Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/26158AB5CD8111DBBD1B9AA2405CC3202FBA3809.cer
File:                     26158AB5CD8111DBBD1B9AA2405CC3202FBA3809.cer (raw, json)
Hash identifier:          LkHXLdLwtHMUdBGdueicVx3CeBuE0Qjl0Tdakq3fAyc=
Subject key identifier:   26:15:8A:B5:CD:81:11:DB:BD:1B:9A:A2:40:5C:C3:20:2F:BA:38:09
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57DC5FF2A3373F85A026C635CAAEDCF34E2C05C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/26158AB5CD8111DBBD1B9AA2405CC3202FBA3809.mft
caRepository:             rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 28 Sep 2024 22:17:25 +0000
Certificate not after:    Sat 27 Sep 2025 22:22:25 +0000
Subordinate resources:    AS: 264138
                          IP: 138.97.84.0/22
                          IP: 2804:2308::/32

Validation:               Failed, certificate revoked on Sun 03 Nov 2024 02:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:dc:5f:f2:a3:37:3f:85:a0:26:c6:35:ca:ae:dc:f3:4e:2c:05:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 28 22:17:25 2024 GMT
            Not After : Sep 27 22:22:25 2025 GMT
        Subject: CN=26158AB5CD8111DBBD1B9AA2405CC3202FBA3809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:60:50:0d:f4:49:08:d7:36:2c:89:d1:42:
                    95:7c:51:b5:a5:04:fd:9a:97:e3:d1:d7:b0:34:1a:
                    79:91:c5:b5:d4:9a:c5:88:21:2b:b2:7b:a7:35:5c:
                    56:b9:cc:af:18:20:70:be:4e:3a:40:6a:20:be:93:
                    5d:58:5f:fc:52:5b:59:37:50:56:ff:c6:b9:61:8d:
                    9d:42:71:43:e8:f2:88:4a:cc:7d:08:37:ce:d7:68:
                    6e:9f:00:f9:03:42:0e:28:f1:b3:ff:67:d3:af:99:
                    8d:98:29:6b:84:52:ea:15:be:b7:df:fd:c8:84:71:
                    d6:22:65:67:28:11:16:89:d4:2f:b6:5a:83:76:d2:
                    f3:18:40:d1:65:0d:ad:6b:d7:51:ea:8f:66:17:80:
                    a1:b6:a3:db:7e:9c:d5:f5:98:bd:41:26:ce:a3:4c:
                    95:3e:cd:47:b3:e1:ba:88:8c:35:4a:e6:f8:61:48:
                    e6:96:11:2b:f6:a8:1e:d0:76:54:01:39:10:b7:ee:
                    a2:ce:77:29:b4:a1:66:9c:c4:fd:4f:e4:1a:55:ca:
                    1a:c4:f4:86:78:1b:fc:90:e7:6a:31:77:72:52:e4:
                    7e:4a:68:e1:66:0e:fd:f6:d2:10:9e:14:a7:2f:ab:
                    c1:1b:1d:1a:b2:8a:93:3e:9b:23:23:5d:7e:1c:09:
                    db:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:15:8A:B5:CD:81:11:DB:BD:1B:9A:A2:40:5C:C3:20:2F:BA:38:09
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/26158AB5CD8111DBBD1B9AA2405CC3202FBA3809.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.84.0/22
                IPv6:
                  2804:2308::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264138

    Signature Algorithm: sha256WithRSAEncryption
         bd:fc:d3:da:87:e0:5f:60:d8:35:f8:7d:17:c6:14:52:02:41:
         95:eb:97:8e:02:56:fb:de:f2:45:e2:41:1f:14:88:bb:60:94:
         32:03:d6:fd:2a:03:97:46:80:7d:68:72:1f:87:5b:ee:b6:69:
         fc:6c:fb:88:4f:b7:2e:38:ff:98:e5:53:bc:bb:ea:2a:de:a8:
         ff:c2:9c:14:79:29:b2:6c:c3:fd:13:b4:d3:99:43:8a:68:99:
         11:37:da:b6:21:8a:25:9b:d3:30:6d:d3:d1:dd:ab:f8:fb:79:
         2d:c8:27:8d:d5:f7:ca:f0:24:32:af:76:74:e2:da:f5:37:83:
         dc:34:46:81:20:a7:6a:2e:0b:f2:dc:c5:4c:05:9a:1f:1f:22:
         f5:46:ee:61:97:40:74:de:e9:36:29:c3:a9:b9:be:8a:55:f8:
         6c:d3:d3:80:17:21:88:11:c4:8f:49:f6:96:e0:3a:5f:1e:05:
         eb:c3:d2:92:38:a4:3b:34:5a:6b:da:8c:12:13:3a:81:6e:48:
         4b:b7:13:7b:e4:84:be:2c:65:e7:6b:7e:74:ed:64:2f:36:d2:
         53:c9:cb:3d:94:de:49:e1:55:c6:40:30:22:c8:49:a8:c4:98:
         fa:2e:d8:b2:8d:0e:0e:6f:a4:6e:69:ec:2b:8e:68:0e:2a:c5:
         eb:8f:bd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 05:34:10 2024 by rpki-client on console-ams.rpki-client.org