Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/165C74E6150DC907318672044B1DBC3EE8C8F1E7.cer
File:                     165C74E6150DC907318672044B1DBC3EE8C8F1E7.cer (raw, json)
Hash identifier:          hOccYjh0aauUUz+Bxr68Ut2Sr8GyFOHL5SCmxLc4SvU=
Subject key identifier:   16:5C:74:E6:15:0D:C9:07:31:86:72:04:4B:1D:BC:3E:E8:C8:F1:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25EF81D81F861EDEF30CEA0E22828A249218C3E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/165C74E6150DC907318672044B1DBC3EE8C8F1E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jun 2024 11:30:25 +0000
Certificate not after:    Tue 17 Jun 2025 11:35:25 +0000
Subordinate resources:    AS: 266166
                          IP: 72.44.20.0/22
                          IP: 2804:3bb4::/32

Validation:               Failed, certificate revoked on Mon 24 Jun 2024 07:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ef:81:d8:1f:86:1e:de:f3:0c:ea:0e:22:82:8a:24:92:18:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 18 11:30:25 2024 GMT
            Not After : Jun 17 11:35:25 2025 GMT
        Subject: CN=165C74E6150DC907318672044B1DBC3EE8C8F1E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:43:f1:8a:0c:5a:52:0e:aa:2d:ec:9d:39:ce:
                    c4:8c:d4:bb:47:5c:f0:70:36:ac:13:14:03:66:a0:
                    6c:eb:f3:9e:06:99:46:a3:9a:c3:1a:09:7f:72:82:
                    4a:98:19:f3:ed:8b:98:5f:c2:16:dc:99:c7:c7:8f:
                    3c:c4:e3:17:30:cd:4d:0e:96:04:6f:0a:8d:48:a3:
                    d9:0e:c9:da:55:63:4f:b0:2a:c3:47:4d:55:c0:4f:
                    fe:d9:11:22:7a:ec:27:b3:97:b6:76:21:05:b5:47:
                    9a:05:93:dd:0f:30:e6:d4:97:da:76:1e:86:62:d6:
                    00:3a:c2:38:9a:80:a5:aa:a3:7b:65:e7:87:3d:12:
                    f1:ac:6d:b0:25:54:62:cc:40:c8:41:b0:35:2e:87:
                    b5:30:3c:f3:78:59:21:fd:4e:cd:15:2d:86:57:a2:
                    3b:5e:6b:c7:18:f2:c6:ec:b3:d9:07:42:f1:f5:1d:
                    67:6d:1e:33:b0:1a:ff:20:c7:b4:aa:97:61:53:98:
                    bb:cb:ef:26:7f:63:f2:d8:f1:88:74:77:c0:9e:2f:
                    a5:6f:7d:c0:d4:61:ae:d7:5c:90:5a:aa:52:e1:00:
                    bd:d0:e6:7f:6b:a0:55:96:95:e5:52:61:fd:f7:90:
                    47:2a:60:4e:78:67:e4:9c:38:07:cb:31:ba:12:a9:
                    9c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:5C:74:E6:15:0D:C9:07:31:86:72:04:4B:1D:BC:3E:E8:C8:F1:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/165C74E6150DC907318672044B1DBC3EE8C8F1E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.20.0/22
                IPv6:
                  2804:3bb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266166

    Signature Algorithm: sha256WithRSAEncryption
         85:3a:a9:81:70:b1:5b:d1:05:b7:93:14:c9:aa:02:c1:3e:02:
         3c:ee:37:65:34:7e:61:d8:9d:80:55:0e:aa:01:0e:a1:8c:0e:
         8e:c3:2e:85:59:de:a8:92:ba:e8:a7:c7:af:ba:ad:81:4d:2c:
         08:51:a1:d6:34:89:e1:6e:23:81:7d:d5:f7:44:32:15:36:a1:
         b5:b3:68:c4:46:5f:de:05:5a:00:00:56:a5:c8:24:54:bd:75:
         15:a2:b8:c5:57:7e:1b:9f:17:a4:e5:30:80:93:87:9a:f5:af:
         4d:cc:bf:72:c1:9c:db:91:ce:08:4c:b8:35:af:0f:7b:6f:bc:
         f7:0f:a4:47:76:07:26:3d:3e:14:f5:de:91:e4:69:13:9d:da:
         98:e7:0a:b8:ab:f4:49:e4:f3:39:17:7c:e3:af:69:38:22:50:
         3c:6e:5e:c9:48:82:36:cd:f3:1e:db:63:26:b0:69:89:47:dc:
         d3:5a:82:3c:42:eb:10:f6:56:b1:5c:58:e6:8b:a8:8d:5b:11:
         0e:e9:71:16:94:48:9d:a8:82:1d:96:a0:37:e8:29:76:77:19:
         43:fa:48:95:c5:ab:98:80:8b:be:53:38:67:0c:bd:cb:1d:df:
         80:ff:f0:89:05:f1:91:d9:d5:99:7a:8a:2f:4a:f6:3b:96:62:
         fa:35:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:53:22 2024 by rpki-client on console-ams.rpki-client.org