Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/35121215105D7401F74741FEB8604A2A9FA7E6DF.cer
File:                     35121215105D7401F74741FEB8604A2A9FA7E6DF.cer (raw, json)
Hash identifier:          AwuheLxUN10qIoa2JaCeBObNzsDG13FRmDE2N7KYpj8=
Subject key identifier:   35:12:12:15:10:5D:74:01:F7:47:41:FE:B8:60:4A:2A:9F:A7:E6:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       696093444E84976DD59CC98B65D63AA011176F49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/35121215105D7401F74741FEB8604A2A9FA7E6DF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Aug 2024 14:21:57 +0000
Certificate not after:    Fri 15 Aug 2025 14:26:57 +0000
Subordinate resources:    AS: 11097
                          IP: 192.207.194.0/24
                          IP: 200.0.70.0/24
                          IP: 200.202.128.0/18
                          IP: 2801:80:1400::/40

Validation:               Failed, certificate revoked on Tue 03 Sep 2024 14:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:60:93:44:4e:84:97:6d:d5:9c:c9:8b:65:d6:3a:a0:11:17:6f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 16 14:21:57 2024 GMT
            Not After : Aug 15 14:26:57 2025 GMT
        Subject: CN=35121215105D7401F74741FEB8604A2A9FA7E6DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a4:be:df:9f:70:23:66:8b:c8:93:07:b7:a2:
                    76:f4:ce:93:75:78:aa:12:f1:1d:6e:7f:95:7f:97:
                    17:99:3d:3d:8a:04:9f:a8:4c:52:a9:e6:5f:f0:68:
                    3a:b5:df:13:90:c4:e6:32:a0:0f:77:0a:ee:f1:19:
                    b8:68:42:e0:40:f9:e7:3e:55:66:2c:0b:a6:80:0a:
                    58:0b:7b:78:5d:5c:ab:0c:16:38:4b:16:5d:91:cd:
                    b6:12:63:78:9b:38:0c:e0:98:ca:d2:21:5f:48:69:
                    31:3f:88:45:c3:b6:b1:38:34:72:73:42:e8:28:fd:
                    b6:2e:d9:10:21:57:8e:4e:0f:df:87:a7:9b:f1:95:
                    69:1d:69:2d:82:1e:ca:2d:44:b7:4e:67:35:86:1c:
                    05:0e:7e:53:d5:3f:d9:37:48:b3:62:6f:1f:c1:7d:
                    63:48:ce:73:32:41:a1:47:29:87:ce:2d:fd:3a:3b:
                    5a:38:eb:65:c9:03:17:b1:3a:23:7c:2c:f0:40:3b:
                    e6:7d:0d:df:ad:ad:5a:a5:ea:06:54:7c:ee:d8:30:
                    93:dd:5e:38:f5:f4:a1:58:6d:07:8a:c3:b1:c1:d5:
                    3e:f7:20:29:4d:36:64:94:e8:c1:2c:48:f5:fd:89:
                    d1:4b:6c:61:b0:a4:b7:a3:c4:0b:ea:77:6c:96:fc:
                    a5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:12:12:15:10:5D:74:01:F7:47:41:FE:B8:60:4A:2A:9F:A7:E6:DF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/35121215105D7401F74741FEB8604A2A9FA7E6DF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.194.0/24
                  200.0.70.0/24
                  200.202.128.0/18
                IPv6:
                  2801:80:1400::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11097

    Signature Algorithm: sha256WithRSAEncryption
         65:98:b6:cb:64:02:de:e8:5d:f4:05:ae:1a:34:68:b4:28:af:
         63:5d:bd:a1:f0:c8:dc:70:c2:01:d1:36:fe:e9:91:a2:f6:e7:
         f4:bd:0b:32:cf:d8:81:34:05:35:6c:e2:50:2a:bf:ee:3e:10:
         67:92:97:47:e4:46:28:80:a2:20:fa:77:bb:e0:71:7f:4d:e2:
         49:c6:b7:a8:c0:5c:a0:db:bd:ad:46:05:43:22:3f:84:b6:85:
         76:08:4a:56:20:a3:58:6f:b9:2b:a3:aa:a5:71:a4:3b:56:57:
         3d:89:26:fc:24:98:e9:47:35:90:0c:86:12:0d:25:8f:3a:12:
         d5:63:a0:a9:05:19:ab:fc:bc:96:b5:c8:b7:b7:02:b5:cc:9f:
         66:6f:bb:1e:b7:15:ab:76:cd:fa:b9:32:18:7b:7f:b8:18:0c:
         5b:16:74:5a:9c:90:cb:8e:7c:4d:13:29:ae:4b:6b:ea:8f:f3:
         3b:06:36:e1:26:f0:bf:47:88:8e:7b:40:06:5a:d0:89:f6:ec:
         8b:ab:3f:05:9a:00:a7:33:60:14:c7:84:0b:57:b1:8b:24:94:
         0e:ea:62:1a:5f:9c:c3:b8:85:a4:e5:a1:a0:6f:8c:26:f5:ca:
         e9:47:36:a3:67:e3:db:01:c7:41:39:17:fd:a0:3b:b7:64:37:
         a4:d8:9c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 16:46:28 2024 by rpki-client on console-fra.rpki-client.org