Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.cer
File:                     135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.cer (raw, json)
Hash identifier:          3S0LuOcP3mLQlGdyfRNeCB1ZrXXUQLLCzqXbXxw5uSM=
Subject key identifier:   13:5C:D2:AC:F3:BF:40:24:A3:E6:5D:9A:4D:5D:CB:C6:DA:EB:D9:B8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       54E948327C7D606B1834D5753B7973F2CB09D4EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 May 2024 19:02:00 +0000
Certificate not after:    Fri 30 May 2025 19:07:00 +0000
Subordinate resources:    AS: 273470
                          IP: 45.173.156.0/24
                          IP: 2804:8f24::/32

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 17:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e9:48:32:7c:7d:60:6b:18:34:d5:75:3b:79:73:f2:cb:09:d4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 31 19:02:00 2024 GMT
            Not After : May 30 19:07:00 2025 GMT
        Subject: CN=135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:e4:ad:e7:b3:8e:f0:46:de:0d:aa:11:b7:
                    66:ab:a3:7e:92:c6:d9:6f:55:84:44:4b:2e:9f:28:
                    eb:24:35:8b:11:ce:fd:ba:44:8c:4a:97:b1:22:7e:
                    eb:3c:ec:8b:89:68:de:96:b1:4a:cf:35:44:c9:c6:
                    6a:47:ad:c7:ec:64:ce:f3:5c:c4:4c:c3:32:ef:43:
                    27:32:5a:cd:42:57:3f:84:e7:68:9f:64:f6:02:ee:
                    85:36:30:df:c4:68:96:78:cb:35:67:08:d9:5f:ff:
                    c6:a4:3d:94:2e:5d:5b:ae:30:c7:da:ba:84:52:f2:
                    5a:2e:89:15:08:8b:08:ea:9a:03:92:54:f3:29:d1:
                    99:14:29:16:55:4f:74:06:e5:d7:ed:1e:3d:68:c0:
                    db:7e:76:32:c9:83:45:a6:92:c8:b1:b9:74:c8:8b:
                    cc:e2:f7:fc:7d:74:a8:50:b6:b4:fa:f7:a2:64:62:
                    97:31:f4:11:0a:be:71:51:f9:99:6b:fe:67:56:14:
                    43:81:e5:cc:81:b4:41:fd:00:bf:40:eb:e2:f9:7c:
                    3e:b5:65:52:27:b5:68:2c:85:85:30:87:05:a7:64:
                    85:cf:f5:ca:34:3f:1c:91:1b:a8:e1:d1:fb:6f:b9:
                    91:84:6c:83:4f:6d:27:62:ed:0e:cc:02:dc:e7:b0:
                    84:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:5C:D2:AC:F3:BF:40:24:A3:E6:5D:9A:4D:5D:CB:C6:DA:EB:D9:B8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.156.0/24
                IPv6:
                  2804:8f24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273470

    Signature Algorithm: sha256WithRSAEncryption
         c9:e7:13:9f:26:f4:fd:e6:d6:05:f6:56:95:f2:c8:b1:c1:60:
         90:46:6a:b9:87:3b:9c:4a:57:4d:4c:86:8f:88:3f:1a:d9:f1:
         73:48:3b:b0:37:13:d4:ba:0e:79:2d:39:de:81:c5:7a:27:58:
         da:f8:fb:36:79:3d:cf:96:69:cd:cf:87:be:67:bb:28:e8:b7:
         57:c1:d7:b9:8e:34:bb:22:f2:d4:19:3f:17:48:f4:3b:be:b8:
         e7:16:cf:2f:53:63:91:3a:0e:4a:fd:78:db:b2:7a:38:f8:b8:
         ea:44:c5:ca:16:36:d1:b2:d7:97:1e:0d:f1:ab:fd:0a:3c:40:
         46:fb:17:c4:a8:9b:bb:51:42:7f:ae:91:3c:e9:36:72:43:99:
         72:bc:82:65:3b:39:a0:a4:f3:ca:c5:35:1b:e8:bd:3d:9f:a3:
         59:c4:16:9b:a0:ea:c2:00:c2:ca:55:18:cd:8f:f6:c8:10:9d:
         a2:fc:3f:8f:c8:3d:c0:7e:1c:20:01:3c:50:0d:96:37:f8:de:
         6c:24:bc:4c:77:85:ab:b4:e7:d6:b6:54:3e:0f:fb:7d:84:ca:
         dd:24:eb:bc:09:88:10:52:6b:1a:5d:9a:f2:6e:d0:e7:ef:c1:
         a9:54:4c:9c:16:15:c3:45:7d:03:2b:04:48:74:d9:40:92:e5:
         46:d9:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:19:09 2024 by rpki-client on console-fra.rpki-client.org