Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C1F6BACFF86151787C3CD823745C89593258A25A.cer
File:                     C1F6BACFF86151787C3CD823745C89593258A25A.cer (raw, json)
Hash identifier:          HDRRelLcV/Glm5+0lvrhmx8xl5hH/GMLDVwbLtuJHkw=
Subject key identifier:   C1:F6:BA:CF:F8:61:51:78:7C:3C:D8:23:74:5C:89:59:32:58:A2:5A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       376B497504ED8882EE0D2A72EE62265DAD547301
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/C1F6BACFF86151787C3CD823745C89593258A25A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 31 Mar 2025 19:29:30 +0000
Certificate not after:    Mon 30 Mar 2026 19:34:30 +0000
Subordinate resources:    AS: 269352
                          IP: 45.185.12.0/22
                          IP: 2804:634c::/32
Validation:               Failed, certificate revoked on Sun 13 Apr 2025 19:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6b:49:75:04:ed:88:82:ee:0d:2a:72:ee:62:26:5d:ad:54:73:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 31 19:29:30 2025 GMT
            Not After : Mar 30 19:34:30 2026 GMT
        Subject: CN=C1F6BACFF86151787C3CD823745C89593258A25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:5d:12:92:ce:17:1b:06:a6:79:58:5a:dd:
                    a3:3e:7e:55:ba:80:d2:b9:8b:63:81:fe:83:d9:3e:
                    72:ef:5c:c2:01:d4:68:63:64:8d:10:cb:62:92:8a:
                    f9:3a:5f:76:8a:f8:d9:5a:84:49:93:d3:d0:83:65:
                    30:ee:02:49:1b:6c:86:3a:6a:83:b3:ef:0b:38:45:
                    19:0f:9c:4e:c9:18:53:d5:19:81:27:80:74:1a:5e:
                    94:8a:53:fb:29:a5:42:ab:22:cd:bb:69:e3:3a:a4:
                    ba:9a:eb:80:b4:a6:b2:ab:03:e4:d9:84:55:ca:32:
                    bc:66:04:18:75:e0:be:bb:3b:84:4a:b9:e6:8c:c0:
                    18:73:ad:93:93:8e:e1:1e:68:04:20:d4:e5:79:00:
                    7c:eb:71:2c:2c:0d:a6:e3:6a:7b:13:d3:5e:67:1d:
                    d6:43:5f:e7:9a:5d:24:ca:6f:52:36:89:c0:56:50:
                    4e:f9:69:4f:a9:d3:7b:19:c2:b8:63:9b:94:e1:bf:
                    6c:40:4b:2f:20:86:29:09:ca:95:9e:54:42:e9:fe:
                    ed:bd:70:e3:41:69:6a:b1:dd:4b:a6:f2:d7:bc:08:
                    10:8f:ec:29:de:1f:58:3c:46:b6:68:25:de:77:46:
                    0e:2a:5d:66:0e:af:35:77:69:e3:05:d8:f0:2c:92:
                    5a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:F6:BA:CF:F8:61:51:78:7C:3C:D8:23:74:5C:89:59:32:58:A2:5A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/C1F6BACFF86151787C3CD823745C89593258A25A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.12.0/22
                IPv6:
                  2804:634c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269352

    Signature Algorithm: sha256WithRSAEncryption
         0e:d2:df:f3:16:6d:17:47:a6:1d:b8:38:35:80:37:73:cd:00:
         e2:bf:ba:f7:28:80:e4:57:30:c4:87:45:c1:ec:41:74:20:cf:
         16:80:d3:99:4e:16:95:a8:2a:4b:9f:6a:64:2b:81:ec:a0:7c:
         1c:79:57:9f:65:bf:fa:dd:1d:f5:51:33:d6:5d:95:28:84:31:
         de:51:d8:20:2b:b2:7d:2f:ce:1d:c4:4e:b1:0f:b6:ff:3d:d3:
         33:82:f7:8e:d7:a8:6d:ab:ce:12:1a:ba:f3:ea:22:e5:42:fc:
         93:3e:c9:63:e3:85:40:0a:9b:de:e8:4d:70:d4:8b:3b:76:3c:
         5e:89:2e:5e:7c:12:dc:e4:ac:4c:f7:9a:c2:5c:ad:32:fd:49:
         6f:f2:6c:2b:24:53:94:c8:32:6f:92:2a:6d:12:72:b7:ad:63:
         52:28:78:38:45:83:f2:23:0b:0a:5b:7b:b4:a2:3f:b4:59:a1:
         2b:4a:6c:70:db:e6:33:68:d9:4c:9b:1c:1d:98:ee:71:50:20:
         fc:e5:68:61:5f:1c:7e:29:8b:7d:82:cb:19:ae:5c:16:2f:91:
         1f:19:d5:da:f6:09:cd:45:88:fa:2e:b9:3d:06:58:41:2a:b8:
         1c:3f:fb:64:96:90:bf:87:ab:a5:50:ed:eb:9f:5a:a8:67:50:
         8f:09:31:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:47:28 2025 by rpki-client