Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/354A7D2E5655BD8DC81E7B22296D28E7FE5450F4.cer
File:                     354A7D2E5655BD8DC81E7B22296D28E7FE5450F4.cer (raw, json)
Hash identifier:          mYmJeCnDrSdxS/dIiW39ipuXbIteCxjoQHhPdoyTqyw=
Subject key identifier:   35:4A:7D:2E:56:55:BD:8D:C8:1E:7B:22:29:6D:28:E7:FE:54:50:F4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5AAE66E9072423611CC3B9009C151E29D31390D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/354A7D2E5655BD8DC81E7B22296D28E7FE5450F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Aug 2024 18:25:47 +0000
Certificate not after:    Wed 13 Aug 2025 18:30:47 +0000
Subordinate resources:    AS: 265904
                          IP: 131.196.44.0/22
                          IP: 2804:3fa4::/32

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 12:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ae:66:e9:07:24:23:61:1c:c3:b9:00:9c:15:1e:29:d3:13:90:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 14 18:25:47 2024 GMT
            Not After : Aug 13 18:30:47 2025 GMT
        Subject: CN=354A7D2E5655BD8DC81E7B22296D28E7FE5450F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4d:fb:f1:2d:13:54:0b:7b:c1:f3:70:a1:95:
                    ec:35:35:f9:8f:68:a4:85:cf:a6:ae:d4:e4:3f:29:
                    b9:5c:68:ab:e8:ec:cd:d4:34:ba:e2:9e:f7:84:ad:
                    97:c5:ec:1d:7e:88:5d:78:48:3f:dd:e3:4f:f3:4c:
                    3a:cd:25:de:4a:89:12:95:a9:22:66:a4:a2:43:5f:
                    44:2e:dc:65:17:e9:bc:a4:a1:57:e8:83:cf:09:53:
                    1f:29:cf:6e:8a:26:f5:0a:a1:13:e0:cc:3a:dd:1a:
                    3b:e0:c2:3f:c2:f1:a9:de:6f:7d:b2:79:2b:14:72:
                    dc:40:07:88:80:93:9b:23:bc:8a:ff:87:1c:9d:ea:
                    f3:d6:68:cd:b3:a7:7c:03:69:fb:0b:9b:fd:f6:b0:
                    f2:d2:ce:5b:9b:b3:92:84:28:0d:f0:b0:5f:76:3d:
                    68:8e:56:42:05:b0:69:82:79:d5:f4:07:90:a6:01:
                    a0:84:e8:24:e1:1d:26:f3:39:f6:28:8a:a9:0a:c8:
                    3a:35:76:0c:2e:92:63:c8:cf:5b:c1:5e:5a:d1:f6:
                    8e:b5:65:dd:6e:74:cc:83:93:bb:8d:3a:c1:82:7d:
                    9f:ee:22:87:d5:5c:2e:bc:99:a0:23:49:03:e5:1a:
                    35:4f:b2:dd:7b:d5:d6:7c:ff:97:69:53:35:83:ae:
                    8d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:4A:7D:2E:56:55:BD:8D:C8:1E:7B:22:29:6D:28:E7:FE:54:50:F4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/354A7D2E5655BD8DC81E7B22296D28E7FE5450F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.44.0/22
                IPv6:
                  2804:3fa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265904

    Signature Algorithm: sha256WithRSAEncryption
         03:89:58:1e:8b:71:8c:e5:ed:8e:b2:28:68:f5:16:bc:cb:bc:
         b7:ef:9d:2b:83:de:72:30:97:ad:82:08:98:cb:fd:3d:5e:d5:
         a6:2b:a3:23:16:7d:67:99:14:12:9d:50:34:60:d4:57:2a:20:
         0e:27:c9:70:5b:d6:14:91:32:ad:d0:4f:8f:7f:b7:ef:17:da:
         f3:15:0a:2c:46:e5:0f:48:dc:3c:8e:df:d2:d0:c1:27:c1:ea:
         8c:b9:8d:7b:76:95:55:9b:b1:4f:60:77:1e:3a:8a:f9:56:e7:
         da:27:69:3a:d7:b3:c2:10:a6:ad:b1:ee:a8:5c:af:8f:9a:1b:
         5d:66:65:2a:12:52:a0:a0:9a:bf:81:8e:2e:f2:a2:92:eb:39:
         68:11:ba:01:33:c4:37:2f:a5:90:03:61:fc:2b:6a:ac:8f:fb:
         d1:d2:9a:e3:d2:20:d1:b7:28:8d:57:9e:e2:e5:08:14:f0:d4:
         40:4f:f4:1f:cb:92:98:c1:92:9f:0d:71:15:e6:d6:ce:92:c5:
         d2:d3:1e:8a:6d:92:83:81:4f:2a:0b:cc:d3:f6:9b:3b:52:89:
         6b:73:ee:81:11:64:d3:45:32:ad:56:e3:ba:5e:fd:3a:a8:bd:
         c3:ed:b3:45:30:e9:d6:53:7d:08:f8:33:61:7b:92:61:b7:8c:
         e1:b6:b4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 17:24:44 2024 by rpki-client on console-fra.rpki-client.org