpE7nrjDq6w8975DctG4V/0/44F8F49911B0C042B8FF5BCC2E11E5733DA74FF9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.16.0/22
                IPv6:
                  2804:34f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265492

    Signature Algorithm: sha256WithRSAEncryption
         b6:3f:b3:c5:01:04:43:96:a6:5f:ba:47:92:05:2d:c7:04:2f:
         79:7f:c7:0f:ea:6f:61:45:58:15:f5:3f:b3:b6:1c:5b:a6:db:
         7b:68:a3:52:8c:a3:ac:47:97:e4:2e:13:da:9a:b7:f9:ee:25:
         d4:2a:db:c3:3f:2a:4b:34:a3:0f:98:7a:25:10:d5:18:7d:1e:
         e8:73:33:c5:b6:53:b8:2d:d5:8e:40:15:5b:95:5d:bf:1d:e8:
         8a:0f:18:5c:3a:0a:fd:49:c5:63:7d:e6:fe:5c:52:22:79:1d:
         22:a8:e1:55:e6:7b:8c:4b:29:ce:25:7e:8f:46:33:b2:83:c1:
         ad:0d:cb:58:e5:fa:fb:b9:af:c9:3f:d5:ce:8c:32:07:ad:6a:
         c8:e7:83:c9:74:8f:da:62:d7:0d:84:9a:b0:c3:33:51:d4:75:
         df:49:13:0a:fd:08:a6:ae:1a:49:5b:08:9d:02:4b:bd:d0:f1:
         9b:29:ef:64:c3:6f:11:cd:be:6a:83:d0:de:61:48:eb:41:55:
         df:a2:67:49:cd:42:eb:07:d3:49:0d:00:83:11:cb:50:59:ec:
         f1:fa:06:4e:0f:ec:ae:13:59:6d:75:1e:36:b4:45:fe:32:51:
         47:5d:c7:b6:1e:86:75:ad:a8:07:f2:d3:c1:b8:a6:3f:f4:a1:
         da:69:50:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:58:51 2025 by rpki-client