Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/073DEF42D0B7AAFBB86519BC5F68545AD8A6F039.cer
File:                     073DEF42D0B7AAFBB86519BC5F68545AD8A6F039.cer (raw, json)
Hash identifier:          g6Yvi9fT1aQZzzmMUpw3SgCnSQYJBVqjw5uIE30weDs=
Subject key identifier:   07:3D:EF:42:D0:B7:AA:FB:B8:65:19:BC:5F:68:54:5A:D8:A6:F0:39
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       29531959183C882CF2148F3DD67AC6CC1E41147C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/073DEF42D0B7AAFBB86519BC5F68545AD8A6F039.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Oct 2024 08:25:11 +0000
Certificate not after:    Wed 22 Oct 2025 08:30:11 +0000
Subordinate resources:    AS: 262346
                          IP: 138.97.0.0/22
                          IP: 143.202.224.0/22
                          IP: 170.150.100.0/22
                          IP: 177.125.160.0/21
                          IP: 177.125.204.0/22
                          IP: 179.107.56.0/21
                          IP: 2804:81c::/32

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 17:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:53:19:59:18:3c:88:2c:f2:14:8f:3d:d6:7a:c6:cc:1e:41:14:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 23 08:25:11 2024 GMT
            Not After : Oct 22 08:30:11 2025 GMT
        Subject: CN=073DEF42D0B7AAFBB86519BC5F68545AD8A6F039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:18:5e:a5:98:29:4e:36:d6:15:ed:eb:fd:8d:
                    2b:e1:0f:6b:a4:22:0a:96:36:90:42:aa:af:3d:13:
                    0d:a9:37:e2:f1:60:eb:e3:9e:d4:79:13:93:ad:17:
                    43:a1:54:06:f4:7c:b8:2e:a8:17:b4:3d:ff:a1:9c:
                    3a:47:81:3b:08:86:a2:84:9f:65:4a:0b:a9:c3:d2:
                    6d:a9:9c:ad:cc:4b:fa:f9:d3:48:98:3a:fd:df:b3:
                    f8:11:86:ea:e9:1d:61:fd:99:04:ea:3f:48:e4:e4:
                    0e:90:44:13:60:72:1f:59:a1:ab:37:04:bd:e1:b4:
                    c2:20:51:be:ac:3a:2b:b3:4d:a8:4e:30:00:33:89:
                    f8:17:cf:34:e6:ae:34:b3:e9:fb:cc:6a:6c:03:fa:
                    20:67:67:d3:21:63:1c:9c:83:0a:1b:34:97:a3:6a:
                    37:8d:6f:03:a8:ac:2b:5f:30:75:62:f3:2a:6a:ac:
                    70:c3:09:ce:20:16:71:01:e6:5c:db:de:e9:9a:f2:
                    c1:db:dd:4e:52:8c:e0:25:bc:d2:46:85:da:95:d4:
                    ab:22:77:c9:6f:e0:64:42:82:12:b9:8e:c1:99:00:
                    70:72:e2:33:67:27:64:90:e1:47:eb:d4:eb:d3:15:
                    8c:b2:de:a5:57:f4:18:13:8d:50:2b:0b:f0:5a:18:
                    64:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:3D:EF:42:D0:B7:AA:FB:B8:65:19:BC:5F:68:54:5A:D8:A6:F0:39
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/073DEF42D0B7AAFBB86519BC5F68545AD8A6F039.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.0.0/22
                  143.202.224.0/22
                  170.150.100.0/22
                  177.125.160.0/21
                  177.125.204.0/22
                  179.107.56.0/21
                IPv6:
                  2804:81c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262346

    Signature Algorithm: sha256WithRSAEncryption
         80:63:71:b3:ef:76:7d:0c:6a:92:c8:5d:a4:03:80:59:a1:b3:
         60:8e:9e:0b:ad:71:1a:bf:96:5d:c7:7b:e6:e8:f7:65:80:85:
         85:bd:e2:a2:f9:66:89:c8:ae:b9:65:a1:ed:d6:71:1c:a3:ed:
         80:1c:86:df:51:68:a6:64:b4:35:9f:e2:07:cb:23:c4:56:d6:
         8d:a5:62:52:79:d4:3c:f8:1a:1b:13:26:b3:00:19:cf:32:e8:
         9f:68:cf:56:e7:b6:08:92:bb:73:a9:27:50:aa:3c:ae:c6:21:
         0e:b9:5c:da:dd:26:47:68:16:93:2e:c6:97:2c:6e:f4:5a:50:
         89:b4:c1:25:59:25:bd:53:86:0d:20:49:eb:f4:f5:3e:c9:48:
         40:51:ce:e9:e7:19:48:70:46:97:09:0b:85:4d:9f:80:60:c4:
         55:60:ab:c7:60:cc:b7:4a:13:5a:ec:5e:c5:8c:a1:65:8e:5d:
         0b:0c:5a:3e:d4:42:4c:ef:e5:91:d7:8a:16:d9:eb:ad:0b:78:
         78:e6:a1:f8:cc:d4:ef:bf:a2:5e:9f:c0:c5:07:71:36:d0:8c:
         97:91:20:aa:6f:16:fb:40:b5:f2:29:54:30:01:96:13:c8:43:
         dd:a0:b7:a4:20:1f:f2:43:8e:f0:a3:02:37:46:f7:af:ed:40:
         8d:09:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 22:04:18 2024 by rpki-client on console-ams.rpki-client.org