Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.cer
File:                     165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.cer (raw, json)
Hash identifier:          x56KhCulABJsNvyXksLSBssUrDycEHA+qi3Rr99W3k8=
Subject key identifier:   16:59:16:CF:70:A1:EB:A2:C4:0C:06:21:FA:C8:30:CA:F9:E2:AC:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       64843DF318871705017E69141123B470219D2FC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 May 2024 12:00:44 +0000
Certificate not after:    Wed 28 May 2025 12:05:44 +0000
Subordinate resources:    AS: 266376
                          IP: 170.80.112.0/22
                          IP: 2804:36d8::/32

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 19:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:84:3d:f3:18:87:17:05:01:7e:69:14:11:23:b4:70:21:9d:2f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 29 12:00:44 2024 GMT
            Not After : May 28 12:05:44 2025 GMT
        Subject: CN=165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:42:6c:a7:4a:c4:66:e3:9e:29:ea:a7:e1:f0:
                    a4:b1:cd:f4:78:ee:8b:05:ee:05:ac:b5:bf:c9:bd:
                    43:b8:17:8a:82:b2:c3:4e:48:06:f3:18:82:31:d9:
                    0a:5b:23:93:f0:03:27:f8:37:23:b5:fe:f8:54:0b:
                    00:8a:4d:d9:1a:09:f7:69:da:dd:6a:c1:58:76:3a:
                    56:db:ea:e6:d7:e8:b1:6c:95:53:6e:44:b6:0c:9f:
                    22:69:75:ef:c0:ef:46:24:65:49:5c:97:e1:0b:3d:
                    de:b9:22:7a:18:88:29:9f:65:70:2c:98:2f:7f:1f:
                    a4:73:fb:8f:bb:f1:23:b0:64:0a:6b:bb:90:4b:e3:
                    f5:a0:2e:48:1e:81:a2:a5:05:ec:e8:e4:e0:a0:62:
                    0e:cb:44:70:fb:46:c4:7f:ad:d3:7e:7b:f4:b3:4b:
                    fe:36:48:6f:ee:8b:3b:48:40:5c:82:f1:00:80:ed:
                    82:2e:78:8b:9b:bf:9f:b3:d1:82:c7:54:60:a1:65:
                    d5:b7:f5:d8:0c:2c:40:1a:76:97:dd:45:19:4a:63:
                    66:62:61:e9:6a:d5:d7:5a:dd:d3:03:31:a6:5a:c2:
                    f5:79:64:97:46:1a:5e:e9:e5:b4:d3:9c:8e:34:56:
                    6c:00:6e:c9:95:fd:c5:44:bb:cc:c8:47:bc:4d:f2:
                    6d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:59:16:CF:70:A1:EB:A2:C4:0C:06:21:FA:C8:30:CA:F9:E2:AC:EA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.112.0/22
                IPv6:
                  2804:36d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266376

    Signature Algorithm: sha256WithRSAEncryption
         84:41:c3:38:24:0f:ec:5b:c2:47:04:da:a1:88:2f:30:e7:a9:
         29:f1:6f:9f:c8:78:9b:2c:f5:ce:0c:f5:31:c0:e6:54:41:db:
         4d:68:6c:2d:ca:03:79:6b:e2:db:f5:81:6d:e8:bf:35:60:3f:
         9d:88:2b:af:58:51:3e:9a:48:0b:dd:29:f7:9e:78:b3:a9:06:
         3b:ff:4f:87:73:49:e8:b8:b5:30:7c:a8:04:0b:f3:25:48:e5:
         6c:d0:d1:15:10:1f:38:64:d9:33:51:98:39:0a:f7:1c:ae:81:
         38:0e:6f:1b:e8:3e:d0:3a:61:3a:03:1b:b5:ed:7b:cb:3c:9d:
         e6:35:2a:01:40:f5:3b:4b:2c:9b:54:46:72:30:1e:ea:d6:7d:
         00:78:dc:62:b4:2f:26:9f:0b:99:52:e1:e3:57:24:ad:24:20:
         d8:a4:21:51:01:5a:b7:af:89:1e:f3:46:79:dc:be:c2:6d:88:
         d7:44:ae:0d:ca:54:c7:99:8b:d4:01:20:d5:97:e0:24:3f:4b:
         88:9c:ed:a5:23:91:d2:50:51:99:37:24:2a:93:6a:96:c8:60:
         b6:72:9f:5e:84:be:cc:f1:28:94:81:83:00:5d:4c:c3:e9:90:
         a3:41:f3:44:7b:7b:9d:fb:4e:8c:04:a5:54:31:a2:b8:88:10:
         ea:16:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 20:53:00 2024 by rpki-client on console-fra.rpki-client.org