Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.cer
File:                     1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.cer (raw, json)
Hash identifier:          pjKyi97Zj9XY+M3PvAGTMBLoXPrdQC4QNtkEeKous6w=
Subject key identifier:   1D:16:A2:9F:F5:A8:22:EA:4E:F7:0D:6E:05:22:7D:B9:CF:C5:79:EF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       685871390426718347E1DE315140C36D89AD98C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Aug 2024 19:49:41 +0000
Certificate not after:    Fri 22 Aug 2025 19:54:41 +0000
Subordinate resources:    AS: 61633
                          IP: 131.100.148.0/22
                          IP: 2804:1c04::/32

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 11:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:58:71:39:04:26:71:83:47:e1:de:31:51:40:c3:6d:89:ad:98:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 23 19:49:41 2024 GMT
            Not After : Aug 22 19:54:41 2025 GMT
        Subject: CN=1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:38:02:56:ad:f9:a9:9d:cd:8a:c8:06:13:8a:
                    5d:df:32:fd:d4:25:ea:a5:1b:ac:f0:51:5a:60:de:
                    d8:78:7e:b0:89:7f:42:94:5a:e2:d2:ae:ea:54:cf:
                    3a:55:7f:ae:b8:7a:a2:44:bb:2f:b8:70:df:bb:ea:
                    92:dd:b0:74:62:06:e6:d9:5d:75:57:03:72:9a:22:
                    b5:4b:d9:8c:1b:d8:a2:ae:d5:ae:cf:2f:b8:03:98:
                    6a:18:f3:15:e2:7f:68:b3:9d:37:48:fc:dd:9c:31:
                    3e:72:25:f7:00:e6:7d:9e:dc:2d:72:04:f2:ba:03:
                    56:11:45:ac:b7:62:96:57:47:96:77:2f:34:66:7e:
                    7c:ba:6c:27:97:d3:49:38:dd:c1:c5:a7:b5:46:ca:
                    56:ce:35:01:fb:00:1e:7e:d4:7f:bd:6b:37:35:b0:
                    ae:48:ca:54:5f:9d:e4:61:62:5d:92:e0:45:bc:80:
                    20:3a:e1:70:d9:98:84:61:fc:f9:2a:a1:a3:03:01:
                    3c:df:eb:71:19:a3:74:0a:e3:00:bd:a9:fd:e0:d1:
                    30:b4:08:a3:9b:a7:ae:f3:0f:67:b3:a9:48:6a:00:
                    bb:14:a9:d2:10:36:99:fb:d5:87:db:1c:7a:ed:39:
                    68:99:c7:89:3f:80:cc:f3:f2:15:5a:75:32:49:69:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:16:A2:9F:F5:A8:22:EA:4E:F7:0D:6E:05:22:7D:B9:CF:C5:79:EF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.148.0/22
                IPv6:
                  2804:1c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61633

    Signature Algorithm: sha256WithRSAEncryption
         5b:3c:b3:a1:96:fd:71:2e:70:03:0d:a0:bc:05:86:80:ad:8a:
         a3:fc:c0:df:14:ce:7d:8a:7c:7b:cc:15:04:8d:fe:cb:11:43:
         6e:a7:6f:f9:2f:d4:02:e3:f3:e1:cd:10:8e:f8:a8:b5:ab:6c:
         89:c7:1b:ad:ad:7a:8f:4a:1f:ea:93:39:66:ac:0d:93:4d:d3:
         a2:9d:33:13:da:6f:b1:c5:9a:10:e0:0f:b4:dd:c5:c2:dc:0f:
         12:17:03:3b:82:b2:64:00:c4:52:81:ce:9e:cb:ed:e6:bf:6f:
         d8:b8:de:48:1f:79:0e:ed:db:88:b7:7e:81:00:0f:84:4b:1a:
         d6:4c:96:01:37:99:be:7a:97:7e:f1:44:86:7b:44:4b:93:52:
         9a:f8:65:29:d2:60:4a:05:da:94:8d:64:c4:1d:56:89:ec:8e:
         6b:a7:29:4b:fd:80:0b:3b:34:b4:22:99:11:6a:2f:d4:35:a3:
         48:97:37:e7:06:98:e6:f7:10:04:4f:94:b2:97:d5:21:ee:af:
         bf:bf:96:eb:16:d0:f5:f8:04:26:a6:20:68:7d:03:89:02:2b:
         1d:7f:7d:26:6e:80:aa:bc:de:30:44:31:52:76:36:65:b5:da:
         b5:0a:7a:38:24:19:09:54:91:99:7c:56:1e:17:f7:98:d1:26:
         8d:ed:55:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org