Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
File:                     0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer (raw, json)
Hash identifier:          sIQxoOV1QQa+nKhSke4u/tc55eXs5gK0GR9liBH928c=
Subject key identifier:   00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       51BFE4E3CD90AE4A6950AE0B8C10DBCFA07A5AB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jun 2024 12:13:34 +0000
Certificate not after:    Tue 24 Jun 2025 12:18:34 +0000
Subordinate resources:    AS: 262503
                          IP: 45.181.228.0/22
                          IP: 167.249.168.0/22
                          IP: 177.66.192.0/22
                          IP: 177.91.52.0/22
                          IP: 2804:2be0::/32

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 10:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bf:e4:e3:cd:90:ae:4a:69:50:ae:0b:8c:10:db:cf:a0:7a:5a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 25 12:13:34 2024 GMT
            Not After : Jun 24 12:18:34 2025 GMT
        Subject: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b6:b8:35:f8:eb:cc:24:c5:55:8e:c6:b6:b9:
                    6b:23:ef:95:ec:8a:9e:16:d7:5c:4f:57:7c:f9:bb:
                    07:e8:41:3d:83:e0:a6:03:f4:4d:19:6b:0a:34:12:
                    7d:1f:68:b2:af:f3:56:af:f7:33:d1:1d:15:7a:07:
                    9b:ef:86:59:43:ff:4d:c3:f8:20:7a:3d:04:ec:5d:
                    86:bf:c7:18:d9:00:9e:60:85:1c:7b:2a:d3:6b:d1:
                    4e:05:a2:b0:3e:2a:ba:0a:69:aa:8f:ef:28:87:1d:
                    d9:c0:7e:94:96:a9:eb:33:9c:92:36:67:ed:05:d2:
                    e8:08:14:1a:df:3c:42:14:08:51:89:f9:26:58:55:
                    09:27:9f:f9:71:25:07:6e:be:5a:ee:94:89:00:6f:
                    17:b1:e0:9c:c9:ff:54:5a:19:43:d0:e3:fd:7a:81:
                    1b:65:5b:e4:41:48:53:3e:7b:61:9d:0a:98:10:aa:
                    02:26:38:0e:42:7c:a9:a6:09:b8:a2:4a:aa:75:94:
                    58:3b:a8:6e:8d:eb:b7:9d:36:79:de:54:5d:bc:2a:
                    b9:1d:f6:9f:93:51:83:bf:b1:51:d4:1e:8e:6f:02:
                    c0:a5:7c:58:6d:d1:17:b0:cb:e0:dc:88:63:c0:dc:
                    49:0f:e4:69:93:e3:3b:d4:6e:c2:8e:7a:3f:a4:7f:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.228.0/22
                  167.249.168.0/22
                  177.66.192.0/22
                  177.91.52.0/22
                IPv6:
                  2804:2be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262503

    Signature Algorithm: sha256WithRSAEncryption
         4b:a2:83:53:0d:95:c9:d7:f2:bd:17:7f:40:a6:4a:cd:a7:61:
         0e:c7:cd:7f:4c:13:96:53:0a:c3:36:46:da:84:9c:df:34:08:
         28:09:a3:56:c8:45:74:2f:24:52:68:21:b8:cf:9d:c7:3c:21:
         aa:ad:b2:6d:01:43:ff:a2:59:4f:22:2f:da:b6:fc:b2:44:5d:
         79:10:a5:12:06:2e:87:50:57:1d:da:35:0f:4e:32:71:97:94:
         d6:24:19:44:47:73:eb:79:09:37:1d:eb:ed:49:ed:b3:be:b4:
         96:d9:6e:cf:71:71:12:98:88:40:37:ac:b4:d7:5f:dd:fa:4a:
         9e:13:db:6b:a8:cd:14:77:28:6e:0e:8b:7f:f8:f2:46:a7:b1:
         d0:e3:eb:f7:b3:5d:36:1f:a8:d3:93:51:b4:b6:f4:03:55:50:
         c1:8d:d9:76:21:6d:8f:f3:25:7d:72:72:c3:fb:85:9b:ac:4a:
         1d:6d:bf:75:49:78:4f:88:f3:96:b7:a8:fb:57:d5:82:af:53:
         a6:1c:18:a1:50:79:df:6f:69:6c:c4:f8:3c:c8:a5:03:51:c2:
         55:04:b0:9f:2b:0a:c2:31:7a:18:a8:7e:51:9d:75:c5:b4:f1:
         15:00:ad:84:56:67:b0:81:c6:ca:ab:f5:ad:9d:8f:56:44:3d:
         db:fb:e0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 17:08:25 2024 by rpki-client on console-fra.rpki-client.org