Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0A61AC70F1456CC2F283E9A37D376740FF4309D4.cer
File:                     0A61AC70F1456CC2F283E9A37D376740FF4309D4.cer (raw, json)
Hash identifier:          WTbxTbMnWwN+YXrXHBgXpvhDQZk1ZcNDC5YMg0kHayw=
Subject key identifier:   0A:61:AC:70:F1:45:6C:C2:F2:83:E9:A3:7D:37:67:40:FF:43:09:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       35E04926FEC9D701D834698B937E452BF8C03108
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0A61AC70F1456CC2F283E9A37D376740FF4309D4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Sep 2024 20:24:13 +0000
Certificate not after:    Thu 25 Sep 2025 20:29:13 +0000
Subordinate resources:    AS: 264344
                          IP: 138.185.84.0/22
                          IP: 2804:2674::/32

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 00:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e0:49:26:fe:c9:d7:01:d8:34:69:8b:93:7e:45:2b:f8:c0:31:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 26 20:24:13 2024 GMT
            Not After : Sep 25 20:29:13 2025 GMT
        Subject: CN=0A61AC70F1456CC2F283E9A37D376740FF4309D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:c3:61:61:2a:ef:2f:3c:e6:07:73:19:04:
                    f1:7c:3f:1e:6e:3b:b0:ff:3e:3e:41:f0:e8:9b:61:
                    4d:6b:dd:c2:81:b4:a8:b9:c9:68:7e:aa:e8:4d:6a:
                    a4:ac:4c:a7:87:94:30:3a:40:c0:e6:21:d0:c3:fa:
                    2e:84:36:5c:e1:e9:89:21:6c:5e:2b:63:78:dc:29:
                    f0:57:67:0a:2d:56:7c:ef:90:f4:13:e5:20:da:21:
                    15:54:0e:01:e4:e9:75:96:ab:25:ea:e9:eb:91:46:
                    6e:c6:80:69:91:7c:0f:6d:0c:2a:f7:6a:a7:a5:7c:
                    43:ff:a4:00:f8:8e:85:8a:5c:a0:2e:fe:6f:35:2a:
                    e4:86:3e:c2:da:dc:2c:3c:3d:71:61:07:61:90:bc:
                    b7:b0:aa:81:c7:aa:97:5d:1d:de:1f:be:fd:66:7a:
                    51:6d:13:f0:56:44:b8:1e:28:fe:2c:95:3e:a8:8d:
                    a2:6f:ed:64:23:b6:41:7e:99:90:94:6b:1b:3b:38:
                    36:69:0a:92:01:7a:0b:b7:67:a6:20:7a:b6:96:09:
                    76:c3:dd:8b:d2:ca:63:c6:31:a7:a9:da:0a:18:36:
                    91:3f:f2:9b:ca:4b:d6:dd:12:69:7f:ae:a4:db:ff:
                    e3:a0:a0:81:6a:08:89:f5:fa:8c:df:68:18:86:05:
                    bc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:61:AC:70:F1:45:6C:C2:F2:83:E9:A3:7D:37:67:40:FF:43:09:D4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0A61AC70F1456CC2F283E9A37D376740FF4309D4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.84.0/22
                IPv6:
                  2804:2674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264344

    Signature Algorithm: sha256WithRSAEncryption
         c1:f9:b5:e6:89:f6:01:af:37:95:df:58:ea:b5:f0:93:83:1b:
         3f:28:f9:c9:79:8b:b3:91:bf:2a:83:c0:a1:7a:f8:62:8c:67:
         a0:79:d3:b7:a2:30:29:cd:6a:4a:00:87:49:47:73:df:b4:c0:
         85:d8:e1:59:b0:f8:e4:dc:8e:23:b0:8a:d3:cb:42:12:43:f4:
         a9:15:4a:94:4b:21:a6:ab:b6:c4:99:7f:04:bb:21:5d:a4:85:
         2f:68:a0:2e:cb:1a:7a:c5:7a:fb:94:b3:ed:ff:b6:5d:44:da:
         fe:a6:bc:a3:6a:82:a1:a8:84:72:07:f7:62:ce:dc:44:93:55:
         42:da:ae:f5:48:aa:33:d5:70:f6:1b:b1:a1:36:e2:63:0a:29:
         64:a0:a9:7c:f7:45:44:4c:08:8c:b3:06:1a:75:ac:11:5e:17:
         ed:9f:86:a2:d5:14:2c:39:d3:f1:e9:76:68:3b:3e:c2:28:21:
         f6:24:2e:9c:93:59:23:78:4a:3e:1d:3d:2f:ad:e9:dc:fa:54:
         a2:23:f0:37:c8:dc:1a:61:9c:bf:ad:58:01:ee:40:01:96:7a:
         99:d5:b1:f1:bb:a7:0f:b1:30:73:22:35:0b:54:64:eb:f7:2e:
         2a:ff:83:a6:d6:ce:7e:c6:bc:94:c2:20:d9:ee:41:08:41:36:
         79:d0:cf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 02:58:43 2024 by rpki-client on console-fra.rpki-client.org