Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4F4F43A0C054573B5E3291C8B65494F326C50C8F.cer
File:                     4F4F43A0C054573B5E3291C8B65494F326C50C8F.cer (raw, json)
Hash identifier:          P/njEUyo2wcLztplNDvhFx10e/UT3uXrsAh6yDsEve4=
Subject key identifier:   4F:4F:43:A0:C0:54:57:3B:5E:32:91:C8:B6:54:94:F3:26:C5:0C:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       192165D5B86029D187D7C9E7747D8961933A23C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/4F4F43A0C054573B5E3291C8B65494F326C50C8F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Mar 2025 13:28:59 +0000
Certificate not after:    Mon 09 Mar 2026 13:33:59 +0000
Subordinate resources:    AS: 270976
                          IP: 179.43.16.0/22
                          IP: 2804:745c::/32
Validation:               Failed, certificate revoked on Mon 10 Mar 2025 13:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:21:65:d5:b8:60:29:d1:87:d7:c9:e7:74:7d:89:61:93:3a:23:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 10 13:28:59 2025 GMT
            Not After : Mar  9 13:33:59 2026 GMT
        Subject: CN=4F4F43A0C054573B5E3291C8B65494F326C50C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:24:2b:87:1a:9a:7c:e7:b3:01:38:3d:9f:
                    bc:df:e7:04:08:6e:57:9e:fe:cb:6f:76:a0:22:7c:
                    09:e0:aa:7f:56:c9:66:d4:42:b1:9b:2c:2e:a8:f1:
                    ad:31:6e:6c:a0:06:7b:90:70:ec:be:67:c4:66:a3:
                    5b:f7:22:b2:43:8d:57:7d:a0:c8:e0:aa:ed:25:0f:
                    82:fe:ed:9c:aa:76:73:b3:f3:08:22:2b:f8:d0:9e:
                    43:9f:13:ce:62:1c:d0:5a:e3:01:46:98:d1:3f:e9:
                    cd:e1:07:df:eb:9e:fb:48:9e:22:3c:1a:ea:92:21:
                    3e:53:ce:27:f0:d6:ca:70:28:77:29:4b:9d:e5:60:
                    87:33:fe:a2:84:c2:9e:9d:e6:ae:af:f5:12:47:46:
                    8d:80:4d:b9:e4:ac:77:57:e2:8a:2d:ae:7c:73:1c:
                    97:79:76:2c:1a:3d:1c:12:5b:08:dc:d9:0a:7a:07:
                    e3:91:c4:83:ec:05:65:d0:c8:bc:91:81:6e:cc:d9:
                    62:0f:d5:f3:f7:80:c9:56:53:ec:61:f9:20:a1:70:
                    72:ec:55:dd:ed:06:1b:30:00:c8:99:5c:ab:37:93:
                    e5:dc:03:02:df:ad:05:01:37:25:ea:82:eb:ad:d8:
                    ed:01:10:fe:ef:ed:3f:15:b7:1c:6a:40:f6:4e:76:
                    ba:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:4F:43:A0:C0:54:57:3B:5E:32:91:C8:B6:54:94:F3:26:C5:0C:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/4F4F43A0C054573B5E3291C8B65494F326C50C8F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.16.0/22
                IPv6:
                  2804:745c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270976

    Signature Algorithm: sha256WithRSAEncryption
         17:8c:89:0b:96:a5:ae:71:77:be:29:1d:33:88:ce:b7:35:18:
         33:4d:5a:c3:c2:4d:21:fa:85:42:15:ce:e6:94:ba:c8:51:12:
         ed:8b:e6:c6:9b:be:56:4e:7f:79:c0:06:ae:67:a8:0c:6c:08:
         6d:b7:fe:f1:77:c1:de:45:a7:01:57:d8:e1:19:e5:81:fa:bb:
         c8:a1:f6:b3:8b:61:47:5a:8c:e1:17:cf:60:c3:0c:5d:6e:58:
         49:40:de:eb:0e:f5:29:86:97:22:8f:a5:7f:f4:01:8c:de:8e:
         0c:08:ff:ad:88:fe:d3:8a:e1:e6:37:dd:81:f9:ba:41:89:3b:
         dd:29:aa:ed:4d:1f:be:16:68:c3:e9:78:a4:aa:1b:d8:30:96:
         fd:90:06:88:94:03:83:0f:db:d2:ca:1c:1b:7c:be:7d:d6:ca:
         30:f5:5c:8a:10:a5:f2:e0:5a:c4:c4:e1:84:69:05:df:c0:f2:
         d0:87:33:c6:86:dc:50:5e:5e:1f:76:11:4a:b4:34:02:93:c5:
         ee:22:17:54:45:d8:e1:8b:ee:b7:f4:6b:0c:8c:68:26:ac:c7:
         11:c5:dc:74:98:df:17:26:97:2f:70:41:ae:46:35:9b:77:67:
         fc:7b:db:a2:54:5d:d9:e1:0e:9b:7e:88:1f:fa:10:29:7f:10:
         0e:9f:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 16:50:56 2025 by rpki-client