Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0F41010CB771B9070F83BA817CBCF6418CA50CD4.cer
File:                     0F41010CB771B9070F83BA817CBCF6418CA50CD4.cer (raw, json)
Hash identifier:          47sJ3lTHRelRPx6N+5ZSev/ByrNHlmExmmK5St3vVJw=
Subject key identifier:   0F:41:01:0C:B7:71:B9:07:0F:83:BA:81:7C:BC:F6:41:8C:A5:0C:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       01BBA21783D408A4550316098FC6936DCC873A1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F41010CB771B9070F83BA817CBCF6418CA50CD4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Nov 2024 01:30:54 +0000
Certificate not after:    Tue 25 Nov 2025 01:35:54 +0000
Subordinate resources:    AS: 272581
                          IP: 2804:8578::/32
Validation:               Failed, certificate revoked on Tue 26 Nov 2024 01:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bb:a2:17:83:d4:08:a4:55:03:16:09:8f:c6:93:6d:cc:87:3a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 26 01:30:54 2024 GMT
            Not After : Nov 25 01:35:54 2025 GMT
        Subject: CN=0F41010CB771B9070F83BA817CBCF6418CA50CD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:82:8e:ed:3d:b3:08:b4:eb:fa:9d:d9:4d:
                    bb:e2:02:af:ed:ac:37:31:86:e5:64:fb:7e:df:81:
                    9c:e4:1b:8b:dd:97:20:7d:68:fc:29:1f:53:f0:bb:
                    44:35:38:59:ca:27:bc:71:66:72:b1:1b:6a:24:94:
                    c3:d1:fc:3f:1d:80:4b:88:aa:1e:98:a1:10:4c:c5:
                    54:00:7a:1d:65:ee:7c:bc:cf:e5:2a:85:dc:3b:34:
                    d6:75:76:f1:56:98:3e:9d:51:48:3a:78:18:70:1d:
                    f7:cc:66:cf:17:45:03:e3:cb:17:06:21:d3:58:b0:
                    aa:a7:48:86:58:48:a2:e7:52:f0:35:4a:3b:65:34:
                    05:5f:6b:e2:8c:13:e4:12:82:5b:c2:23:b8:aa:95:
                    71:aa:e3:7f:a6:16:1b:3d:0c:2d:65:fb:fa:ce:a5:
                    70:cc:f1:30:ac:3c:fc:f6:07:1c:69:e0:ff:7f:bf:
                    35:ee:11:51:5d:b1:6d:b0:cb:b0:c4:6a:35:07:8f:
                    11:93:ea:65:83:0c:8a:bc:79:c5:91:a8:b2:9c:9e:
                    5e:b6:0a:b5:28:fc:45:e3:35:e7:a3:49:9d:b3:8f:
                    ad:db:42:20:23:22:a8:79:6c:eb:a6:ec:45:3d:1e:
                    a6:61:59:52:f4:42:2b:84:9e:da:ff:d7:ab:51:03:
                    aa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:41:01:0C:B7:71:B9:07:0F:83:BA:81:7C:BC:F6:41:8C:A5:0C:D4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F41010CB771B9070F83BA817CBCF6418CA50CD4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272581

    Signature Algorithm: sha256WithRSAEncryption
         a1:12:1f:ea:28:f7:c3:dd:48:65:1f:8b:7b:d1:b1:a1:ab:c9:
         d4:10:72:5c:8a:d9:20:5a:6f:0c:c9:3f:99:2f:f5:ee:ce:60:
         4e:ba:c4:7a:4f:51:96:be:34:e0:43:2b:9c:5b:8e:6d:6b:54:
         1f:47:fb:e9:a2:42:fc:5c:82:cb:40:2b:10:89:90:d6:c5:62:
         eb:56:42:38:dd:4f:01:b9:c7:15:6b:23:57:b1:41:11:1b:b8:
         e9:43:07:8b:37:7a:37:e0:1e:8d:59:4b:c7:a2:e1:d5:eb:64:
         d9:de:c5:37:1b:bc:5a:54:4a:2b:a3:c6:ec:4b:0c:40:ce:0b:
         b9:8a:f0:01:54:a5:08:d6:4e:c0:15:56:b5:a6:a9:80:3f:9d:
         e5:a6:5a:e8:a4:38:92:28:ae:ab:f1:2e:06:83:9a:c3:85:f4:
         ac:ae:96:3e:98:83:32:d6:0c:43:40:4c:2e:49:eb:4b:18:ae:
         86:aa:39:6c:c8:24:fe:11:ac:a2:9f:c2:25:c6:41:f8:66:57:
         f1:f3:65:1f:cf:0d:2c:e8:53:a6:1e:c9:cc:c9:d9:89:ce:3e:
         3c:79:9e:6c:a6:64:f5:2f:db:08:ea:88:00:b7:c1:7a:2a:a1:
         32:a3:9e:5b:fd:f4:dd:80:a3:aa:a3:32:68:d3:01:e6:d7:38:
         73:64:e3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:24 2025 by rpki-client