Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer
File:                     1733084816F181DADE66CFF006E96DDF853D8218.cer (raw, json)
Hash identifier:          gNNTBIAAM4B174fC9pR5N87VBBaxymcNYvZPey/9IXg=
Subject key identifier:   17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       43334CCABA52A5573E865BFB37F2991F3E632C3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/1733084816F181DADE66CFF006E96DDF853D8218.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Sep 2024 22:29:55 +0000
Certificate not after:    Wed 03 Sep 2025 22:34:55 +0000
Subordinate resources:    AS: 52944
                          IP: 168.205.152.0/22
                          IP: 177.38.56.0/21
                          IP: 201.150.112.0/22
                          IP: 2804:b28::/32

Validation:               Failed, certificate revoked on Wed 25 Sep 2024 12:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:33:4c:ca:ba:52:a5:57:3e:86:5b:fb:37:f2:99:1f:3e:63:2c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  4 22:29:55 2024 GMT
            Not After : Sep  3 22:34:55 2025 GMT
        Subject: CN=1733084816F181DADE66CFF006E96DDF853D8218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:13:cc:4f:37:a7:7f:c5:30:db:8e:22:6f:
                    58:2c:19:e9:93:b0:d5:69:96:59:52:fa:e4:b6:97:
                    2b:52:44:c1:fa:a1:04:0b:21:f5:33:e7:1e:c2:10:
                    7a:a8:e9:4a:31:e5:92:76:9a:0f:85:d1:4c:ba:d1:
                    71:b8:8a:e4:43:f4:f8:4c:3f:c4:15:a8:43:9e:bf:
                    50:04:13:97:cf:8b:64:a9:5c:25:a7:af:f9:c1:fd:
                    37:eb:87:3d:f9:15:ff:b4:41:47:c5:4b:0f:68:b8:
                    80:99:ac:74:d8:ea:f8:e4:bd:ef:71:99:57:31:64:
                    c1:a7:42:63:4c:94:7c:e8:08:9d:16:59:b0:3b:e7:
                    73:f7:e2:4d:0f:12:4d:6e:fd:56:e7:11:fa:fb:39:
                    66:6d:c4:16:f4:89:a2:b2:e7:22:d6:c7:ec:ac:24:
                    86:1b:0b:fb:c2:9f:5c:4b:fb:08:72:28:f7:c7:46:
                    5d:58:08:c8:7f:91:b6:9c:4e:1d:c4:9e:c0:ac:0a:
                    11:63:8f:76:0e:f8:86:59:ba:58:8f:7d:88:60:10:
                    15:61:c1:a0:00:e0:d6:e5:a5:ac:e4:ea:73:e3:20:
                    72:90:d7:3e:b1:74:f5:7b:82:b9:0b:eb:d4:05:3c:
                    da:4a:13:aa:7f:af:ca:94:39:1e:57:61:be:31:f8:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/1733084816F181DADE66CFF006E96DDF853D8218.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.152.0/22
                  177.38.56.0/21
                  201.150.112.0/22
                IPv6:
                  2804:b28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52944

    Signature Algorithm: sha256WithRSAEncryption
         41:70:81:4a:30:22:8f:f3:4b:71:e5:31:94:1b:b9:ba:05:cd:
         c3:a0:47:5a:6f:55:e9:ca:32:9c:f3:82:42:cf:81:57:a2:04:
         98:14:36:e5:a3:bb:4a:75:43:84:e8:24:41:82:ad:c7:1d:66:
         22:27:e9:a2:99:bd:ec:42:55:2d:8b:c9:37:71:69:00:a6:e5:
         87:72:31:60:1c:af:a7:a2:e6:a2:0a:0e:75:16:ba:46:ec:ad:
         69:0c:99:0f:6e:b9:44:aa:48:d3:dd:3d:22:f9:b4:f6:27:f4:
         b0:cf:cd:ce:ac:93:a1:34:c3:6f:fd:e3:02:ca:35:86:06:b4:
         3a:fc:d5:eb:39:e6:8b:6f:ad:04:f4:fa:22:83:63:b0:78:8c:
         0e:46:e3:e3:db:3f:d7:f7:f6:7a:19:3b:e8:23:05:0a:13:2c:
         4b:dd:d9:90:11:c6:0f:fa:d4:4c:b9:83:dd:16:bc:a6:fb:27:
         9e:ce:8e:06:1e:34:dd:aa:f8:c7:59:00:2e:a2:f1:fd:05:64:
         33:01:70:6b:be:ec:e5:f4:00:f1:61:b5:8d:e7:95:e7:a1:39:
         63:4b:c4:0b:2d:14:cf:b7:73:d9:b9:79:4e:87:f1:33:4c:5a:
         c7:37:43:be:fe:18:d8:c1:03:3b:53:52:2f:96:1a:30:05:ba:
         07:ba:56:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 15:26:30 2024 by rpki-client on console-fra.rpki-client.org