Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A.cer
File:                     10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A.cer (raw, json)
Hash identifier:          OTlPWfFWgdyrIssssjqjmfRdl6H5LG4xudMarhLHdnM=
Subject key identifier:   10:C0:A2:0A:E6:37:3B:7B:3C:E5:CF:D1:0D:A7:B3:3F:66:0E:B8:8A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B66910D2A64940AE8477DA35EA00FDB1F78F251
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Aug 2024 20:47:50 +0000
Certificate not after:    Mon 04 Aug 2025 20:52:50 +0000
Subordinate resources:    AS: 268605
                          IP: 45.164.60.0/22
                          IP: 2804:53c4::/32

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 16:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:66:91:0d:2a:64:94:0a:e8:47:7d:a3:5e:a0:0f:db:1f:78:f2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  5 20:47:50 2024 GMT
            Not After : Aug  4 20:52:50 2025 GMT
        Subject: CN=10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:b0:bd:d5:7c:59:17:b6:b1:ca:32:7d:61:
                    32:0a:7d:87:ce:7e:8f:ed:56:c6:86:d5:54:c0:62:
                    f5:ea:ef:c5:89:fe:1f:60:94:38:7d:85:26:cc:92:
                    9d:4d:a3:77:96:29:9a:b9:40:75:ae:57:4d:7b:32:
                    b7:1a:2d:ae:d0:98:91:48:41:3f:7a:e0:27:33:58:
                    91:8f:84:05:ce:36:1a:ab:38:fa:44:d3:eb:1a:1c:
                    6d:f4:94:51:25:d3:4d:63:6c:9a:f6:6c:66:8d:16:
                    56:89:79:92:c4:88:1f:62:60:c6:5c:a6:b4:dc:d8:
                    66:18:1c:b4:1e:db:91:c6:06:4c:ea:74:b7:4c:cd:
                    2d:a2:2c:44:b2:48:bc:cb:ad:eb:92:e0:3c:91:ca:
                    f4:dc:bf:92:1d:12:ea:11:e9:b9:b9:16:95:1e:4d:
                    84:2b:1b:3f:ac:72:e0:47:a8:09:aa:2a:f2:6f:c0:
                    bb:52:d7:e8:e4:ec:34:a7:41:67:25:85:82:e2:b9:
                    26:24:41:ba:87:61:fe:62:73:ed:76:89:13:83:98:
                    c3:de:b3:76:73:62:a3:11:58:02:f3:dc:10:55:da:
                    99:a3:04:eb:59:ca:87:7e:5f:72:61:de:29:83:87:
                    2e:18:76:35:0f:38:1f:d0:dd:05:dd:f6:c3:b3:2f:
                    06:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:C0:A2:0A:E6:37:3B:7B:3C:E5:CF:D1:0D:A7:B3:3F:66:0E:B8:8A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.60.0/22
                IPv6:
                  2804:53c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268605

    Signature Algorithm: sha256WithRSAEncryption
         3f:67:73:1a:07:ec:55:7b:01:2f:1f:c4:8e:54:ba:e0:e2:13:
         02:55:53:bb:ee:34:f7:39:5e:42:c7:cb:ba:25:11:1b:aa:cf:
         27:94:51:5b:29:37:8e:b2:56:5d:78:3d:5d:51:b2:b6:10:06:
         89:61:a8:02:a5:4a:c1:e7:34:a9:6c:a7:56:6e:44:26:9f:0d:
         76:91:6f:8c:06:51:68:17:54:b6:81:38:4a:86:90:6c:76:e2:
         c6:95:d3:64:bc:e6:c9:cb:36:ce:86:e5:d8:28:11:f6:ca:ad:
         c8:b8:76:12:31:70:71:04:dd:c6:a2:29:05:26:80:a2:47:34:
         75:57:8d:bd:21:ca:cd:8e:68:49:69:55:72:a6:49:bf:bd:67:
         4c:81:1c:3b:d3:6f:42:54:0b:7a:5b:ff:b4:6e:c1:d7:8b:25:
         6f:01:cb:93:02:8a:28:e1:1e:0c:0a:25:fc:a7:76:ac:aa:a7:
         6e:88:36:d7:a1:4d:58:08:82:bf:47:10:3b:10:4d:77:f5:3e:
         54:fe:cf:6e:42:b5:da:ab:ae:b3:7f:04:b3:1e:10:7b:6a:9a:
         60:05:15:d4:1e:03:0b:7b:79:9f:f9:d7:13:b6:a6:c1:a0:57:
         ac:54:3c:11:1c:49:06:ca:71:12:8c:ec:8b:f2:de:12:24:21:
         59:8b:25:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 19:24:21 2024 by rpki-client on console-fra.rpki-client.org