Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.cer
File:                     2DBDD3CD39663868244CF54E63FC0B537E82EA9B.cer (raw, json)
Hash identifier:          EH5lpIDNKMbqsjlUPHfQ2rBxWwRsbfyp+21h8ceJ0tY=
Subject key identifier:   2D:BD:D3:CD:39:66:38:68:24:4C:F5:4E:63:FC:0B:53:7E:82:EA:9B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62D02200072AEE183698D333BDA2B4FF974FB4AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Jul 2024 18:22:09 +0000
Certificate not after:    Wed 09 Jul 2025 18:27:09 +0000
Subordinate resources:    AS: 269573
                          IP: 45.189.72.0/22
                          IP: 2804:66a4::/32

Validation:               Failed, certificate revoked on Wed 16 Oct 2024 15:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d0:22:00:07:2a:ee:18:36:98:d3:33:bd:a2:b4:ff:97:4f:b4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 10 18:22:09 2024 GMT
            Not After : Jul  9 18:27:09 2025 GMT
        Subject: CN=2DBDD3CD39663868244CF54E63FC0B537E82EA9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a8:fd:9c:61:36:4e:60:94:aa:8e:02:16:e6:
                    a6:a7:86:e2:d4:fa:10:08:e5:e0:fe:49:00:5d:7e:
                    10:13:64:3f:67:aa:38:41:db:06:6a:e6:6d:c1:50:
                    ed:89:87:45:6e:23:b7:56:73:fb:fd:e1:ec:09:19:
                    f9:d6:7d:ff:6e:32:a6:bf:68:ac:7a:b1:04:2b:50:
                    0e:7d:7f:03:14:84:f0:6e:6c:9b:8b:00:b0:9f:be:
                    c1:45:19:75:c6:cd:aa:0e:5b:a1:72:e0:61:7c:62:
                    b1:fd:ce:71:de:7c:48:80:0a:42:ed:5c:a0:fc:37:
                    7d:87:5d:f0:3d:09:dc:99:b1:a3:f9:4b:da:13:54:
                    0f:c6:85:da:52:9e:12:7e:ef:36:32:16:7b:18:61:
                    f3:04:82:b8:f6:e2:2f:7f:8b:d1:6e:6e:bb:1f:0d:
                    b2:bc:0a:ae:28:2a:b0:46:b5:ee:6d:a2:d0:3b:6d:
                    03:16:1d:99:4a:f9:0d:5f:0a:92:7e:82:9b:7a:57:
                    51:b5:0f:8f:8e:1b:98:ca:c9:4e:a5:25:9e:df:de:
                    25:67:cb:07:e8:8d:4c:7a:6a:8e:55:17:98:27:dc:
                    86:6e:c6:db:27:ad:d9:8e:5a:6a:28:07:ea:8c:a0:
                    f2:1d:a9:90:1b:19:dd:d8:df:20:58:6a:d1:26:0b:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:BD:D3:CD:39:66:38:68:24:4C:F5:4E:63:FC:0B:53:7E:82:EA:9B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.72.0/22
                IPv6:
                  2804:66a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269573

    Signature Algorithm: sha256WithRSAEncryption
         ba:c2:fe:74:dc:a6:b0:d6:3a:a7:18:11:6c:c7:33:1d:19:8a:
         ce:9e:10:00:41:01:1f:23:7f:e5:5b:8d:d7:c7:8a:6b:11:59:
         8e:0d:b0:2a:0b:05:ca:f8:c9:6d:a2:b8:7c:16:04:0a:0c:e5:
         44:53:0b:89:ef:50:a3:a0:46:54:c6:92:1b:06:01:41:35:81:
         38:ef:8d:58:2c:63:66:1a:a8:52:56:7f:74:8f:db:40:a7:43:
         64:33:f3:84:71:85:c1:e8:b8:23:e4:e0:f3:b7:fa:ae:5b:4c:
         70:c9:bd:30:e2:d6:04:36:05:3e:0d:e4:fd:4a:c2:2c:9a:91:
         4a:d5:7c:f3:b7:f1:ff:24:c9:82:fa:1c:20:01:91:54:fd:a5:
         74:e0:76:7a:17:73:bc:1a:f9:7c:0c:f6:ab:94:ca:7d:cb:a9:
         fe:ad:be:fb:a1:68:0a:e9:1c:80:6d:6c:98:ed:3b:1b:7d:1a:
         0f:4d:bf:49:81:16:ac:0f:2a:1a:61:0e:3b:0b:7d:93:a0:18:
         f7:3d:0a:21:f1:94:3b:b3:c6:8b:ed:40:38:d2:bd:eb:f0:33:
         36:94:c1:7e:b9:ba:24:cb:47:15:48:ec:7b:aa:b2:6b:c1:03:
         a1:5e:32:a0:d4:f1:a3:e6:0e:cc:63:be:3e:9f:9e:dd:0e:f6:
         92:b8:58:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 18:47:22 2024 by rpki-client on console-ams.rpki-client.org