Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer
File:                     20EE33C957E1A859D49A5E411C799465085E928F.cer (raw, json)
Hash identifier:          W3qfd3JU3Lq9qaFrUpTkBW3kyPKejSkibzjTfeATlIw=
Subject key identifier:   20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       44EAF2D4C00DC222B2609592CCCC764A01B6E5B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/20EE33C957E1A859D49A5E411C799465085E928F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:48 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:48 +0000
Subordinate resources:    AS: 272566
                          IP: 2804:853c::/32

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 18:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ea:f2:d4:c0:0d:c2:22:b2:60:95:92:cc:cc:76:4a:01:b6:e5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:48 2024 GMT
            Not After : Apr  2 18:31:48 2025 GMT
        Subject: CN=20EE33C957E1A859D49A5E411C799465085E928F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7c:b6:04:cf:7b:42:5e:5f:34:fd:5b:63:9f:
                    5d:e5:1e:0d:26:dd:e9:5a:d9:2d:f2:04:32:78:f1:
                    d1:e7:31:cb:e5:6f:09:f9:eb:16:ec:8c:fd:43:8d:
                    49:78:5c:a0:5f:4a:36:e0:f4:10:29:0a:f5:57:4e:
                    9c:7a:72:e7:ad:29:c3:dd:5d:34:b3:39:50:c3:1c:
                    30:5f:47:b3:4d:58:f3:31:68:fd:79:09:d6:c9:77:
                    4b:50:b4:15:d4:20:ac:a7:a7:f4:d0:60:32:d1:b1:
                    35:73:6b:15:46:c5:6e:41:fb:66:97:d7:a6:7c:c8:
                    aa:3b:28:a2:25:65:d6:e1:19:c7:dd:ad:17:ef:5a:
                    82:01:6e:cd:9d:7c:d7:c5:43:e5:45:45:f6:66:74:
                    2b:31:64:6d:73:06:ef:e9:39:ff:f5:fb:9a:20:94:
                    f7:24:b1:59:4d:86:35:64:1a:fd:33:9a:b5:15:4a:
                    fe:5f:59:c4:59:5d:11:a8:54:5a:1d:59:eb:59:e0:
                    cc:58:83:a0:74:be:64:2a:d3:be:4d:82:e2:15:a5:
                    43:a3:63:46:fc:b6:8b:a7:b7:72:25:10:2f:8c:55:
                    01:76:98:59:b1:87:92:fa:e7:08:a2:57:1b:4b:65:
                    0d:57:a1:56:fb:5e:5f:30:09:26:e9:f3:95:dd:1a:
                    d2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/20EE33C957E1A859D49A5E411C799465085E928F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272566

    Signature Algorithm: sha256WithRSAEncryption
         b7:78:b1:79:9f:e9:12:0c:68:1b:c6:f6:c4:9c:b1:54:2c:69:
         ce:25:ba:81:23:d3:a3:b1:07:60:93:c7:2c:61:bf:4d:3f:76:
         a7:6c:78:f7:7f:c6:de:76:07:9d:ac:71:63:96:44:46:61:fb:
         34:d7:fe:cc:5e:e7:a0:6f:9a:3c:36:e6:f0:57:9a:70:c4:82:
         1f:cd:b3:60:2c:96:fb:33:4f:03:74:6e:4b:e4:30:a4:07:5e:
         81:68:71:46:3c:87:e3:9a:ea:ed:4e:60:69:b6:02:f3:90:81:
         1d:7b:c7:de:85:d0:98:02:43:65:1f:e5:e9:b8:b0:43:65:f4:
         79:7f:15:2d:33:8d:6f:fb:af:c6:9c:a9:43:33:16:eb:5e:80:
         d4:48:80:fd:dd:af:fd:89:ab:f5:c5:0f:c3:f9:99:ee:f2:a2:
         51:43:77:4a:46:83:77:08:6c:9c:ff:81:f4:bc:24:e7:73:ae:
         31:a8:7a:c7:f3:d3:a2:d9:0a:42:18:65:72:c6:40:11:63:c4:
         63:ed:ad:f3:bd:cf:cc:47:95:91:fd:78:03:68:02:39:d2:27:
         4d:16:c1:15:8b:56:a3:fa:e0:6c:15:79:c8:b2:70:6d:b6:67:
         51:aa:6c:ae:ca:06:19:c1:b2:09:04:5e:28:3f:cc:91:1e:a6:
         77:27:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 20:14:17 2024 by rpki-client on console-ams.rpki-client.org