Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/42B32340D3861A798E4AF67ABA1AF7F804502F7B.cer
File:                     42B32340D3861A798E4AF67ABA1AF7F804502F7B.cer (raw, json)
Hash identifier:          v9TNd8Kglo3W6JuowtGWpwUpq9xWSAE1BvdSdQIKYqs=
Subject key identifier:   42:B3:23:40:D3:86:1A:79:8E:4A:F6:7A:BA:1A:F7:F8:04:50:2F:7B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2360570205F50B4E1FCE420F0371BD03BA2928CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/42B32340D3861A798E4AF67ABA1AF7F804502F7B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Aug 2024 14:51:19 +0000
Certificate not after:    Tue 26 Aug 2025 14:56:19 +0000
Subordinate resources:    AS: 264230
                          IP: 190.109.88.0/22
                          IP: 2804:2490::/32

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 11:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:60:57:02:05:f5:0b:4e:1f:ce:42:0f:03:71:bd:03:ba:29:28:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 27 14:51:19 2024 GMT
            Not After : Aug 26 14:56:19 2025 GMT
        Subject: CN=42B32340D3861A798E4AF67ABA1AF7F804502F7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d8:da:69:f2:a2:8d:ea:cd:89:a9:84:00:13:
                    c9:69:65:3e:00:14:7f:c1:74:5a:c2:4c:85:94:ad:
                    1c:eb:89:36:ba:a1:9a:02:c1:e3:29:6f:9e:7e:3e:
                    f7:9b:d8:9e:97:6c:c8:14:7d:f1:4a:29:b7:bf:00:
                    d4:92:87:45:39:f5:71:e7:30:29:9b:5c:0b:a9:49:
                    05:b8:28:9b:15:5d:3c:51:01:0b:46:a9:57:88:f7:
                    2f:35:4a:a4:72:ca:64:69:62:48:0b:ea:04:07:ce:
                    a8:56:f3:e4:4d:0b:6c:42:ce:f4:fe:e9:68:4d:aa:
                    7c:78:77:33:7d:3b:1f:cb:5b:4d:f0:78:05:59:34:
                    30:4f:a8:a5:7d:ad:b1:85:0d:1c:10:95:8f:fc:5f:
                    cb:d8:53:61:8d:e5:5d:54:52:16:c6:af:3f:5b:dc:
                    0d:59:d6:a9:0b:7e:66:2e:c2:da:39:32:66:72:19:
                    60:50:2a:80:b3:41:17:da:e3:ad:d3:01:e0:dd:ae:
                    27:7b:37:ac:ce:2d:a2:70:09:3f:19:5f:54:2f:7f:
                    b1:6c:92:a1:6f:60:e7:41:ba:ad:bb:92:3b:23:27:
                    37:ac:d7:22:2d:b7:19:c9:7a:bd:79:f3:53:48:61:
                    67:5a:80:35:82:b4:8e:c2:cf:f6:fb:32:07:58:ab:
                    53:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:B3:23:40:D3:86:1A:79:8E:4A:F6:7A:BA:1A:F7:F8:04:50:2F:7B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/42B32340D3861A798E4AF67ABA1AF7F804502F7B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.88.0/22
                IPv6:
                  2804:2490::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264230

    Signature Algorithm: sha256WithRSAEncryption
         5a:49:6b:9f:a6:56:1d:07:b9:18:66:17:95:5a:64:c4:fe:11:
         f5:aa:bd:3b:44:64:82:44:30:ba:fa:d5:7b:a1:c0:d7:c9:66:
         4f:dd:0b:a5:d8:b8:37:46:b0:4d:6c:ec:1e:7b:e6:88:5d:4c:
         11:a5:8e:9e:9a:d4:f8:5c:2e:bd:f1:0e:32:6b:6c:54:fb:d5:
         6d:5a:2e:0b:9d:a6:88:49:cc:43:cf:2d:cf:74:fe:6a:f7:92:
         13:98:84:f0:ac:75:24:80:6d:3f:ec:6c:eb:8d:56:0d:33:18:
         a8:a5:44:86:60:71:07:1c:dd:64:fa:76:d7:b8:c5:ff:94:39:
         95:2e:f9:5b:ca:20:ba:06:0d:b9:e7:ba:ff:1e:a1:18:e7:dc:
         40:25:72:22:d4:c5:a2:fd:11:2b:01:60:00:3a:fe:fd:ea:5d:
         18:e9:4d:4e:ee:a0:d3:73:14:8e:90:78:6e:ae:75:f9:62:7e:
         eb:05:9c:d6:a4:d3:70:43:a8:aa:04:3c:a4:5d:2d:c1:6e:75:
         00:8c:58:7a:65:b6:25:8b:53:7d:63:a7:0e:81:fa:d8:f7:a8:
         9b:ed:6e:93:d6:d2:1b:79:21:b8:8c:49:55:f0:3a:c3:ce:c9:
         b4:9e:d7:f0:cc:8b:fe:52:56:36:74:47:43:7e:3a:8e:0c:02:
         c4:bd:37:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 16:02:55 2024 by rpki-client on console-ams.rpki-client.org