Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/18618F879C5032BBDFB90E728C39A0F51272E3E3.cer
File:                     18618F879C5032BBDFB90E728C39A0F51272E3E3.cer (raw, json)
Hash identifier:          yo1yhTnH3U2qDxNYSaEQuglQLSRZvJ4Wwv+MGD+NruM=
Subject key identifier:   18:61:8F:87:9C:50:32:BB:DF:B9:0E:72:8C:39:A0:F5:12:72:E3:E3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       528A0C553C721198B7DD6127EA093191B446814C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/18618F879C5032BBDFB90E728C39A0F51272E3E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Oct 2024 12:57:38 +0000
Certificate not after:    Fri 24 Oct 2025 13:02:38 +0000
Subordinate resources:    AS: 270274
                          IP: 200.124.84.0/22
                          IP: 2804:6980::/32

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 10:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8a:0c:55:3c:72:11:98:b7:dd:61:27:ea:09:31:91:b4:46:81:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 25 12:57:38 2024 GMT
            Not After : Oct 24 13:02:38 2025 GMT
        Subject: CN=18618F879C5032BBDFB90E728C39A0F51272E3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:e0:1b:75:95:80:33:23:7e:bf:b5:43:0b:
                    c4:a7:c4:28:c6:85:bf:9c:ea:f7:ef:b0:f0:20:49:
                    31:ce:94:4c:b4:9d:19:3c:e3:b5:a1:16:86:4d:48:
                    9d:6a:75:83:73:21:08:d4:43:2e:a2:27:aa:5a:22:
                    b7:e7:da:63:e2:90:da:24:6b:b3:e5:af:ea:e8:23:
                    78:9f:ae:a0:75:2f:e6:d9:cd:70:c8:60:a7:fd:b4:
                    58:dc:68:b2:16:5a:7a:2e:ca:91:e1:49:bb:ea:03:
                    5f:63:67:c7:84:00:53:ec:43:b2:b1:58:4f:90:00:
                    b0:df:16:e3:32:23:ef:2f:8d:02:56:dc:34:2d:11:
                    19:3e:25:2e:78:c3:7c:8a:e4:a9:ed:9a:70:9e:a9:
                    95:aa:25:59:46:d6:c2:b1:7d:dc:fb:e0:04:d3:18:
                    e2:9f:82:40:be:50:43:33:d3:37:97:17:2e:01:28:
                    19:ae:df:3f:17:66:52:34:07:20:7a:5c:11:6e:5c:
                    37:1a:bd:41:ba:32:46:54:a2:2f:5b:87:be:f4:21:
                    79:34:6b:c2:6e:b0:8d:11:2e:56:9e:99:4d:cf:b1:
                    60:c5:1c:09:86:3b:2e:33:cf:db:b8:d3:45:4b:93:
                    66:88:d7:a1:d0:8c:3b:92:e3:1e:40:e5:d3:24:b8:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:61:8F:87:9C:50:32:BB:DF:B9:0E:72:8C:39:A0:F5:12:72:E3:E3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/18618F879C5032BBDFB90E728C39A0F51272E3E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.84.0/22
                IPv6:
                  2804:6980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270274

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:1b:49:79:1d:f2:11:47:9a:17:53:e7:d0:3a:e8:87:18:
         c4:22:d1:47:5b:d7:7a:38:66:27:dd:8c:8d:91:e6:98:b6:af:
         3b:c3:6a:73:c9:0a:7a:2e:95:7c:18:65:89:57:f2:a3:70:ba:
         c8:58:29:93:1f:92:d3:cc:19:70:f5:45:69:e6:f9:05:b0:bb:
         15:82:d6:5e:05:da:b6:5c:cf:02:82:51:22:ad:e3:64:2d:4a:
         3e:eb:07:9d:78:be:5d:58:fc:7a:fd:89:08:b4:c4:6d:8b:e3:
         bb:0e:3e:f2:8a:89:0a:a6:8d:07:c5:63:77:f4:ed:67:17:37:
         8f:b1:0a:48:bd:ce:7a:50:1b:b6:3a:4e:e1:13:09:97:cb:78:
         26:e2:e1:ab:f3:8b:15:60:61:eb:8b:96:23:78:ac:33:17:ac:
         70:b6:a7:44:c4:35:32:58:0f:84:6d:ce:0e:d9:1e:1f:c7:50:
         ee:a6:7b:7c:e2:3c:fb:31:80:14:8c:6e:8c:05:bd:b4:13:e3:
         80:1c:59:c4:20:c2:90:57:52:ea:cc:bf:db:3b:ae:31:79:e9:
         cd:95:61:b1:8b:85:ac:0e:37:c0:60:b2:58:2a:35:ab:ef:4d:
         7b:23:6b:58:e8:3a:de:15:f0:90:9d:3f:32:e9:41:04:87:6b:
         a4:81:b7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 13:43:42 2024 by rpki-client on console-ams.rpki-client.org