Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer
File:                     27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer (raw, json)
Hash identifier:          /LIguV2tmircKmto31pwB5AS4jV0IiMOcqR0QCIwbn0=
Subject key identifier:   27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       15A0965C66EF833902919C9F7368A0371513D895
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Feb 2025 13:36:50 +0000
Certificate not after:    Thu 19 Feb 2026 13:41:50 +0000
Subordinate resources:    AS: 270544
                          IP: 187.95.208.0/22
                          IP: 2804:6d9c::/32
Validation:               Failed, certificate revoked on Fri 28 Feb 2025 17:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a0:96:5c:66:ef:83:39:02:91:9c:9f:73:68:a0:37:15:13:d8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 20 13:36:50 2025 GMT
            Not After : Feb 19 13:41:50 2026 GMT
        Subject: CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:28:f4:03:e5:3a:71:ad:59:d6:66:60:69:8f:
                    26:ef:f2:9a:d0:7a:11:09:af:e3:53:4e:32:ea:f8:
                    17:ca:c6:e5:cd:71:a7:b6:53:75:63:b2:45:a5:cb:
                    05:e6:7c:82:ce:92:16:ea:ee:e2:04:96:ab:a3:e5:
                    86:dd:b7:a0:55:7a:bf:ab:5f:74:29:90:df:54:92:
                    ac:89:df:72:67:55:23:4c:62:54:34:15:2d:65:86:
                    da:57:68:bf:cb:e0:1c:b2:02:b1:92:9e:fc:9a:10:
                    1f:cb:62:70:ee:43:0f:b2:16:83:e5:9b:46:f2:6d:
                    e9:e8:f6:31:c7:64:e5:57:c4:b7:30:98:0a:e9:cf:
                    89:93:d3:59:d1:0b:60:fe:f5:0b:33:f2:cb:e8:67:
                    33:57:41:01:5b:3b:65:d8:ae:55:dd:3f:02:37:e3:
                    d5:93:1a:86:7d:51:4a:80:ae:bc:d9:81:02:51:b3:
                    57:94:b1:fa:55:db:69:f6:40:81:0b:df:92:e0:56:
                    8a:d2:eb:a8:49:97:f9:86:0f:50:bd:93:1c:6c:50:
                    9d:28:1b:8d:ce:af:96:f8:85:d2:ff:02:79:4d:b4:
                    9f:08:0e:19:b0:51:cd:75:d5:2b:cb:95:30:e0:de:
                    18:f0:ba:89:53:ed:f7:ff:49:af:c2:96:d2:a0:9b:
                    cd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.208.0/22
                IPv6:
                  2804:6d9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270544

    Signature Algorithm: sha256WithRSAEncryption
         3f:c9:85:54:46:ef:7d:82:52:9f:b4:e4:c1:cb:1b:c8:77:e9:
         43:21:9e:b4:b0:e6:54:c4:38:ef:87:2f:57:31:f4:39:71:06:
         4f:65:3d:5c:31:7a:b4:79:6f:66:40:9e:19:49:99:c2:87:9a:
         cc:54:8b:b5:6d:61:83:3e:9f:37:5b:9a:9b:a5:fe:89:53:ae:
         f7:ab:a2:56:4c:ba:5e:30:97:bd:b5:fc:94:4c:54:75:c8:34:
         19:21:04:39:e7:c3:8e:f9:84:ab:9e:71:e9:ca:2e:a1:10:24:
         44:01:5d:de:1c:27:29:0c:cf:54:9a:06:ba:56:02:15:ef:d9:
         32:29:ce:64:4c:ca:3b:be:e7:32:23:2a:af:07:0c:88:05:d2:
         42:87:78:aa:0e:fa:af:e5:c2:8d:7d:2d:86:71:4f:84:9f:58:
         95:c1:8f:bd:0c:d0:17:eb:4e:3e:44:8d:c1:77:68:66:50:21:
         4e:9b:d3:be:28:ad:26:59:07:1e:e3:54:23:6e:e4:c5:04:e6:
         a0:3c:c1:9d:ec:f6:4e:75:c5:10:19:2e:97:e0:fe:25:c0:45:
         40:07:0d:63:af:74:e5:1a:ea:e3:d9:2e:c5:38:50:3a:b8:a9:
         91:e8:6e:74:26:52:9d:9b:82:8f:51:fd:a1:3f:a1:60:cb:a8:
         1a:81:eb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:17:19 2025 by rpki-client