Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/10EC670BE7393C173FA671371E0718B811F6939C.cer
File:                     10EC670BE7393C173FA671371E0718B811F6939C.cer (raw, json)
Hash identifier:          OR8ZBe9Zv5BIikqKtqcQVbRFsXdcQ691YtawYPQgZ1c=
Subject key identifier:   10:EC:67:0B:E7:39:3C:17:3F:A6:71:37:1E:07:18:B8:11:F6:93:9C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F048A0F89701B13585528A03735A97E1FA43D71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/10EC670BE7393C173FA671371E0718B811F6939C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Jul 2024 14:21:57 +0000
Certificate not after:    Tue 29 Jul 2025 14:26:57 +0000
Subordinate resources:    AS: 266349
                          IP: 170.238.232.0/22
                          IP: 2804:3674::/32

Validation:               Failed, certificate revoked on Wed 21 Aug 2024 05:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:04:8a:0f:89:70:1b:13:58:55:28:a0:37:35:a9:7e:1f:a4:3d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 30 14:21:57 2024 GMT
            Not After : Jul 29 14:26:57 2025 GMT
        Subject: CN=10EC670BE7393C173FA671371E0718B811F6939C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:43:4c:ca:a0:43:f0:9d:4a:62:a3:21:ad:92:
                    a8:6d:b2:82:3f:da:af:d4:26:1c:c4:a7:ab:52:d6:
                    f1:f3:e6:e6:13:81:39:75:ee:2e:89:35:1e:44:db:
                    ca:69:28:4b:90:04:ec:72:01:6a:6f:17:d2:36:86:
                    20:aa:eb:66:60:1d:ed:66:f5:29:44:e8:fd:07:5b:
                    6f:d6:5a:02:35:99:4d:c3:9f:17:40:6c:a3:78:ab:
                    6d:bc:b1:5d:15:e9:73:90:82:dc:bd:ec:0e:3b:1d:
                    95:17:39:0e:a2:98:46:d8:cb:bb:00:95:e8:55:b8:
                    21:74:3e:7b:06:24:c7:0e:99:8d:6a:e9:02:16:7b:
                    d8:00:f8:22:2d:41:5b:eb:59:d2:c3:0a:2a:a9:3a:
                    4f:55:c3:c3:09:5c:9b:de:a2:11:29:35:53:55:fb:
                    fa:f8:c3:63:41:ca:d9:0a:8c:0b:bd:16:bf:ab:5d:
                    ba:be:89:3e:c0:6b:8b:32:a9:71:39:cb:12:cc:00:
                    5f:70:ca:2e:09:d6:e2:17:fa:1f:e0:a6:69:98:83:
                    08:4f:51:b9:c7:2a:55:1a:ae:06:59:c1:6b:d0:71:
                    86:53:f1:30:3c:8e:7e:a9:51:e5:e5:36:c7:04:db:
                    35:75:85:16:63:73:23:6a:62:94:71:41:4e:fc:65:
                    04:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:EC:67:0B:E7:39:3C:17:3F:A6:71:37:1E:07:18:B8:11:F6:93:9C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/10EC670BE7393C173FA671371E0718B811F6939C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.232.0/22
                IPv6:
                  2804:3674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266349

    Signature Algorithm: sha256WithRSAEncryption
         4a:06:27:e4:da:ef:3e:58:79:d6:f2:d5:30:23:c3:49:ca:48:
         90:bc:ef:eb:66:d7:e3:d0:18:b3:cb:dc:87:42:af:e1:f3:59:
         3e:29:01:ed:30:df:26:5f:25:99:74:22:7f:89:70:d1:d8:04:
         29:ec:28:71:97:73:6d:43:3c:62:28:87:5b:e9:2a:db:69:d7:
         c1:b9:c7:51:13:48:c8:31:bb:e3:67:9e:48:67:f4:cd:52:ee:
         61:43:74:9d:5c:1d:ac:33:35:c7:24:c0:1c:f9:10:04:10:68:
         d6:ff:33:5e:df:d4:4a:ac:59:18:65:85:9d:a4:7e:fe:e3:6e:
         91:8c:02:f5:7b:22:e9:e4:2c:5d:a8:35:e0:ff:22:9c:14:23:
         ce:19:eb:ac:19:85:d4:cf:9b:35:90:13:b1:7f:45:0f:df:e8:
         22:49:2e:50:67:b0:45:86:75:9b:19:36:08:b1:f6:cd:d5:d3:
         be:ad:04:85:70:04:a5:bb:4d:e0:84:0b:ec:79:40:f1:a7:fb:
         5b:45:03:1f:bb:3c:41:92:cb:b7:e0:e7:e6:b3:a6:4b:93:ef:
         bd:64:1a:f0:5d:8c:30:8e:8c:25:ff:9f:82:e1:cd:09:b0:68:
         f9:e2:68:b7:e6:bd:ca:cc:f9:db:9c:ea:09:37:04:4a:34:2d:
         f4:be:89:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 07:45:45 2024 by rpki-client on console-ams.rpki-client.org