Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A2DC1A8A522E5692AEF631E05B5909122DEF928.cer
File:                     2A2DC1A8A522E5692AEF631E05B5909122DEF928.cer (raw, json)
Hash identifier:          L4AGQml/FuYeyVOdAxleHghCnoksOkVTsc2T+oWrP6E=
Subject key identifier:   2A:2D:C1:A8:A5:22:E5:69:2A:EF:63:1E:05:B5:90:91:22:DE:F9:28
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7929B2089A6AFAD53450FA89E20345092C3BBFD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/2A2DC1A8A522E5692AEF631E05B5909122DEF928.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 20 Apr 2024 01:50:05 +0000
Certificate not after:    Sat 19 Apr 2025 01:55:05 +0000
Subordinate resources:    AS: 270414
                          IP: 190.89.252.0/22
                          IP: 2804:6ba4::/32

Validation:               Failed, certificate revoked on Sat 20 Apr 2024 03:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:29:b2:08:9a:6a:fa:d5:34:50:fa:89:e2:03:45:09:2c:3b:bf:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 20 01:50:05 2024 GMT
            Not After : Apr 19 01:55:05 2025 GMT
        Subject: CN=2A2DC1A8A522E5692AEF631E05B5909122DEF928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:c8:fb:8c:b4:a3:92:0d:80:66:00:87:40:
                    cd:21:7b:9f:5d:cd:91:a3:c2:15:00:a8:2a:e9:d0:
                    cb:e5:ac:86:a3:f3:15:74:34:f1:db:7a:d8:71:41:
                    20:63:f8:8d:6f:a3:df:b9:54:bb:6f:95:2b:2d:a4:
                    ea:cc:b8:68:c0:f6:e1:77:7a:6c:c8:79:fb:4d:6e:
                    fb:a2:1a:07:ab:7e:48:21:b5:3e:43:35:f4:73:18:
                    a6:08:96:8f:26:9d:21:8a:3c:8b:ad:5a:e8:03:e2:
                    66:09:d9:33:6e:17:c8:b4:cc:cf:86:81:d5:9c:72:
                    ec:fb:6d:76:52:02:4d:9b:b6:3d:ef:c9:04:f0:75:
                    22:0e:87:46:66:e0:b2:d0:a7:45:86:ca:bc:f2:84:
                    58:15:0c:0a:88:c5:93:aa:44:67:cf:53:f5:35:ee:
                    58:64:10:9c:b3:86:f7:50:68:3e:10:a9:f5:56:5e:
                    61:cd:f5:d9:d4:ba:f3:be:09:d7:b1:01:01:68:a1:
                    25:19:45:d2:79:61:41:10:59:31:14:4a:71:90:b6:
                    29:e8:3d:f4:fd:49:4d:cf:cb:2e:77:0e:72:ca:e5:
                    fc:f3:ae:72:36:63:26:02:67:2e:76:6c:06:06:68:
                    c1:0f:fb:6e:04:79:17:48:41:49:1e:7a:65:9f:52:
                    18:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:2D:C1:A8:A5:22:E5:69:2A:EF:63:1E:05:B5:90:91:22:DE:F9:28
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/2A2DC1A8A522E5692AEF631E05B5909122DEF928.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.252.0/22
                IPv6:
                  2804:6ba4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270414

    Signature Algorithm: sha256WithRSAEncryption
         8c:46:85:98:75:00:b2:3a:bf:4e:74:c8:2e:1e:2c:f8:fe:c8:
         c4:45:e7:f6:17:5f:b7:4e:79:2b:36:5d:f3:0d:bb:90:e1:7f:
         38:a7:83:f2:d5:f3:ba:04:8a:94:28:6e:e9:df:0b:cd:11:af:
         8a:63:51:1f:71:04:1d:95:0e:45:45:06:02:e3:ff:f1:56:2a:
         8d:f2:2a:4e:5f:ca:dc:3d:8c:69:1d:35:f5:20:d2:c9:4b:bc:
         5f:35:45:12:12:9c:47:2d:f1:ac:37:f2:f9:fc:ba:63:8e:31:
         3e:82:bb:9f:2f:3b:c8:e2:4e:6c:e5:92:fe:47:34:a6:13:98:
         13:25:cf:8c:67:4a:0b:51:9a:aa:36:90:ac:2b:93:47:b8:c0:
         5b:dc:b4:92:e2:cb:90:2b:93:b8:85:b3:48:04:b9:88:31:ae:
         32:61:9f:4f:d9:4e:f6:26:ea:e5:df:4c:07:f5:7f:59:35:1d:
         ec:98:c3:2f:2a:b2:7d:d5:a6:15:24:20:f6:51:f6:be:72:f2:
         d5:15:b1:e7:99:86:e3:7a:9d:58:17:a2:3a:88:87:5b:54:33:
         dd:22:c8:21:52:f2:c9:d9:0b:c8:01:ce:0e:ac:91:eb:4d:66:
         51:53:86:2e:d2:2f:61:d2:3d:b5:8f:36:eb:68:46:b7:28:b8:
         86:5c:df:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org