Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/15C528E2255F8875C8074B8C7D0290CCEC3EE4CD.cer
File:                     15C528E2255F8875C8074B8C7D0290CCEC3EE4CD.cer (raw, json)
Hash identifier:          DIDqoCFkHiXcwLlzwXZxbUkttB3DyxnM2/uTj1MxAFo=
Subject key identifier:   15:C5:28:E2:25:5F:88:75:C8:07:4B:8C:7D:02:90:CC:EC:3E:E4:CD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       433445C4A47383693D5922E1D4CEC7C605577882
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/15C528E2255F8875C8074B8C7D0290CCEC3EE4CD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Sep 2024 20:27:18 +0000
Certificate not after:    Thu 25 Sep 2025 20:32:18 +0000
Subordinate resources:    AS: 266194
                          IP: 45.5.176.0/22
                          IP: 2804:3c2c::/32

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 21:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:34:45:c4:a4:73:83:69:3d:59:22:e1:d4:ce:c7:c6:05:57:78:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 26 20:27:18 2024 GMT
            Not After : Sep 25 20:32:18 2025 GMT
        Subject: CN=15C528E2255F8875C8074B8C7D0290CCEC3EE4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:ad:3f:bf:de:92:2d:53:66:24:49:c4:73:
                    c7:c7:5c:c3:df:d8:cd:8f:4e:af:64:b0:70:ee:98:
                    ec:e7:58:8b:d8:f3:bc:fb:83:85:fc:c9:04:2a:96:
                    2f:3c:5f:12:1b:35:30:10:af:40:5e:a0:fb:ec:d5:
                    a7:b7:2b:d7:b6:5d:db:1e:68:d3:16:48:37:c1:aa:
                    50:95:74:82:6c:6f:ec:2f:c6:7e:45:ff:9a:e9:6b:
                    4f:60:98:21:81:96:d2:a5:ee:2d:bc:8a:ef:86:a8:
                    f6:37:55:79:05:5c:67:1d:cb:e7:d8:c9:33:af:5b:
                    d4:15:d6:6c:31:aa:ee:a5:17:97:80:75:34:15:ff:
                    85:9c:92:17:ac:18:5d:11:90:71:1a:62:8f:d0:2b:
                    4b:7e:9a:7f:20:ba:a8:8d:a0:35:d9:80:01:71:b9:
                    71:58:ce:03:26:f4:43:d3:ff:99:2a:de:cf:19:47:
                    b5:7f:1c:8a:c2:dd:51:7c:98:e6:d7:cd:b0:3c:9e:
                    1d:fe:67:ea:04:39:b1:2b:bb:22:6b:d4:48:3e:e4:
                    17:d0:d0:4d:30:1b:0a:6d:f8:6b:68:08:25:46:7c:
                    ba:aa:4b:08:9d:80:70:26:65:ac:90:e0:ce:bc:27:
                    d2:c6:b2:de:b8:a9:74:37:8c:f7:52:c0:38:10:c6:
                    4e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:C5:28:E2:25:5F:88:75:C8:07:4B:8C:7D:02:90:CC:EC:3E:E4:CD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/15C528E2255F8875C8074B8C7D0290CCEC3EE4CD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.176.0/22
                IPv6:
                  2804:3c2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266194

    Signature Algorithm: sha256WithRSAEncryption
         b1:8f:f9:88:95:86:70:b1:2a:1c:dc:1d:e1:d1:5a:15:a4:e0:
         d2:f7:14:99:ca:e1:9f:2f:da:ee:26:56:81:b4:96:95:11:01:
         ac:82:d3:e4:ab:6a:36:c8:00:57:bb:cd:d4:c0:ea:0c:35:0d:
         88:c4:80:d8:0b:58:f1:d5:37:dc:28:c9:4a:54:9f:e9:e5:a3:
         49:1d:81:30:1d:2d:56:b7:88:1d:98:ec:6f:37:22:95:29:38:
         f6:16:97:0d:af:3e:c5:47:ae:ab:80:3b:1f:63:b2:a0:f3:e1:
         c3:4d:d2:c6:fe:e6:2b:08:ca:e2:c4:11:1a:47:6d:d7:1a:f5:
         46:f3:3a:62:8b:e5:f7:04:68:f2:ae:29:e9:f4:2b:11:cd:a1:
         34:92:aa:36:f2:34:d6:e9:a6:55:3a:63:f1:2e:bc:32:a4:ce:
         aa:8b:2d:2c:13:dd:6a:07:3d:a5:aa:a0:ea:8f:e1:cf:77:b4:
         7d:77:a8:9b:35:5b:da:09:e1:53:d7:05:cf:2b:c8:e6:33:f2:
         26:0f:4c:df:8b:e5:34:78:90:72:a5:e6:e4:a0:74:a2:ba:38:
         12:48:0c:6d:2c:1b:de:87:c5:a7:48:ef:da:85:5e:f7:5a:6a:
         c2:d3:bd:24:f7:14:4e:ab:5d:ad:e3:79:a5:7e:bb:52:96:a1:
         5b:84:7d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:48:48 2024 by rpki-client on console-fra.rpki-client.org