Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer
File:                     0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer (raw, json)
Hash identifier:          5UHtfRq2PXKluJ/jANKesI1rktObhfTAP1b/qgNnqmE=
Subject key identifier:   0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       139DB08D9B110D473E2D7EFB89BBA08373C45EA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:44:46 +0000
Certificate not after:    Thu 03 Apr 2025 00:49:46 +0000
Subordinate resources:    AS: 269160
                          IP: 45.181.28.0/22
                          IP: 2804:6054::/32

Validation:               Failed, certificate revoked on Fri 24 May 2024 20:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9d:b0:8d:9b:11:0d:47:3e:2d:7e:fb:89:bb:a0:83:73:c4:5e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:44:46 2024 GMT
            Not After : Apr  3 00:49:46 2025 GMT
        Subject: CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:55:4f:86:d1:38:8b:66:97:86:2a:32:d7:
                    bf:6a:34:93:83:a5:da:b3:30:9c:0b:cc:2e:d0:55:
                    f2:2a:8b:a0:bb:0a:e1:8b:14:01:48:c8:2e:a0:1a:
                    e8:e6:6c:2b:0c:3b:ca:6d:0d:aa:25:e8:49:70:4a:
                    8c:2f:2a:b3:6c:96:16:5f:5a:96:23:e9:42:3f:36:
                    af:1f:02:9b:8a:9c:67:b5:2c:86:1b:4a:05:43:3c:
                    09:99:c6:ee:52:f8:9c:cc:a5:39:86:d8:a7:6a:b8:
                    61:8d:da:a7:c2:70:7d:7f:a3:b6:b6:2e:66:3a:9f:
                    3b:dd:64:ed:c6:39:39:2c:0e:2a:04:93:7b:28:47:
                    c0:d5:f5:fd:6b:a2:fa:42:5e:ca:20:b1:f2:4a:01:
                    1f:85:3e:b5:8b:af:8d:21:13:f3:41:2c:69:c6:59:
                    64:0b:c4:f2:9f:5b:4a:b9:f3:50:22:ef:d2:c5:6c:
                    7b:7c:36:71:0b:7f:dd:6b:a8:f8:af:c6:25:cb:68:
                    f1:2f:eb:65:c2:0d:93:5c:41:df:07:ca:aa:6a:60:
                    b4:96:aa:fb:cd:63:77:48:dd:a6:e4:49:7f:cc:99:
                    67:44:8b:8f:c3:c4:8d:fc:ac:3a:e9:dc:96:71:db:
                    04:76:9c:1c:73:4d:3b:4c:f8:89:85:bf:2f:9a:67:
                    a8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.28.0/22
                IPv6:
                  2804:6054::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269160

    Signature Algorithm: sha256WithRSAEncryption
         9b:2e:97:9a:fb:55:fc:0d:ec:4c:c9:e4:13:b3:76:e6:f6:5b:
         11:f5:3e:63:b5:76:11:01:ec:4a:52:14:a7:87:bf:ee:1e:61:
         eb:e1:b6:da:c2:c6:12:0c:b0:e6:66:ee:54:08:c1:76:91:02:
         2c:97:46:b1:46:dd:4c:1e:3a:a4:fb:8c:2a:9d:1e:04:cc:9b:
         c7:31:53:c3:da:ed:a1:f3:52:8e:64:1b:9e:88:04:6a:b1:73:
         8c:68:37:a8:7d:5f:d8:d3:b9:e9:ff:99:25:ee:d8:1d:c7:12:
         f4:fa:c8:73:97:23:64:c0:6d:b4:f6:01:2b:c3:94:28:5d:ba:
         0e:9b:b4:d8:06:f9:c8:83:c0:1b:9f:21:3f:32:a3:25:a0:e2:
         9b:41:bf:df:f7:76:56:78:03:61:03:62:57:52:32:94:1e:cb:
         8c:2d:d1:57:bf:bf:ff:63:37:ed:58:d3:ee:99:c9:35:f9:c4:
         70:71:dd:55:7e:a6:cb:8c:5a:02:1d:f5:30:f4:82:a2:a3:c3:
         18:7a:fa:4b:23:a7:40:9b:a4:38:39:d9:15:7f:b3:2f:84:e9:
         7e:f3:a6:4b:72:b8:a6:2c:3b:6f:b4:0a:54:5b:3e:d3:5a:c1:
         58:52:a1:b0:31:36:c1:f7:15:d6:09:32:44:f6:ed:4a:29:57:
         40:29:64:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 23:55:56 2024 by rpki-client on console-ams.rpki-client.org