Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1594D69768683A1E6553FAADB034EB597E1019E9.cer
File:                     1594D69768683A1E6553FAADB034EB597E1019E9.cer (raw, json)
Hash identifier:          +D+xhacrEq6Sbp9DowhREOCHf/Mw5b/Uoplqmj+QNfw=
Subject key identifier:   15:94:D6:97:68:68:3A:1E:65:53:FA:AD:B0:34:EB:59:7E:10:19:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       05536D807578A30B2EA1259F5BED0B5732DA3000
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/1594D69768683A1E6553FAADB034EB597E1019E9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Sep 2024 20:33:31 +0000
Certificate not after:    Thu 25 Sep 2025 20:38:31 +0000
Subordinate resources:    AS: 268063
                          IP: 45.168.124.0/22
                          IP: 2804:5768::/32

Validation:               Failed, certificate revoked on Wed 02 Oct 2024 15:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:53:6d:80:75:78:a3:0b:2e:a1:25:9f:5b:ed:0b:57:32:da:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 26 20:33:31 2024 GMT
            Not After : Sep 25 20:38:31 2025 GMT
        Subject: CN=1594D69768683A1E6553FAADB034EB597E1019E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:90:34:44:da:b2:f4:22:f0:43:2f:f1:02:5d:
                    ed:53:d5:ac:55:ef:32:44:63:c4:d5:fa:ce:7b:7e:
                    9c:1a:64:3d:0d:b2:04:41:e7:9e:d4:6a:2f:00:83:
                    b3:5f:ed:ac:60:28:7d:e4:db:07:9d:9f:15:39:e3:
                    b2:e9:5d:27:4c:e6:54:80:91:3c:d8:92:f0:a3:94:
                    6d:45:ec:10:b7:dd:2d:5b:c2:e3:e0:a2:d5:f9:68:
                    cb:e1:a7:c2:76:19:f1:f5:42:91:e2:87:f2:ca:01:
                    d6:07:15:ec:f8:cf:21:4c:3b:69:f5:df:55:99:35:
                    76:88:bb:e5:92:a2:e4:64:ba:63:eb:6a:61:8a:1b:
                    41:ff:49:46:f7:bd:f6:7b:cc:75:fc:a5:51:fa:7c:
                    2b:20:11:40:21:41:0d:f7:84:6d:38:32:bd:36:9b:
                    13:25:8a:0d:91:34:a3:30:31:4e:c0:80:bd:04:90:
                    9c:0e:c2:56:8c:c0:b6:4b:2e:4f:72:bd:dc:37:b9:
                    27:f9:34:12:79:06:0a:59:5c:8d:24:06:66:32:bb:
                    43:9f:d0:6d:5a:ef:ce:e3:b2:ad:c1:58:70:84:95:
                    ef:4a:f7:bb:ac:18:d8:58:50:c0:78:e0:b8:82:ff:
                    12:63:bf:8d:9f:8a:79:1c:39:08:92:61:de:1d:0c:
                    5f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:94:D6:97:68:68:3A:1E:65:53:FA:AD:B0:34:EB:59:7E:10:19:E9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/1594D69768683A1E6553FAADB034EB597E1019E9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.124.0/22
                IPv6:
                  2804:5768::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268063

    Signature Algorithm: sha256WithRSAEncryption
         c7:69:0e:ec:87:d6:b2:6a:1b:0d:a3:b4:e9:fc:70:71:68:cf:
         46:e7:3a:b8:18:36:c4:26:b4:b4:ca:f6:77:06:b9:83:ec:d5:
         30:48:0b:2f:2e:6a:9c:fa:c0:a3:2b:1b:9a:85:58:3b:19:70:
         07:9c:89:66:53:84:52:f1:d5:ad:27:87:30:29:12:61:42:3a:
         71:fc:5d:a9:a6:22:39:e8:97:53:fb:f7:69:60:36:f6:4a:09:
         05:3b:8a:55:c5:1f:9d:dc:4c:fc:29:3e:8d:80:6a:b7:90:13:
         48:3f:a5:00:9f:e0:dd:75:99:15:e1:5a:c5:27:84:db:08:a1:
         ea:64:16:be:50:8e:40:b5:b3:2c:c4:a8:bd:7c:1c:33:15:ef:
         5b:78:78:2d:a3:c0:44:17:84:31:89:4f:f2:b7:41:89:e4:82:
         96:d7:bc:ff:31:54:0e:88:37:45:04:6c:79:bc:c4:9d:72:7e:
         6f:24:e3:e8:1f:a0:4e:58:a6:60:e8:bc:e5:28:4a:00:86:d1:
         de:87:b7:ff:c3:c3:25:39:70:35:a9:cd:f4:23:eb:50:fb:e9:
         3b:b9:ff:45:8f:30:f3:b1:cc:42:4a:a0:fe:93:29:b0:32:42:
         f7:fc:49:5f:d6:14:cd:7d:e7:90:c1:34:6b:88:d0:55:41:89:
         fb:07:7f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 19:58:40 2024 by rpki-client on console-ams.rpki-client.org