Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/39EA29C35E863F40C8CD2F16088ABA0A71D4B2A5.cer
File:                     39EA29C35E863F40C8CD2F16088ABA0A71D4B2A5.cer (raw, json)
Hash identifier:          L/Pb86TCQc4LTFJGYK8RwutboVxpO5Yjz23WhVB/hjk=
Subject key identifier:   39:EA:29:C3:5E:86:3F:40:C8:CD:2F:16:08:8A:BA:0A:71:D4:B2:A5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1D78308FFBBEF996A328099C13EABF81A99EFF8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/39EA29C35E863F40C8CD2F16088ABA0A71D4B2A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Aug 2024 17:24:17 +0000
Certificate not after:    Fri 15 Aug 2025 17:29:17 +0000
Subordinate resources:    AS: 265254
                          IP: 168.0.164.0/22
                          IP: 2804:2cf8::/32

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 15:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:78:30:8f:fb:be:f9:96:a3:28:09:9c:13:ea:bf:81:a9:9e:ff:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 16 17:24:17 2024 GMT
            Not After : Aug 15 17:29:17 2025 GMT
        Subject: CN=39EA29C35E863F40C8CD2F16088ABA0A71D4B2A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:9e:ea:52:25:36:e5:68:96:e3:67:8d:72:
                    bb:a1:23:6f:2d:ce:5d:21:29:ff:f7:44:a4:a3:62:
                    72:55:11:30:b4:2a:f5:24:49:8c:62:98:9e:8c:dc:
                    2f:1e:06:65:65:4b:46:08:c6:bb:7e:80:75:b4:41:
                    55:47:30:b1:b5:d9:fa:f7:09:e0:26:9c:48:6b:d2:
                    e7:c3:f3:f7:02:ab:21:92:7e:e4:56:e1:c9:99:df:
                    7b:73:9d:30:c9:5d:29:e6:92:29:e3:23:37:fd:b3:
                    61:c6:c3:52:59:d5:eb:6a:f3:64:8d:98:51:11:c5:
                    a3:e5:7c:3e:2e:bb:b7:3d:0c:3a:5c:40:76:95:2c:
                    d8:60:d5:d9:76:72:17:e2:e2:c2:37:7b:c5:51:f5:
                    86:e4:92:09:2e:40:1c:b6:08:aa:c7:fe:79:ab:36:
                    20:20:d4:7b:27:56:99:7c:2c:ca:8a:8e:85:87:7e:
                    fd:65:07:6b:54:9e:76:6a:22:23:8e:c8:f3:14:28:
                    21:f6:96:21:5f:0f:01:20:ae:2f:7b:0d:58:14:62:
                    f4:88:40:44:bb:44:2f:b2:af:67:cc:7b:b1:6c:fe:
                    13:55:37:91:fc:13:4b:26:fc:c3:d4:c4:e2:94:e9:
                    dd:a4:c7:93:fe:42:5d:c7:a6:21:9a:30:a2:1c:cb:
                    73:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:EA:29:C3:5E:86:3F:40:C8:CD:2F:16:08:8A:BA:0A:71:D4:B2:A5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/39EA29C35E863F40C8CD2F16088ABA0A71D4B2A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.164.0/22
                IPv6:
                  2804:2cf8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265254

    Signature Algorithm: sha256WithRSAEncryption
         cd:a5:53:0e:b9:ff:31:33:18:ba:7f:19:62:1e:4c:1a:24:b0:
         ad:14:ec:da:ec:73:cf:7c:aa:a3:db:fc:cc:7d:40:d0:03:2a:
         a6:d4:7c:8c:ee:43:3b:32:61:21:14:53:6d:e6:e3:49:c2:93:
         d5:34:a1:03:32:25:4e:1d:be:05:63:6d:7d:2e:ea:c0:da:ea:
         38:db:52:08:45:5f:25:59:a5:2c:69:f6:f6:89:c9:10:96:d9:
         24:92:f2:d3:0f:f2:c2:94:a2:35:75:8d:37:f2:74:0b:73:16:
         99:0d:58:f8:63:25:82:d0:93:df:2a:33:d8:73:79:11:74:d7:
         c7:4c:48:fb:99:1a:1f:de:fa:3a:23:6a:06:95:3a:99:57:0b:
         43:20:60:66:da:bb:a7:6d:19:0c:d7:77:9a:73:a8:76:a7:5c:
         c9:1b:3d:13:73:37:a3:73:4c:4c:93:ef:de:69:86:3b:bb:93:
         8a:f2:1e:59:4a:89:88:4d:1a:00:84:9a:2f:40:b1:83:a7:f9:
         d2:f4:0f:e5:3d:55:7b:2b:63:b8:6a:65:f1:8e:ae:2f:2b:2b:
         78:00:45:99:7b:46:c1:5c:25:3d:b4:7a:ab:44:5d:34:98:38:
         89:60:a4:66:06:0e:d9:2f:24:6b:ea:bb:18:08:94:26:e1:19:
         33:12:e4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 19:38:57 2024 by rpki-client on console-ams.rpki-client.org