Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1BBFB7473D014CCDF66C9B38BEB8874721F33BED.cer
File:                     1BBFB7473D014CCDF66C9B38BEB8874721F33BED.cer (raw, json)
Hash identifier:          yJxVhMBZoAq6Z68HeboEhrI4GDWYWLYIB/jM/UJaucc=
Subject key identifier:   1B:BF:B7:47:3D:01:4C:CD:F6:6C:9B:38:BE:B8:87:47:21:F3:3B:ED
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5461F344667772EA4CCB3A1A3A57D38B1B1B5E92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GX8RmjGL38oaPaiHgrr9tWe9qFVj6fDLcWFTSYBC4yph/0/1BBFB7473D014CCDF66C9B38BEB8874721F33BED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GX8RmjGL38oaPaiHgrr9tWe9qFVj6fDLcWFTSYBC4yph/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 14:35:16 +0000
Certificate not after:    Mon 30 Jun 2025 14:40:16 +0000
Subordinate resources:    AS: 268122
                          IP: 45.169.184.0/22
                          IP: 2804:5854::/32

Validation:               Failed, certificate revoked on Sun 15 Sep 2024 04:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:61:f3:44:66:77:72:ea:4c:cb:3a:1a:3a:57:d3:8b:1b:1b:5e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  1 14:35:16 2024 GMT
            Not After : Jun 30 14:40:16 2025 GMT
        Subject: CN=1BBFB7473D014CCDF66C9B38BEB8874721F33BED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:ac:67:8a:9a:7f:18:1d:b8:be:0a:08:b5:
                    45:9c:95:4f:ae:a0:a8:59:2d:79:b4:2e:13:6a:a3:
                    29:68:54:df:e9:10:53:7b:64:02:f2:2e:57:c2:b3:
                    e2:0b:ef:80:26:35:1d:ac:12:55:8f:0f:13:aa:71:
                    ee:31:18:31:59:81:ba:aa:3c:36:f3:54:35:ce:73:
                    e5:ca:20:b4:44:d7:d1:b3:9b:1b:f8:21:52:69:89:
                    2d:5d:eb:a1:2e:0d:15:ed:6c:ba:ef:16:3a:91:ee:
                    cc:ee:9a:4c:0b:b8:94:16:68:cb:d1:da:69:4a:7d:
                    3a:85:bc:64:11:8d:26:d2:b4:0b:8c:67:11:4c:b3:
                    c0:3e:ab:bc:8d:c6:83:ff:5f:62:be:ec:44:aa:cb:
                    a1:6a:b0:86:b3:8d:96:68:96:7f:7a:3c:5d:4a:f9:
                    ce:61:cd:97:69:1c:50:48:ad:1e:c4:b8:97:39:be:
                    52:51:11:2a:0a:e7:f6:a7:20:1b:7c:86:65:be:5c:
                    11:29:e7:cc:b6:e6:61:0e:b6:21:4f:f2:ec:35:4a:
                    9c:3b:7f:49:64:5a:56:2e:93:81:75:70:21:a9:09:
                    11:21:ac:9f:67:17:b8:78:59:2f:f0:08:ab:83:80:
                    3a:25:63:96:de:be:3b:d7:cc:df:c8:82:72:d5:a7:
                    c4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:BF:B7:47:3D:01:4C:CD:F6:6C:9B:38:BE:B8:87:47:21:F3:3B:ED
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GX8RmjGL38oaPaiHgrr9tWe9qFVj6fDLcWFTSYBC4yph/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GX8RmjGL38oaPaiHgrr9tWe9qFVj6fDLcWFTSYBC4yph/0/1BBFB7473D014CCDF66C9B38BEB8874721F33BED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.184.0/22
                IPv6:
                  2804:5854::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268122

    Signature Algorithm: sha256WithRSAEncryption
         64:23:a6:0f:a1:63:4c:28:5f:76:5e:37:26:7a:99:be:2d:5d:
         63:07:d6:12:1e:0d:50:96:4a:24:e9:dc:ce:a4:7b:9b:97:29:
         ac:aa:cf:3f:87:61:20:9d:fd:9f:37:ec:7c:a5:47:21:15:72:
         f5:27:c7:fd:7f:c0:fe:71:c9:1b:5b:8d:c1:13:94:19:a9:f0:
         65:90:8b:71:fa:5f:8a:d1:c1:46:cc:f0:22:34:6a:e7:1d:ac:
         70:b5:1a:5d:f0:ee:1c:e3:5f:c5:8a:2d:bd:19:e0:fa:65:38:
         b9:84:61:79:86:88:99:24:8d:6b:f1:9e:3e:9b:89:86:74:85:
         45:16:5a:86:e0:e5:bb:ae:c7:b2:2b:bd:a3:3c:c2:2e:77:c0:
         a2:25:cc:be:ca:7e:3c:05:ba:17:1e:22:40:aa:f3:ed:62:e5:
         63:d6:45:4b:95:3b:9a:bd:a5:f1:2a:e2:a9:8e:45:62:dc:2e:
         23:9e:b0:e7:a9:40:ad:ef:00:1a:99:48:83:ff:10:67:91:80:
         20:c7:ba:10:6d:b8:13:86:57:87:d7:c4:b4:d3:af:e4:e6:e6:
         fa:af:bf:3c:c5:d8:c6:14:79:b7:f7:0a:d5:1a:8f:fa:c6:2f:
         8f:c3:0c:5a:2c:bd:08:d7:c9:4b:99:0c:e2:87:9c:37:c1:3a:
         c9:94:28:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 07:46:36 2024 by rpki-client on console-ams.rpki-client.org