Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.cer
File:                     0A3653A66554FACEFA2302F5A9E595FCE6E697ED.cer (raw, json)
Hash identifier:          jnwz83qzpvTlaCT3KXFnF3p/tBnO4DpP3/QteXZcgzI=
Subject key identifier:   0A:36:53:A6:65:54:FA:CE:FA:23:02:F5:A9:E5:95:FC:E6:E6:97:ED
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       719612B83867F7B68475F1EC1C1D24B8598BF568
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Apr 2024 13:21:47 +0000
Certificate not after:    Fri 11 Apr 2025 13:26:47 +0000
Subordinate resources:    AS: 263080
                          IP: 187.33.48.0/21
                          IP: 189.201.208.0/20
                          IP: 2804:964::/32

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 15:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:96:12:b8:38:67:f7:b6:84:75:f1:ec:1c:1d:24:b8:59:8b:f5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 12 13:21:47 2024 GMT
            Not After : Apr 11 13:26:47 2025 GMT
        Subject: CN=0A3653A66554FACEFA2302F5A9E595FCE6E697ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:cc:3e:c5:93:10:d3:4a:c1:98:a1:ac:0b:
                    ed:ef:d2:5f:62:2d:b6:a6:80:3e:9f:11:3d:dc:0b:
                    a8:39:3c:f4:2c:5b:77:42:3d:78:9d:3c:e0:18:77:
                    04:0f:3e:90:22:73:57:a8:58:bc:38:ea:b4:e1:19:
                    97:de:6e:c0:21:49:63:e6:1f:a6:bf:c5:fc:28:ec:
                    23:ef:1f:59:d2:55:f3:f1:40:03:2a:20:4a:1a:6d:
                    c0:5b:92:6e:91:79:f3:55:5d:ce:40:9a:4d:7d:36:
                    19:d1:a7:4a:7f:c6:07:70:da:85:55:a7:b5:a2:c6:
                    c3:55:65:d4:7e:4a:a5:20:de:2a:27:e3:28:38:65:
                    64:12:83:0d:85:7a:d6:93:44:b1:87:34:58:b8:b0:
                    51:56:12:18:14:72:ff:15:f3:e8:f0:e9:63:3e:b0:
                    45:77:b5:28:39:ac:ec:d6:a4:8f:a2:ac:2e:38:9d:
                    ac:c3:3f:90:28:cb:e2:df:e4:52:5a:24:bb:a9:98:
                    8f:c0:47:c0:eb:bd:bd:f7:e8:e0:4e:df:ab:6b:72:
                    4f:f0:8f:46:5a:86:59:f4:95:a9:2d:47:cd:60:b7:
                    58:92:72:72:da:0b:19:f3:08:e4:b9:1e:9b:c5:b9:
                    69:2c:81:a3:f9:cd:4a:28:26:0b:23:dd:47:87:a9:
                    2c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:36:53:A6:65:54:FA:CE:FA:23:02:F5:A9:E5:95:FC:E6:E6:97:ED
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.48.0/21
                  189.201.208.0/20
                IPv6:
                  2804:964::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263080

    Signature Algorithm: sha256WithRSAEncryption
         4f:bb:79:4e:8a:50:b6:f3:0c:4a:ef:99:a9:3e:1c:cc:39:2e:
         97:04:c0:14:51:41:b8:8b:56:31:12:c1:3f:53:09:aa:84:36:
         dc:ee:03:b9:3a:86:bc:95:54:31:3c:06:e9:87:c4:96:52:f3:
         e1:93:b1:1f:77:74:33:16:3c:96:48:2b:70:76:bf:e7:eb:41:
         de:5b:e5:b2:56:13:94:1a:56:38:58:77:c6:72:d4:c1:25:5e:
         7e:dc:67:78:8f:5d:78:b0:ad:35:ab:09:5f:64:56:85:49:cd:
         cd:b7:f9:9c:85:0f:ee:ff:e8:e3:5c:e7:24:a2:ba:77:ca:d9:
         7c:32:07:c3:b9:fb:4b:ce:1a:c2:9d:d4:5a:4f:e6:ac:14:83:
         e6:b5:4d:2c:e0:59:4c:06:01:72:fc:23:89:b5:5f:23:25:47:
         f4:c3:0d:4a:74:e9:f8:e5:b1:3a:24:5d:6b:50:b4:b7:f3:9b:
         7f:c5:27:d9:f5:14:5f:a7:9c:d6:38:b9:ba:2f:b1:42:06:5a:
         9e:f9:38:89:8a:bc:78:b3:66:14:0e:a3:c6:a2:eb:c7:da:20:
         6c:5a:f1:88:a8:a1:f5:6b:e4:68:dc:4d:e7:d7:19:94:28:04:
         1e:43:34:8f:12:5c:32:32:8e:ba:0c:0d:0e:9c:dc:d9:92:0f:
         a6:86:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 23:07:55 2024 by rpki-client on console-ams.rpki-client.org