Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21AE386CAD3039E4C970C824F769FF2366BED33B.cer
File:                     21AE386CAD3039E4C970C824F769FF2366BED33B.cer (raw, json)
Hash identifier:          JzM9Q9saASEG8T9EoYkcqPeYylZcBlzKjJwZn8emvqs=
Subject key identifier:   21:AE:38:6C:AD:30:39:E4:C9:70:C8:24:F7:69:FF:23:66:BE:D3:3B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7331ABB2B9C895DFCB1C5EBA71FFD7853CD28EAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/21AE386CAD3039E4C970C824F769FF2366BED33B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jul 2024 15:27:14 +0000
Certificate not after:    Wed 16 Jul 2025 15:32:14 +0000
Subordinate resources:    AS: 52731
                          IP: 177.84.248.0/21
                          IP: 2804:2890::/32

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 08:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:31:ab:b2:b9:c8:95:df:cb:1c:5e:ba:71:ff:d7:85:3c:d2:8e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 17 15:27:14 2024 GMT
            Not After : Jul 16 15:32:14 2025 GMT
        Subject: CN=21AE386CAD3039E4C970C824F769FF2366BED33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:19:63:75:30:7a:00:9a:de:c0:ca:fd:13:93:
                    36:ca:27:97:48:e2:f6:f4:b1:a3:70:7a:28:06:d7:
                    62:cb:56:85:29:2e:46:f4:92:33:22:72:e0:ea:67:
                    e5:9e:33:00:f4:b4:93:5c:3a:e8:c0:4b:57:27:db:
                    76:69:f0:5a:aa:06:0c:fd:d2:2f:2b:d7:f1:57:8d:
                    47:e8:16:a2:2a:b4:e3:92:b6:ad:cb:10:a6:84:cd:
                    65:fe:f1:b1:df:fc:76:62:59:17:3f:25:65:5a:13:
                    2b:f2:27:e0:fc:af:15:87:5e:23:81:59:5f:90:d9:
                    1d:5f:98:b4:80:ba:77:70:9b:2e:da:bf:8b:af:29:
                    fc:de:69:93:a6:9f:83:31:55:c0:29:33:1c:29:c0:
                    1a:7d:9e:ad:5b:8a:b4:7a:be:d9:46:e9:81:ed:1a:
                    f2:c5:a2:bc:67:a4:b0:89:05:c5:6e:ab:82:0c:0c:
                    61:1b:12:83:9b:0e:70:9f:1e:2f:47:4c:87:41:e9:
                    cc:49:16:97:2e:81:e9:eb:e3:a3:02:9c:c0:e5:ae:
                    41:a5:a9:a4:3f:b8:97:f8:22:74:55:02:71:c7:a6:
                    45:d3:ba:08:4c:41:2e:52:00:d7:6d:8b:14:9f:4b:
                    6e:f8:32:dd:06:c3:9f:2c:30:b8:f6:d5:db:85:83:
                    4b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:AE:38:6C:AD:30:39:E4:C9:70:C8:24:F7:69:FF:23:66:BE:D3:3B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/21AE386CAD3039E4C970C824F769FF2366BED33B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.248.0/21
                IPv6:
                  2804:2890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52731

    Signature Algorithm: sha256WithRSAEncryption
         ce:27:e6:93:88:80:bb:a6:38:0d:94:ce:87:bd:a2:ee:09:d7:
         23:51:2b:71:67:b6:ba:86:8a:db:76:0b:26:5b:cf:68:c4:d7:
         52:4d:fe:29:68:2e:a6:17:0d:a5:79:47:c6:de:e4:a2:9d:f4:
         2c:67:fe:d0:a5:12:da:7a:48:b3:23:00:a0:e3:0c:35:28:1a:
         69:60:4b:29:ab:e7:cc:b1:67:7e:06:70:65:de:b0:fa:87:69:
         da:9b:48:77:2e:9d:85:37:93:ff:88:b9:a7:ee:c9:af:df:be:
         32:cb:e8:50:0a:4f:1d:9b:8f:84:22:e4:fa:3f:f8:89:94:16:
         08:a9:71:c3:d7:b5:45:42:d1:ae:4a:c9:04:26:f8:28:fa:dc:
         a3:3c:54:cd:98:f8:4e:b3:5b:14:32:31:67:86:1d:88:95:c8:
         a5:9b:89:cb:b0:f6:a9:3a:c6:2b:a1:49:f3:d1:27:a3:70:5c:
         dd:57:87:f4:5f:de:1a:6c:b4:1b:d3:7f:93:80:27:d2:52:57:
         7b:2a:4d:cd:a8:bd:5a:43:a5:65:30:b7:0c:16:cc:da:36:20:
         68:00:dc:e8:a2:a5:d8:3b:63:10:03:d1:08:32:00:01:6a:4c:
         e5:20:ee:b3:a5:04:06:cb:20:a6:45:37:0c:6e:e0:37:9b:29:
         14:ec:a6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 10:09:28 2024 by rpki-client on console-fra.rpki-client.org