Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/13523A061A5DABD1F7FE1A8A2635EABBC3AED8AA.cer
File:                     13523A061A5DABD1F7FE1A8A2635EABBC3AED8AA.cer (raw, json)
Hash identifier:          eVXl5MaNPSXyCqhgpv35dRkoOVZlTA86CzGqD8LUxno=
Subject key identifier:   13:52:3A:06:1A:5D:AB:D1:F7:FE:1A:8A:26:35:EA:BB:C3:AE:D8:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0401FA38E57623D62D32B3311C4356CD0438841D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/13523A061A5DABD1F7FE1A8A2635EABBC3AED8AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 07 Oct 2024 13:03:24 +0000
Certificate not after:    Mon 06 Oct 2025 13:08:24 +0000
Subordinate resources:    AS: 270525
                          IP: 24.152.124.0/22
                          IP: 2804:6d54::/32

Validation:               Failed, certificate revoked on Sun 20 Oct 2024 10:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:01:fa:38:e5:76:23:d6:2d:32:b3:31:1c:43:56:cd:04:38:84:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  7 13:03:24 2024 GMT
            Not After : Oct  6 13:08:24 2025 GMT
        Subject: CN=13523A061A5DABD1F7FE1A8A2635EABBC3AED8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:f8:a3:ff:6e:16:3f:bd:b1:7c:ec:87:c9:
                    08:ae:35:5f:da:65:58:a7:4d:ce:bd:55:2d:29:2d:
                    78:96:3a:16:21:5f:0e:f6:e9:4c:82:da:26:d6:6a:
                    6f:d7:19:52:38:84:24:a6:f7:63:10:7e:91:0f:6d:
                    3c:4c:d4:ab:77:93:a7:85:e6:66:2e:45:5e:78:05:
                    0c:50:a6:8c:b7:2b:d7:07:86:56:0f:f0:67:d5:ea:
                    6b:cc:14:22:39:04:14:56:cd:d9:e3:9a:7a:51:85:
                    33:c6:ba:c2:ac:5e:7b:df:6e:17:53:7c:2d:72:fb:
                    a6:62:aa:82:bf:56:ef:2f:bd:26:27:32:32:28:32:
                    e6:40:08:70:83:b1:0b:3c:a9:85:35:48:37:14:07:
                    a3:20:78:54:d6:b9:66:8c:8a:f2:ab:41:61:e1:08:
                    00:43:6c:79:81:02:a5:4f:3a:87:1d:65:46:00:12:
                    a0:06:a4:b6:54:18:dc:93:30:d5:6d:19:0c:91:ad:
                    d8:8e:b0:5f:69:aa:ec:93:f2:12:fb:67:8c:3c:83:
                    7f:39:a8:a8:63:67:62:1d:23:dd:36:2f:ed:1f:63:
                    1c:78:3c:68:ee:75:49:2a:ee:50:ff:96:9c:7d:d9:
                    1d:f2:90:5d:1f:2f:a9:d5:bd:8a:07:bc:7f:8d:0d:
                    d3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:52:3A:06:1A:5D:AB:D1:F7:FE:1A:8A:26:35:EA:BB:C3:AE:D8:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/13523A061A5DABD1F7FE1A8A2635EABBC3AED8AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.124.0/22
                IPv6:
                  2804:6d54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270525

    Signature Algorithm: sha256WithRSAEncryption
         1d:03:b7:96:4b:63:39:3c:3d:a7:ea:d8:a3:90:6c:fc:c4:76:
         9d:5b:63:c6:6d:d3:8f:b0:b6:3b:e3:d9:bc:2f:24:1d:9f:6b:
         64:a5:09:df:47:97:16:04:16:28:e1:47:c6:9a:27:85:7c:bd:
         a6:90:ed:61:19:e0:62:d9:02:5f:37:b7:6c:e8:65:4f:d5:70:
         a0:ae:96:4f:f1:1c:b1:54:24:59:07:1b:55:44:5b:7b:a0:48:
         5a:5e:b2:b7:f4:f1:7a:22:71:5c:51:64:71:0b:82:e1:d7:a6:
         58:66:50:de:10:5a:e4:91:dc:65:42:3f:08:89:37:11:7a:da:
         9e:8c:43:a8:be:75:98:93:02:ae:82:83:9d:32:03:f9:71:a1:
         2f:5b:97:3a:b9:46:e9:58:04:9a:63:83:4b:9d:31:e3:35:a3:
         c5:e0:7c:6f:a5:65:c9:47:d5:1a:b1:8a:b0:d4:97:8c:b6:fb:
         d5:34:9c:83:85:4f:44:df:87:bc:1b:7c:10:6c:79:aa:d7:dc:
         e2:54:4b:19:c0:80:e5:40:05:44:32:79:1a:e5:4e:f0:ee:65:
         a8:a6:a1:42:0b:97:a3:5f:c6:63:89:6f:b5:b2:65:19:7b:9a:
         44:6b:03:d9:a4:6c:6e:e4:5c:2d:85:58:f4:f3:ce:54:35:da:
         68:17:0e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 11:58:24 2024 by rpki-client on console-fra.rpki-client.org