Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer
File:                     2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer (raw, json)
Hash identifier:          H68TLB07Mm3Xs/dtFckz7upEzNCE82F47ah2CiS91nQ=
Subject key identifier:   2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D706AB20E985EFE13454892B0FC9223423D8596
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:44:33 +0000
Certificate not after:    Thu 03 Apr 2025 14:49:33 +0000
Subordinate resources:    AS: 271723
                          IP: 2804:8000::/32

Validation:               Failed, certificate revoked on Thu 25 Apr 2024 13:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:70:6a:b2:0e:98:5e:fe:13:45:48:92:b0:fc:92:23:42:3d:85:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:44:33 2024 GMT
            Not After : Apr  3 14:49:33 2025 GMT
        Subject: CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:28:98:ae:64:3c:16:a5:64:73:91:32:f1:4d:
                    47:a6:cd:b6:d3:88:b6:a4:64:80:53:1d:04:bb:45:
                    a4:91:1a:71:40:e7:f8:e1:21:b3:b0:87:b3:40:c7:
                    0b:11:61:4e:d5:a0:2c:29:04:4b:f9:ff:c7:69:30:
                    f8:7e:f0:25:81:02:db:a8:2f:80:b7:99:a8:43:ed:
                    b3:e6:f5:81:21:ea:0e:87:c8:93:20:c8:0e:3a:c6:
                    21:90:30:ff:d5:44:99:61:7a:03:be:b6:c8:2a:ba:
                    5b:db:1e:ae:d9:72:a6:5a:b7:5e:f5:04:dd:65:c5:
                    ff:2a:80:a9:d0:59:6a:16:d9:6b:d8:51:58:1b:8a:
                    ce:1d:c4:a4:3a:a1:ec:87:65:89:ea:46:23:39:c4:
                    36:3b:76:1b:5d:75:25:f9:1e:05:3f:5a:cf:a4:e0:
                    dd:87:4e:e3:03:26:47:7f:d1:03:94:ab:39:1e:a1:
                    9f:97:ad:c7:76:b4:a9:91:93:b0:66:25:f8:33:89:
                    2e:e1:cc:61:a0:67:c1:71:53:3f:e6:51:31:ac:a5:
                    39:3c:ca:f9:ab:af:5a:30:5b:29:a4:a9:03:76:93:
                    a4:39:6a:27:0f:6f:db:c9:bf:3c:01:ae:1d:05:ce:
                    c2:79:6f:71:49:b2:6a:b3:c2:b9:b5:ff:29:45:c0:
                    99:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271723

    Signature Algorithm: sha256WithRSAEncryption
         56:a6:0f:aa:7c:62:9f:d9:e0:48:4a:86:dc:c4:7d:54:05:9d:
         e7:e0:b3:e0:50:7c:34:91:95:0e:31:cf:20:89:04:9f:d8:b9:
         3f:16:52:b7:6c:51:cc:07:4d:1c:ec:c6:13:80:1f:a5:6c:b2:
         4f:cc:bc:5e:22:d2:e3:40:e9:98:77:13:d3:b3:fe:0c:10:f0:
         c7:dc:c0:21:d8:6f:df:bf:22:ee:ad:e2:6e:30:75:00:a5:d8:
         a4:e3:78:27:9a:f6:92:b6:de:ee:10:4e:9c:5f:4c:db:4d:eb:
         2e:26:fd:57:dd:a4:d2:4b:c5:23:75:55:0d:39:b6:64:09:fe:
         c1:fa:88:00:8f:d9:87:b8:c6:43:f8:54:52:87:5d:cb:f3:86:
         06:fc:2a:9f:ef:56:b5:ca:9e:f0:c7:5f:26:b0:7d:64:e2:44:
         23:2d:77:39:9d:66:1b:ac:ba:1b:fc:d5:bb:79:ba:fa:e9:10:
         67:ec:74:5e:0a:d6:bf:cc:22:10:63:48:8c:02:48:1f:c0:d7:
         80:79:ab:1f:a5:6e:76:91:4e:a6:33:f4:07:ec:60:69:ba:07:
         fc:e9:fd:1f:04:1d:32:dd:9a:c9:46:2f:cf:43:96:1c:6d:c9:
         80:8f:9d:ba:3e:ec:7d:51:f5:f7:f8:63:d7:c0:5d:1c:35:b3:
         1f:40:78:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-ams.rpki-client.org