Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/491CA5F696E255860951A88C1EE343A07FDD497B.cer
File:                     491CA5F696E255860951A88C1EE343A07FDD497B.cer (raw, json)
Hash identifier:          5qX+7g2wgJl5WopHOsRRX3FTil6+9L/J+5RvAvm8auY=
Subject key identifier:   49:1C:A5:F6:96:E2:55:86:09:51:A8:8C:1E:E3:43:A0:7F:DD:49:7B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       609A7D08E2D78B6D83FF6473353EF535BAFD8660
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/491CA5F696E255860951A88C1EE343A07FDD497B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Apr 2025 12:32:25 +0000
Certificate not after:    Wed 08 Apr 2026 12:37:25 +0000
Subordinate resources:    AS: 266376
                          IP: 170.80.112.0/22
                          IP: 2804:36d8::/32

Validation:               Failed, certificate revoked on Thu 10 Apr 2025 15:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9a:7d:08:e2:d7:8b:6d:83:ff:64:73:35:3e:f5:35:ba:fd:86:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  9 12:32:25 2025 GMT
            Not After : Apr  8 12:37:25 2026 GMT
        Subject: CN=491CA5F696E255860951A88C1EE343A07FDD497B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:72:69:f8:f5:5d:60:9e:cd:d2:30:35:5f:
                    1e:f3:1c:31:69:2d:1a:9d:f0:2d:76:bc:fe:09:af:
                    53:f5:b8:59:92:b4:db:1a:2f:b2:5a:6f:57:95:c2:
                    e1:3e:c4:7e:1b:26:87:e9:5f:2b:3c:64:0a:c7:8a:
                    0e:70:37:1a:27:34:f3:a4:42:6b:01:3e:aa:89:8b:
                    bf:42:e8:5e:34:ec:ee:07:6a:cf:cf:ab:60:31:a8:
                    3c:2d:fd:5a:7c:2b:ce:fd:eb:60:45:ca:e9:11:8f:
                    f6:13:85:c3:0b:e8:86:3d:db:57:5b:80:3f:e9:54:
                    d5:c0:90:fe:fb:70:ec:46:7a:5c:0c:b1:b3:ae:69:
                    0a:2f:4c:2c:04:72:59:fd:54:2e:9e:b5:96:17:31:
                    2d:13:75:94:6f:fc:27:fd:b4:85:54:5d:31:d2:53:
                    0a:1d:72:ac:69:91:7f:27:54:f6:35:9d:a3:d5:41:
                    85:1d:4a:29:72:6b:5d:04:de:4d:7a:e7:55:da:ce:
                    a4:cd:49:73:96:ab:9d:ff:c7:45:31:64:70:75:61:
                    3d:9f:79:8d:31:9b:07:d8:24:b9:8c:ce:96:f8:9c:
                    7a:bf:34:fb:aa:4d:0a:42:17:3f:35:f0:52:28:ff:
                    a6:20:ad:4c:e4:84:47:02:c6:bf:80:45:3d:43:96:
                    e4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:1C:A5:F6:96:E2:55:86:09:51:A8:8C:1E:E3:43:A0:7F:DD:49:7B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/491CA5F696E255860951A88C1EE343A07FDD497B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.112.0/22
                IPv6:
                  2804:36d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266376

    Signature Algorithm: sha256WithRSAEncryption
         d2:cf:c6:47:82:dd:3a:42:5d:0f:9d:b5:14:13:a8:56:59:c6:
         c6:6c:9b:00:6b:72:4f:00:ea:c2:5c:73:bc:4d:39:49:db:aa:
         c4:31:04:62:e2:18:ef:ef:eb:3c:96:aa:dd:2f:9a:7c:f5:f1:
         95:37:26:c2:74:73:e4:5e:ce:dc:15:44:bd:20:64:d2:65:21:
         2e:64:61:55:f6:6f:bb:4b:94:57:26:9f:62:38:22:0b:5f:c0:
         80:49:1a:58:fc:a8:76:22:9d:e2:34:09:7f:6c:72:71:e2:d7:
         74:ff:16:6c:d2:6e:d5:f9:01:06:4c:f9:9e:98:c6:08:7a:75:
         11:f9:ab:77:58:0a:83:93:92:3e:da:ab:02:38:d1:81:51:ce:
         75:74:c0:18:7e:7f:37:31:b2:03:62:2b:4c:c0:03:3e:1f:cd:
         72:4f:35:14:57:12:b3:87:f8:3d:40:b5:77:65:1d:4b:19:d0:
         6d:c6:ec:85:bc:f6:c4:d7:56:d0:b8:0f:d2:10:5e:09:82:4a:
         d3:e7:fa:1f:ba:6d:24:94:c8:6a:ed:34:aa:40:37:9e:0e:77:
         07:bb:ec:b2:c8:5a:b8:97:20:69:dc:ea:f6:3a:b4:ec:53:46:
         b4:0e:06:d6:31:e1:78:44:57:58:65:b5:69:54:72:24:6b:b0:
         84:ae:3c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:10:21 2025 by rpki-client on console.sobornost.net