Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1416CEC1EC854A333FC7CDFF566356C87CB26A24.cer
File:                     1416CEC1EC854A333FC7CDFF566356C87CB26A24.cer (raw, json)
Hash identifier:          Ze5Y5c5L9nN/ZEaJoaRfjmKtIEJc+YN3EMqobzLyAbs=
Subject key identifier:   14:16:CE:C1:EC:85:4A:33:3F:C7:CD:FF:56:63:56:C8:7C:B2:6A:24
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       700929A3BD1C649D4BB68DB68616CFC4EC12DD0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/1416CEC1EC854A333FC7CDFF566356C87CB26A24.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Oct 2024 11:14:33 +0000
Certificate not after:    Tue 21 Oct 2025 11:19:33 +0000
Subordinate resources:    AS: 268669
                          IP: 45.164.100.0/22
                          IP: 2804:54c4::/32

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 13:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:09:29:a3:bd:1c:64:9d:4b:b6:8d:b6:86:16:cf:c4:ec:12:dd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 22 11:14:33 2024 GMT
            Not After : Oct 21 11:19:33 2025 GMT
        Subject: CN=1416CEC1EC854A333FC7CDFF566356C87CB26A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:f4:6b:1a:ab:73:91:2f:3b:5e:3b:7d:27:
                    60:e8:50:a1:54:e3:8c:2c:f1:86:97:89:a7:68:83:
                    18:57:25:78:71:76:1e:8a:55:6e:52:98:7a:10:39:
                    df:b7:40:6c:60:a4:ef:32:f1:72:23:3b:ac:b4:93:
                    fb:c8:0b:f6:38:36:c5:77:f5:7e:ad:8f:3c:f4:76:
                    19:67:ad:38:d0:93:48:c3:08:e9:b5:d2:d2:bd:73:
                    b3:32:a9:9a:95:7d:bc:d7:5f:cf:cb:1b:29:4e:6e:
                    b1:a1:0c:0c:6d:b2:fa:e3:2b:0a:55:65:94:68:8b:
                    86:bb:a8:9b:41:5a:ef:30:a4:91:3b:ec:30:e4:c6:
                    af:39:ff:90:c8:a2:6b:1e:fb:df:ff:96:03:62:08:
                    ab:65:32:8c:fa:f6:ef:e1:82:89:a6:07:86:81:94:
                    30:86:ae:91:8c:1a:8a:88:7d:62:ba:ec:2f:cf:a1:
                    cd:37:9d:2c:25:5a:c6:4e:7c:5f:86:9c:e2:d2:65:
                    f1:b7:ac:29:f1:b7:d2:5a:cd:78:b8:0b:27:f8:cf:
                    bb:1d:b1:84:c6:52:73:b8:f8:f7:62:80:96:44:c6:
                    b8:7d:0a:7d:a7:5e:c7:61:84:40:6c:f2:22:9e:ec:
                    40:b6:2b:73:cd:ca:1a:6a:74:c9:02:d6:31:bd:92:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:16:CE:C1:EC:85:4A:33:3F:C7:CD:FF:56:63:56:C8:7C:B2:6A:24
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/1416CEC1EC854A333FC7CDFF566356C87CB26A24.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.100.0/22
                IPv6:
                  2804:54c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268669

    Signature Algorithm: sha256WithRSAEncryption
         73:43:7e:f1:ae:7a:d8:2e:5a:19:dc:36:ec:49:f1:a5:ba:e0:
         70:21:a4:17:9f:b0:b6:49:40:ad:5e:bd:31:53:37:33:d0:84:
         0f:21:ff:20:00:a0:b5:14:cb:44:b4:3f:37:6a:4e:04:30:0d:
         9e:10:ff:e2:46:9f:02:db:c6:5e:3d:f7:07:fa:75:c9:a8:11:
         97:73:36:21:2d:e9:f8:45:76:85:b7:d4:ff:43:9d:59:b9:5f:
         2e:18:e3:d7:2c:d0:54:99:4a:df:9e:bc:66:38:07:5d:b6:9d:
         ae:b4:48:9a:9b:ca:b4:11:ca:c7:29:82:27:78:93:5a:9e:c0:
         f6:70:34:66:c4:76:69:14:67:f7:b2:cf:bb:46:fc:a1:3b:e6:
         f8:29:5b:be:5b:0b:d9:12:5a:70:91:5d:ce:f4:bc:e3:7c:66:
         c9:fb:f6:89:90:6b:6d:13:05:67:55:6d:00:37:af:fa:d1:f3:
         05:9a:64:55:33:3e:0f:a9:f4:94:86:3e:63:8e:82:9f:0d:e7:
         71:c8:52:21:9a:57:83:48:15:fa:ba:25:b6:d5:d4:07:6e:58:
         ad:dc:10:9d:d0:59:8d:c9:45:b7:fe:a0:46:63:99:aa:cd:a9:
         5e:7d:b7:31:20:7e:fd:57:96:b4:d8:07:ae:0e:0a:26:dd:a1:
         aa:75:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:37 2024 by rpki-client on console-fra.rpki-client.org