Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.cer
File:                     347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.cer (raw, json)
Hash identifier:          g2XFwhxPavvxKC07brONJl7amjjy+037zelpU4tQQFA=
Subject key identifier:   34:76:66:AA:40:7C:3F:DD:D2:4E:9F:81:A8:D0:AD:40:D4:EB:54:0C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       55985E2659A7439D14878D86B76EA8B446C0D125
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Jul 2024 13:10:43 +0000
Certificate not after:    Thu 10 Jul 2025 13:15:43 +0000
Subordinate resources:    AS: 268563
                          IP: 45.163.168.0/22
                          IP: 2804:5318::/32

Validation:               Failed, certificate revoked on Tue 13 Aug 2024 01:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:98:5e:26:59:a7:43:9d:14:87:8d:86:b7:6e:a8:b4:46:c0:d1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 11 13:10:43 2024 GMT
            Not After : Jul 10 13:15:43 2025 GMT
        Subject: CN=347666AA407C3FDDD24E9F81A8D0AD40D4EB540C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:21:4a:a5:0c:31:a1:e8:02:78:14:6f:ca:
                    a2:1a:76:e1:22:9b:76:1c:1b:40:40:e8:d1:57:08:
                    0b:e7:fe:1a:87:38:50:3c:4f:b3:d7:32:c9:38:fb:
                    95:0c:98:f1:ab:89:80:21:c1:78:95:08:74:df:b7:
                    75:42:a6:24:be:ce:fd:33:99:a2:91:75:9c:54:9e:
                    b8:a8:ae:15:2d:48:4c:8f:39:eb:f9:fa:30:b7:88:
                    d0:db:f3:87:31:39:1a:8e:96:5b:a7:86:7c:0e:5c:
                    c5:b4:93:ca:b1:a0:ab:8e:0e:a0:93:2c:4c:10:27:
                    6d:10:81:f2:f5:dc:24:fa:a3:05:8e:bc:43:20:ca:
                    72:d4:2b:50:fa:83:c5:54:3a:ba:00:52:d1:eb:a9:
                    f6:58:3c:23:8e:31:45:02:4d:fe:c5:c6:93:2f:ff:
                    0d:39:b4:f9:ed:41:c9:28:10:e2:b0:3d:31:2f:12:
                    2b:8e:2b:ec:e4:c0:1e:e0:8c:36:87:8a:06:01:30:
                    e2:eb:75:e1:20:30:e4:e2:ff:1c:7d:8c:b0:29:43:
                    5b:4f:3e:ac:b7:72:23:9c:20:dd:41:71:80:96:96:
                    4a:7c:b6:15:9f:c0:fb:45:a8:54:d1:53:70:0a:84:
                    5a:4e:bf:13:d9:3a:8c:38:fb:f3:9f:45:63:9d:6c:
                    ad:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:76:66:AA:40:7C:3F:DD:D2:4E:9F:81:A8:D0:AD:40:D4:EB:54:0C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.168.0/22
                IPv6:
                  2804:5318::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268563

    Signature Algorithm: sha256WithRSAEncryption
         14:30:3c:33:87:e8:d2:63:a7:be:62:c3:e8:6c:44:29:e6:7f:
         29:f7:43:d9:32:74:49:da:0a:e7:52:4d:66:b2:1c:20:29:26:
         44:10:6e:e3:79:da:69:e8:78:91:b3:73:04:f6:ff:0a:7d:aa:
         1e:bc:0a:0c:1c:b9:29:27:05:ec:65:84:b5:ca:6d:9f:61:45:
         0f:28:52:19:09:0f:da:ce:9d:a5:30:e1:c5:06:cc:f0:57:f8:
         1f:73:12:b1:25:33:79:b1:e9:2e:1d:f3:78:4d:f3:1c:06:73:
         5f:27:87:3e:ca:d7:3c:2c:a2:5c:91:6b:c1:c4:2b:0e:c6:6b:
         2d:a3:bd:d5:c4:71:7e:ac:b6:9c:c5:64:1d:9e:c2:b0:9c:c2:
         57:16:3f:d3:db:d1:22:e7:4c:e3:0a:e7:3f:90:3d:59:78:50:
         3a:ca:4e:6e:f8:70:fa:a4:a7:7b:85:ad:9d:c4:ea:35:81:61:
         47:89:e6:9e:1a:10:1e:1e:db:04:2d:38:26:0f:4c:58:c3:45:
         f7:2e:b6:3a:d6:20:25:2f:9a:2e:36:bc:0b:de:d4:cb:83:74:
         47:5b:03:f5:7b:8f:e5:5a:f9:c0:ff:89:8d:59:a5:a3:f5:b3:
         c2:d5:81:a4:4b:df:05:07:b3:ac:fa:5e:9b:3b:98:43:cd:82:
         69:bf:bf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 04:44:31 2024 by rpki-client on console-ams.rpki-client.org