Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AC61AD7E3EFFFE70721CF169CC83E65CD718A790.cer
File:                     AC61AD7E3EFFFE70721CF169CC83E65CD718A790.cer (raw, json)
Hash identifier:          DicsaECsTnazzF5YVNR86jqI/Fi5S54i1zTIJh7OIkw=
Subject key identifier:   AC:61:AD:7E:3E:FF:FE:70:72:1C:F1:69:CC:83:E6:5C:D7:18:A7:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1777F9D46947C8989E1CE69DAF4560A333DE75E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/AC61AD7E3EFFFE70721CF169CC83E65CD718A790.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 May 2025 18:25:08 +0000
Certificate not after:    Wed 13 May 2026 18:30:08 +0000
Subordinate resources:    AS: 270409
                          IP: 190.89.196.0/22
                          IP: 2804:6b94::/32
Validation:               Failed, certificate revoked on Thu 05 Jun 2025 20:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:77:f9:d4:69:47:c8:98:9e:1c:e6:9d:af:45:60:a3:33:de:75:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 14 18:25:08 2025 GMT
            Not After : May 13 18:30:08 2026 GMT
        Subject: CN=AC61AD7E3EFFFE70721CF169CC83E65CD718A790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ca:b8:fa:ac:10:6e:6e:d5:99:a7:d8:9a:00:
                    53:de:7e:3d:a2:e4:52:5b:fa:60:ef:9b:20:b2:4d:
                    ea:d9:87:dc:0d:75:95:21:87:31:e3:56:37:af:35:
                    c7:40:1a:95:c2:48:7f:18:d0:3b:0d:fd:ac:63:b0:
                    17:a5:3e:10:b9:86:c7:7b:a0:ef:81:31:9f:d2:ba:
                    be:e1:2f:45:4f:55:ea:5a:0a:1b:c3:3b:62:0b:69:
                    72:be:43:6e:88:d9:26:31:07:50:41:09:c0:2e:f7:
                    48:80:a2:b2:87:80:ac:8d:6f:10:f6:09:93:28:f3:
                    14:2a:7f:73:b1:3b:8f:08:95:c1:30:3c:74:fa:c1:
                    0a:cd:c5:9e:a9:e5:19:45:b0:9a:99:f4:70:15:f9:
                    d8:46:3d:28:46:df:e0:b7:66:44:13:65:5d:ba:51:
                    ae:1e:bb:62:bf:2a:f8:2f:b0:61:ca:a0:82:db:86:
                    7f:77:3f:b4:9d:8d:7d:46:34:e8:74:fa:88:2a:79:
                    13:6f:bd:51:fc:5a:6a:04:b8:c0:04:cc:28:38:8e:
                    d4:14:d3:ce:5f:dd:ec:f2:aa:11:a2:51:e8:57:1c:
                    f9:d5:5c:d1:be:d2:5f:48:32:e8:f6:bc:b4:b3:27:
                    7b:40:f6:ad:93:99:35:fd:84:d8:a9:5d:14:e1:e1:
                    cf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:61:AD:7E:3E:FF:FE:70:72:1C:F1:69:CC:83:E6:5C:D7:18:A7:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/AC61AD7E3EFFFE70721CF169CC83E65CD718A790.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.196.0/22
                IPv6:
                  2804:6b94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270409

    Signature Algorithm: sha256WithRSAEncryption
         62:30:cc:0a:d0:bb:01:22:e1:62:18:f0:63:bc:b9:93:9a:bd:
         da:1e:4f:bb:1f:c4:10:02:fe:ed:11:55:e7:d3:07:a6:90:e6:
         b1:ca:96:30:93:3a:f7:ca:3a:97:21:9a:03:fd:62:8f:a9:e4:
         e8:02:48:3b:3e:df:6c:43:91:49:f0:0a:83:f8:f4:31:df:89:
         b9:5a:88:ae:4e:14:fe:f7:05:e3:78:8d:1c:ed:11:ce:c3:66:
         c0:88:ba:07:67:6e:f9:a4:b1:d4:88:7b:7d:da:5b:ca:18:55:
         81:8d:ef:fc:6d:93:c3:b3:99:67:84:b0:38:90:82:bf:d0:54:
         5b:ad:2d:48:01:91:81:66:49:d8:be:bb:e1:70:a0:ed:39:ce:
         90:f4:e4:d4:68:1f:6c:25:9f:3f:54:05:0b:aa:b4:e5:cf:1a:
         90:6a:e6:69:11:e3:27:17:b6:c4:5f:85:f5:6b:0f:97:4d:1a:
         bd:69:93:6c:cc:e4:9a:ed:32:36:f5:7c:0e:f7:6b:54:55:dd:
         a6:34:06:d5:2e:16:dc:23:f6:b7:93:f8:eb:19:1e:7f:af:f4:
         a0:6a:4c:4d:03:ce:ce:0f:5c:91:57:15:09:e6:61:2f:b3:c2:
         d2:bb:b2:03:a7:2d:7d:74:56:a4:6a:0a:f2:fe:03:19:2e:cf:
         23:11:c0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:53:46 2025 by rpki-client