Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.cer
File:                     2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.cer (raw, json)
Hash identifier:          BTGcZfsm3dX7ta9eG8573SR4FJ54I5ni5xJEhph2ikw=
Subject key identifier:   2D:C0:0B:D8:E4:49:D5:C4:8C:9E:93:44:1D:48:BC:93:72:BC:9D:D2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B50222FD5C19B24D2F6B8F15726DDA2B3F04512
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 07 Oct 2024 02:38:15 +0000
Certificate not after:    Mon 06 Oct 2025 02:43:15 +0000
Subordinate resources:    AS: 265330
                          IP: 168.181.60.0/22
                          IP: 2804:2e30::/32

Validation:               Failed, certificate revoked on Sun 20 Oct 2024 09:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:50:22:2f:d5:c1:9b:24:d2:f6:b8:f1:57:26:dd:a2:b3:f0:45:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  7 02:38:15 2024 GMT
            Not After : Oct  6 02:43:15 2025 GMT
        Subject: CN=2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:e0:ca:3c:52:b8:10:df:8b:2f:cc:e2:f7:
                    33:2e:18:c7:72:eb:65:dc:96:5c:b6:c6:87:2f:16:
                    27:59:0c:f1:44:47:d7:1c:51:19:65:90:fc:df:90:
                    0b:79:66:73:c8:f9:20:92:9b:2a:7e:33:49:08:83:
                    57:38:6d:b0:b5:bf:c1:ae:68:46:61:d1:7a:7e:85:
                    8c:44:f0:86:c6:40:ca:83:be:c7:28:c6:7c:e8:db:
                    ac:63:19:23:b3:bd:54:f1:08:93:94:e7:56:24:cf:
                    f2:dd:0d:ae:65:ea:d8:5b:49:39:2a:2a:07:c6:93:
                    df:fa:6c:87:16:9a:d8:89:f1:da:9e:d9:e0:91:86:
                    20:4f:5e:a1:d2:11:73:32:c7:63:f0:85:a9:92:66:
                    95:3c:6b:71:34:9a:91:d7:4f:02:6a:3a:9b:ae:73:
                    1e:40:64:bd:0e:73:e7:5e:29:d0:53:76:c3:30:bd:
                    4d:0d:98:25:ae:96:56:ab:17:6b:9b:7d:f8:6b:2e:
                    5e:6a:a9:22:51:fe:77:0a:4e:b1:30:7e:fa:ad:05:
                    1f:70:1e:db:f0:14:db:b1:7e:09:d6:a8:5d:55:65:
                    15:9f:68:4a:af:bc:1f:de:9f:dc:24:19:b0:a0:62:
                    ed:07:73:00:05:1a:2e:8c:c5:9d:e7:62:2a:56:24:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:C0:0B:D8:E4:49:D5:C4:8C:9E:93:44:1D:48:BC:93:72:BC:9D:D2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.60.0/22
                IPv6:
                  2804:2e30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265330

    Signature Algorithm: sha256WithRSAEncryption
         1b:68:e3:71:7b:23:8a:ad:1e:73:50:b4:e9:cc:e6:0e:61:6a:
         10:9c:4b:c5:09:2f:5a:52:9a:4c:1f:45:66:f5:d4:21:e1:3d:
         53:c3:fa:2e:fa:f4:af:68:7e:e0:2e:cf:0f:b1:07:99:00:a2:
         e8:44:a2:ef:4b:7f:df:7b:13:1d:83:f8:3a:75:39:f7:34:8c:
         b4:15:38:7c:31:9d:99:24:19:f8:ad:94:95:12:27:b4:35:de:
         53:85:0f:1c:97:e0:e7:44:1c:d1:d8:6e:90:56:fb:aa:03:9d:
         69:e9:a1:6b:24:a3:2e:ce:d7:d4:93:5d:6f:ad:83:6a:bd:1d:
         e9:2f:24:44:c4:3f:1d:4f:82:6c:63:ec:1a:56:55:be:ce:84:
         9e:49:95:55:ce:50:0f:a3:b0:53:e7:e3:4f:52:96:23:81:2f:
         c8:2c:b1:17:85:1e:50:c0:1d:cd:61:ff:40:f1:a0:b5:7b:2b:
         4b:2a:63:13:a0:72:03:30:95:fb:c8:76:a7:ce:74:6c:07:14:
         96:b9:1c:16:e7:6f:6d:86:dd:b6:6a:ff:52:39:d8:10:5f:d9:
         6e:f4:e7:e6:12:89:98:ea:c5:9e:ee:58:23:1d:c5:d3:4c:25:
         3e:91:ec:03:83:5b:46:38:6e:5d:97:3c:c1:57:8e:af:c2:5d:
         13:a3:82:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 12:50:47 2024 by rpki-client on console-ams.rpki-client.org