Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1CA20D5CBA9102939860AEADFEF368323D206454.cer
File:                     1CA20D5CBA9102939860AEADFEF368323D206454.cer (raw, json)
Hash identifier:          Vz7/b25kRyc7UvlzLUMRLhdmlXQ8zfslHhVEzgJC17c=
Subject key identifier:   1C:A2:0D:5C:BA:91:02:93:98:60:AE:AD:FE:F3:68:32:3D:20:64:54
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D4B014311CF13638A2E7095F6E31B15A46E8C2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/1CA20D5CBA9102939860AEADFEF368323D206454.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jul 2024 17:26:58 +0000
Certificate not after:    Fri 25 Jul 2025 17:31:58 +0000
Subordinate resources:    AS: 262657
                          IP: 200.7.0.0/22
                          IP: 2804:1818::/32

Validation:               Failed, certificate revoked on Wed 21 Aug 2024 16:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4b:01:43:11:cf:13:63:8a:2e:70:95:f6:e3:1b:15:a4:6e:8c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 26 17:26:58 2024 GMT
            Not After : Jul 25 17:31:58 2025 GMT
        Subject: CN=1CA20D5CBA9102939860AEADFEF368323D206454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:df:75:8d:76:d5:f2:63:1b:78:a1:7f:de:
                    fe:79:62:88:32:95:ef:55:a7:7e:a2:82:34:7b:46:
                    08:11:45:ac:c2:2a:82:17:65:28:28:db:41:8c:68:
                    af:68:65:8b:d4:86:4c:a2:2a:d8:f9:54:0b:5f:16:
                    3e:ec:2f:44:87:a4:3a:81:11:19:ce:cf:8a:4f:cf:
                    44:5f:23:de:6c:ee:93:87:57:e4:52:b8:90:e7:62:
                    2b:7f:af:da:05:42:fd:dc:7a:b3:53:df:b6:8a:d4:
                    c4:64:f3:6f:1f:97:57:6f:a3:05:ba:53:2c:af:f6:
                    ea:b2:d1:34:47:14:d4:02:4a:20:a3:7f:c1:0b:cf:
                    a1:41:0b:2a:9d:fc:10:64:0c:c9:0d:78:f5:e3:49:
                    1c:62:d5:44:74:62:1e:05:fb:c2:dc:be:ef:a4:74:
                    c2:b0:6d:37:c1:e8:29:a6:1c:ed:e2:c1:58:dc:af:
                    01:21:6f:60:34:99:1c:92:63:aa:0c:7c:ef:47:a6:
                    a0:ad:98:18:c4:67:e7:1f:92:53:53:42:6b:d1:73:
                    af:e1:6f:0f:a9:c8:10:22:d6:6c:52:36:59:cf:c9:
                    3c:b0:14:c5:02:b5:1a:0a:b2:67:30:e9:73:21:ca:
                    4c:38:e8:34:ae:c5:7e:20:75:1c:fc:6a:c3:88:19:
                    09:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:A2:0D:5C:BA:91:02:93:98:60:AE:AD:FE:F3:68:32:3D:20:64:54
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/1CA20D5CBA9102939860AEADFEF368323D206454.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.0.0/22
                IPv6:
                  2804:1818::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262657

    Signature Algorithm: sha256WithRSAEncryption
         9e:73:af:47:48:bb:84:d2:8d:91:fa:a4:1e:42:aa:07:7c:34:
         8d:15:0a:76:a9:d7:59:45:2a:cb:e3:1e:05:17:f4:30:e9:bd:
         4f:fd:b0:26:e1:c3:04:6d:d1:18:61:2b:a8:1f:47:06:a0:29:
         b2:1a:f7:f5:92:56:28:11:16:ce:f3:d3:5a:14:c1:10:02:05:
         37:e9:67:be:a1:4f:e5:1e:cc:5a:a8:13:4a:49:92:b3:bf:6a:
         59:f1:12:50:3d:82:eb:ec:5b:23:85:3e:32:b3:28:fa:6f:1c:
         2c:fe:9b:47:ef:9f:6b:1e:d2:95:67:02:71:3d:cb:03:c6:e3:
         be:ca:73:e1:21:49:6c:77:83:23:4c:43:23:73:86:cd:99:9e:
         29:76:12:90:fb:7d:d5:33:27:fe:4f:af:62:02:c3:3c:4e:ce:
         ce:d8:17:52:1f:46:6f:cc:ce:75:f2:db:f9:15:e2:01:69:3c:
         98:91:36:70:54:57:b3:e1:42:f7:5c:6d:aa:36:93:30:8e:21:
         5a:e9:f1:0f:65:1f:06:b9:7b:f4:10:16:ae:50:34:ef:9c:ea:
         c4:89:58:b1:23:18:f9:72:59:70:9b:79:d5:90:80:6f:a9:be:
         6f:a3:21:f6:76:6f:a8:bf:d4:e2:0d:7a:13:1e:f1:63:37:75:
         9a:14:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 19:59:36 2024 by rpki-client on console-ams.rpki-client.org