Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8ABCB3C4EC219B8E85923BB54651F450DE6CAE55.cer
File:                     8ABCB3C4EC219B8E85923BB54651F450DE6CAE55.cer (raw, json)
Hash identifier:          8jwbz6yxw4N/uLh/qxmEqTxRKZ1FFPO/rA67cvq9QVs=
Subject key identifier:   8A:BC:B3:C4:EC:21:9B:8E:85:92:3B:B5:46:51:F4:50:DE:6C:AE:55
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6667BDC9E9681E0E2AC3C335B17930E4EE4F1FEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8ABCB3C4EC219B8E85923BB54651F450DE6CAE55.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Aug 2024 20:38:06 +0000
Certificate not after:    Fri 08 Aug 2025 20:43:06 +0000
Subordinate resources:    AS: 264999
                          IP: 170.84.76.0/22
                          IP: 2804:3130::/32
Validation:               Failed, certificate revoked on Fri 04 Oct 2024 20:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:67:bd:c9:e9:68:1e:0e:2a:c3:c3:35:b1:79:30:e4:ee:4f:1f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  9 20:38:06 2024 GMT
            Not After : Aug  8 20:43:06 2025 GMT
        Subject: CN=8ABCB3C4EC219B8E85923BB54651F450DE6CAE55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:b7:d6:b1:1f:24:a1:dd:97:5d:89:b3:13:
                    89:a6:9c:ec:70:db:58:87:a4:50:0b:3e:a1:d8:bc:
                    63:a2:02:51:e3:4f:c1:7c:0c:11:ec:41:d7:b5:a5:
                    d9:13:f6:25:b0:e9:e9:06:73:62:43:5a:c1:e2:2f:
                    59:c8:b7:f2:7a:2f:6e:d8:26:4a:6a:59:45:62:0e:
                    85:f1:a2:90:10:4d:74:3b:20:67:24:50:9f:cd:3c:
                    f9:b0:57:d8:ca:f7:1f:2b:fe:37:5d:69:da:c2:50:
                    a4:a7:0d:0d:0d:d5:3c:59:62:41:72:7d:b8:73:6e:
                    5b:f1:06:e7:ca:7a:89:67:62:75:3b:c9:25:a2:5b:
                    dd:d6:fc:f7:43:2d:5e:8c:ed:83:5b:5d:58:79:da:
                    4e:39:80:a6:18:97:b2:fd:6b:15:1c:59:2e:28:42:
                    9d:3d:2c:cf:8a:cd:35:59:f5:f0:ed:25:18:e7:30:
                    fc:09:32:73:05:bd:d0:2d:6e:1e:c3:fc:31:8d:04:
                    53:3c:32:19:0f:70:b4:75:93:c4:10:e3:ff:99:01:
                    fa:84:77:95:84:be:dc:e2:be:6a:35:16:05:d5:c1:
                    e1:7d:6b:2b:e0:01:1a:7c:7f:f7:b1:d7:35:a6:38:
                    7e:1c:2c:d7:09:63:6b:ad:14:df:ab:f1:1d:50:8d:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:BC:B3:C4:EC:21:9B:8E:85:92:3B:B5:46:51:F4:50:DE:6C:AE:55
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8ABCB3C4EC219B8E85923BB54651F450DE6CAE55.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.76.0/22
                IPv6:
                  2804:3130::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264999

    Signature Algorithm: sha256WithRSAEncryption
         62:d6:f1:c4:6b:19:5d:8c:06:8f:d6:21:66:84:98:bc:f9:d1:
         d1:44:a9:47:c7:4a:c0:e9:20:a2:4d:ed:8b:2b:65:eb:51:8d:
         de:bf:35:83:52:b7:ca:a6:83:c2:1f:53:5f:26:f9:4f:75:64:
         dc:83:e0:fb:57:89:bc:ee:c4:6a:9f:69:b0:48:8d:b2:c5:28:
         13:54:5e:a4:9b:6b:0b:c1:b8:29:d5:9d:49:26:a4:98:8a:6b:
         ff:3a:45:8b:68:eb:70:fd:99:6b:d0:59:cd:a4:a0:9b:3e:f2:
         c4:74:c2:a0:2f:6f:a0:11:9a:78:9c:3c:fd:f7:09:70:53:a1:
         5c:03:49:4f:ed:ef:92:8d:c0:79:d5:1d:c6:35:04:7e:62:a9:
         b4:e8:b7:17:d1:e3:43:8d:b2:ee:16:56:b3:73:60:4b:04:1e:
         fa:29:3a:bc:7d:9c:fa:92:b0:35:e1:69:97:57:8f:c7:82:a2:
         ea:28:bb:5b:7f:2c:5b:90:3d:63:5e:42:c6:94:e6:9f:9a:1d:
         0c:9d:b8:d9:79:fa:d6:4b:7e:bb:52:db:47:4b:f8:66:36:8f:
         b7:dd:91:98:32:ae:22:51:e0:ba:45:b9:bb:d2:fe:19:72:6e:
         4d:7b:05:57:9a:88:37:54:ba:f1:00:8c:89:34:ab:2c:75:0b:
         5e:bc:19:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:12:54 2025 by rpki-client