Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/353E4712F24C4FE5B847B8974E92C67358A9E10B.cer
File:                     353E4712F24C4FE5B847B8974E92C67358A9E10B.cer (raw, json)
Hash identifier:          EijSYdIA3CXprQc7kMjD6aZ32oTDAzWfNuMugvtFqdU=
Subject key identifier:   35:3E:47:12:F2:4C:4F:E5:B8:47:B8:97:4E:92:C6:73:58:A9:E1:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       497475BDAF789AFAED1F37812D9A53AE869AAD06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/353E4712F24C4FE5B847B8974E92C67358A9E10B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Apr 2024 12:26:14 +0000
Certificate not after:    Mon 21 Apr 2025 12:31:14 +0000
Subordinate resources:    AS: 266406
                          IP: 170.81.120.0/22
                          IP: 2804:375c::/32

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 19:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:74:75:bd:af:78:9a:fa:ed:1f:37:81:2d:9a:53:ae:86:9a:ad:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 22 12:26:14 2024 GMT
            Not After : Apr 21 12:31:14 2025 GMT
        Subject: CN=353E4712F24C4FE5B847B8974E92C67358A9E10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:90:92:cb:9d:83:e2:47:c8:cf:89:70:28:7b:
                    65:9d:08:35:78:c3:63:76:e8:48:cf:55:82:e0:5e:
                    0e:5d:6a:e7:da:6c:8d:45:78:e4:f2:51:db:46:ba:
                    f6:ed:da:32:58:36:9c:99:b9:5e:9a:2a:da:76:1c:
                    9c:e1:ee:be:d1:a8:d0:00:68:be:13:22:6e:86:5a:
                    ff:47:e0:29:96:f3:16:c3:e9:56:33:31:34:29:9e:
                    b2:51:f2:79:46:c7:bb:7f:c0:35:b8:fc:6d:95:53:
                    b9:6e:57:16:99:7c:57:37:08:54:53:5f:87:c9:b7:
                    42:3c:04:8e:7a:52:03:cb:82:cc:0c:14:aa:a2:ed:
                    e6:02:9a:47:82:7b:c1:bb:8e:69:fe:52:bc:fd:58:
                    1e:7c:1c:31:82:bf:0d:47:c5:76:3d:2f:77:9f:ef:
                    a2:a4:0f:ce:eb:a8:d4:1f:f9:2c:b9:6f:d5:99:31:
                    1e:4e:f8:2a:c9:2b:81:3e:a7:dd:4d:9d:a1:d6:dd:
                    39:f8:b0:f6:c0:2b:b2:33:50:2c:76:69:14:6c:14:
                    94:b5:9d:25:75:01:1b:24:5b:3b:ce:3c:b9:84:59:
                    ba:e0:98:e1:da:6a:e1:d3:6e:b6:f1:f2:c1:fc:90:
                    32:71:45:47:89:3e:e9:5d:af:4c:76:8e:3b:40:b8:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:3E:47:12:F2:4C:4F:E5:B8:47:B8:97:4E:92:C6:73:58:A9:E1:0B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/353E4712F24C4FE5B847B8974E92C67358A9E10B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.120.0/22
                IPv6:
                  2804:375c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266406

    Signature Algorithm: sha256WithRSAEncryption
         25:db:81:ba:a4:2a:38:1e:87:62:0d:30:ef:fb:98:f9:d4:1b:
         e6:17:68:a3:dd:02:3d:dd:61:35:7d:39:14:41:d4:7f:17:1e:
         58:ca:26:f8:29:e7:00:0a:0f:cb:1b:03:13:eb:38:d5:4a:16:
         79:25:e7:2c:81:84:ee:7f:31:1d:d9:1d:b9:8b:ad:92:89:ef:
         d7:0e:2e:c8:85:c8:b7:aa:87:4e:4f:44:2e:41:57:1d:ad:03:
         b9:e9:94:63:32:6d:ec:0a:14:52:01:e5:9c:12:f3:54:d8:c0:
         40:0e:09:d8:27:0a:1d:db:e3:14:2a:86:a8:0f:ae:1e:d3:a4:
         aa:6d:2c:df:b0:96:4c:48:50:52:9d:f0:39:f7:95:c3:15:30:
         b8:46:75:01:ee:b0:48:df:8e:f6:99:41:e0:c3:7c:67:03:62:
         2c:50:1d:e1:8b:29:27:19:f5:1c:0e:ed:0a:da:39:8d:ac:6c:
         9a:30:84:e6:53:78:40:34:1c:ca:68:43:8c:d3:02:6b:75:82:
         af:22:8a:b6:16:f2:53:08:70:60:aa:e6:b9:fa:62:8f:73:e2:
         6b:03:46:e3:63:23:06:fc:05:29:8f:28:36:8b:a6:53:00:7e:
         aa:40:0a:e8:1d:6b:db:87:4d:6d:64:54:6c:58:10:b8:d4:62:
         46:ce:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 21:37:42 2024 by rpki-client on console-ams.rpki-client.org