Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/16E70819DD21A2FE7437CF06E669511B1282A5D6.cer
File:                     16E70819DD21A2FE7437CF06E669511B1282A5D6.cer (raw, json)
Hash identifier:          0ChUXRP7OJE1eWPvLhPEFL0sHth3bHJbN4SdVZZb/hM=
Subject key identifier:   16:E7:08:19:DD:21:A2:FE:74:37:CF:06:E6:69:51:1B:12:82:A5:D6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       189AAA08F86E33E58B74900E57BC516E6A0CCF30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/16E70819DD21A2FE7437CF06E669511B1282A5D6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Aug 2024 13:52:43 +0000
Certificate not after:    Thu 28 Aug 2025 13:57:43 +0000
Subordinate resources:    AS: 270305
                          IP: 201.216.120.0/22
                          IP: 2804:6a00::/32

Validation:               Failed, certificate revoked on Sun 08 Sep 2024 05:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9a:aa:08:f8:6e:33:e5:8b:74:90:0e:57:bc:51:6e:6a:0c:cf:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 29 13:52:43 2024 GMT
            Not After : Aug 28 13:57:43 2025 GMT
        Subject: CN=16E70819DD21A2FE7437CF06E669511B1282A5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:e1:fc:39:8b:a1:2d:20:83:e7:d3:eb:9f:
                    78:4b:6f:e9:09:29:4b:ef:68:0e:7e:77:28:52:a7:
                    99:c3:1a:82:a6:85:b2:95:1d:30:c1:bc:5d:a5:9a:
                    15:a0:00:58:82:22:f6:76:44:71:90:e3:fd:a6:d3:
                    a7:0a:8c:d9:4e:b0:42:0c:b2:29:a2:29:53:8b:da:
                    d3:5e:25:75:6a:d1:1a:cf:e5:6c:e8:da:da:69:49:
                    af:5c:d6:7f:ef:01:ce:2e:70:2e:c7:11:60:a0:6b:
                    6c:ca:c6:d5:e0:5c:82:14:ff:1e:2c:75:27:42:3d:
                    f9:55:82:b6:b3:f8:09:ba:32:d2:16:41:0b:63:aa:
                    6d:67:91:35:9c:77:b8:00:87:4c:79:81:de:0a:5f:
                    77:af:a8:0f:86:b2:1b:f3:5d:4f:90:15:88:2b:8b:
                    d1:67:3d:d1:1c:10:8c:86:9c:20:78:3c:81:a1:d6:
                    6e:6d:55:49:49:42:0c:9f:9e:bc:2a:8f:40:11:f3:
                    bf:ac:c3:88:75:56:5a:db:cf:a6:33:d6:b4:11:87:
                    05:fa:16:cb:20:66:f5:1f:90:35:95:50:bb:c0:34:
                    bc:8e:fe:c2:21:9f:b2:38:fd:33:31:58:25:ba:cb:
                    2e:46:9c:b4:1b:a8:4f:bd:98:65:31:92:19:07:cb:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:E7:08:19:DD:21:A2:FE:74:37:CF:06:E6:69:51:1B:12:82:A5:D6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/16E70819DD21A2FE7437CF06E669511B1282A5D6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.120.0/22
                IPv6:
                  2804:6a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270305

    Signature Algorithm: sha256WithRSAEncryption
         69:3d:d5:70:09:b9:e2:78:98:2e:07:d9:8c:8a:e0:9e:03:a8:
         ef:b3:d4:a0:b1:75:a9:d4:b2:e3:e7:4c:15:a0:3d:ee:1c:d5:
         b7:20:50:9f:a9:49:6b:11:59:7c:ec:25:99:62:bb:76:44:77:
         4f:03:8e:24:76:07:57:9b:f7:fa:1f:64:cf:60:b9:f3:fd:8b:
         10:30:86:09:82:89:12:2e:da:d1:bd:18:89:6e:ad:e2:cc:f6:
         41:cd:83:ed:26:26:8c:3d:03:56:ce:03:9b:38:01:f1:08:95:
         e0:93:3e:a7:a6:3c:dc:23:be:7b:c9:e2:f3:a2:2a:25:74:60:
         1f:34:37:a5:dc:5e:66:ce:e0:5a:37:87:c8:4f:1a:c1:4b:bc:
         35:09:35:53:6f:96:fe:e8:55:e3:62:e0:f5:a4:47:9b:a2:8e:
         f3:50:c3:9c:44:9d:02:25:e7:32:63:81:14:ec:7b:17:72:25:
         98:6b:bb:f5:cb:fc:41:1a:69:2b:47:30:ef:ba:82:06:31:ec:
         32:96:f1:58:51:fc:95:23:a7:88:10:95:3e:b6:1e:5d:6f:a0:
         5d:d6:4e:79:ba:1f:a5:5a:68:a1:9e:97:18:ec:15:9d:96:83:
         e1:57:84:23:20:3b:48:3e:bf:62:38:e9:b2:21:09:5d:d5:88:
         d2:29:eb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 07:48:39 2024 by rpki-client on console-ams.rpki-client.org