Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/197DE4B6180FCA095E69FF5F4203DADC224DBFB6.cer
File:                     197DE4B6180FCA095E69FF5F4203DADC224DBFB6.cer (raw, json)
Hash identifier:          e2yzfNNJFNLZS41WferSHd3NVxZSYYd929tLBVzMxYE=
Subject key identifier:   19:7D:E4:B6:18:0F:CA:09:5E:69:FF:5F:42:03:DA:DC:22:4D:BF:B6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       415E313FF0EEAEC3BFF8A1CA1046E3B40B0C1E96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/197DE4B6180FCA095E69FF5F4203DADC224DBFB6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jul 2024 18:02:40 +0000
Certificate not after:    Tue 22 Jul 2025 18:07:40 +0000
Subordinate resources:    AS: 268398
                          IP: 45.160.24.0/22
                          IP: 2804:5098::/32

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 06:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5e:31:3f:f0:ee:ae:c3:bf:f8:a1:ca:10:46:e3:b4:0b:0c:1e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 23 18:02:40 2024 GMT
            Not After : Jul 22 18:07:40 2025 GMT
        Subject: CN=197DE4B6180FCA095E69FF5F4203DADC224DBFB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:c0:c2:aa:40:05:87:b8:ed:cd:d7:be:f4:
                    da:02:3e:c1:d6:16:62:95:4d:fc:b1:ed:fa:55:3a:
                    10:5c:5a:ed:aa:78:f6:44:75:a0:40:98:2f:72:a4:
                    1a:41:2e:ab:18:d4:d9:bd:e7:27:ea:cb:f8:10:e0:
                    74:70:8a:ed:e1:b1:6e:e1:49:03:b9:a2:56:34:8a:
                    cb:a3:39:eb:f9:85:bb:2c:d5:ff:e5:bd:b9:54:da:
                    1b:5c:5b:59:4f:ac:a9:af:81:02:a9:b2:00:cc:da:
                    17:79:ae:40:2d:72:20:c4:0f:72:b0:85:ea:f5:a0:
                    55:7c:1e:3e:20:da:90:d9:6e:d3:c4:a7:b3:d0:63:
                    b0:3d:13:19:f6:6f:9c:8f:36:45:0c:ce:a3:df:ed:
                    89:9a:6f:91:52:40:30:2c:fa:c5:bc:9d:53:be:85:
                    21:d9:2b:c4:28:99:69:b3:34:19:a1:2c:c8:6f:00:
                    fa:63:79:de:fc:ea:95:5f:d1:4e:bc:b4:78:0d:04:
                    57:ec:1c:f7:23:47:e2:36:47:26:76:e5:39:65:39:
                    71:02:29:28:de:5b:9a:97:98:42:c8:77:f1:ab:1e:
                    00:89:99:1a:43:76:90:fc:af:87:eb:bf:15:2a:13:
                    47:7b:c4:f4:f4:a6:56:1c:5d:14:81:e2:c0:56:a5:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:7D:E4:B6:18:0F:CA:09:5E:69:FF:5F:42:03:DA:DC:22:4D:BF:B6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/197DE4B6180FCA095E69FF5F4203DADC224DBFB6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.24.0/22
                IPv6:
                  2804:5098::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268398

    Signature Algorithm: sha256WithRSAEncryption
         bb:d7:1e:dd:55:4f:bc:8c:15:11:6e:a7:98:07:54:28:73:6f:
         e9:cb:76:a2:4f:ea:9c:52:13:e5:f4:33:69:3c:70:b7:30:98:
         5f:1b:f4:74:a5:ec:51:9d:cb:91:50:e7:ee:c9:67:d6:cf:0d:
         7a:17:c2:3e:ba:b5:0f:1c:fa:a7:f4:fc:56:bf:8a:53:68:66:
         22:d8:cf:12:17:98:5f:79:43:36:f6:ec:17:66:75:6b:a9:02:
         f9:ee:15:31:05:35:45:0d:dc:94:64:a7:34:6d:d5:bb:79:cf:
         91:28:6a:5e:74:57:29:28:8c:18:d2:f1:d6:ea:6d:36:2c:0b:
         68:63:33:47:1f:97:1a:99:d4:41:21:56:5d:ab:fc:bf:fc:3c:
         04:46:59:72:b3:91:57:dd:e1:1c:e0:ba:83:79:19:21:20:43:
         e3:c2:79:49:c2:38:cc:e3:df:d5:e3:89:bd:1b:ff:df:8d:0c:
         fb:77:5a:df:a5:09:1f:e2:e5:fc:6f:2d:87:ba:0a:cd:a1:35:
         06:3f:72:79:d9:7b:27:25:5d:33:ce:e3:dd:d0:52:28:e4:10:
         66:cf:58:cf:ed:2c:e5:fa:0a:6d:41:f9:60:41:df:3f:28:4d:
         66:b7:08:a5:d8:cc:8d:d3:70:08:33:32:1c:bf:90:6a:bd:c4:
         dc:7e:d6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 09:07:40 2024 by rpki-client on console-fra.rpki-client.org