Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/454BF1C9C5D96131647AB2C743040F2BD66CFCD4.cer
File:                     454BF1C9C5D96131647AB2C743040F2BD66CFCD4.cer (raw, json)
Hash identifier:          5eTXFxrREmVR+wJHkej1J3ZgOkzQuqZUc4bCsPGPb+o=
Subject key identifier:   45:4B:F1:C9:C5:D9:61:31:64:7A:B2:C7:43:04:0F:2B:D6:6C:FC:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       36BC1EF6C984A94E2E10BEEF8BE54F4D2CC81888
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/454BF1C9C5D96131647AB2C743040F2BD66CFCD4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Nov 2024 00:16:10 +0000
Certificate not after:    Thu 20 Nov 2025 00:21:10 +0000
Subordinate resources:    AS: 263165
                          IP: 191.52.248.0/21
                          IP: 2804:17b0::/32

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 11:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:bc:1e:f6:c9:84:a9:4e:2e:10:be:ef:8b:e5:4f:4d:2c:c8:18:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 00:16:10 2024 GMT
            Not After : Nov 20 00:21:10 2025 GMT
        Subject: CN=454BF1C9C5D96131647AB2C743040F2BD66CFCD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:a7:70:09:de:3e:76:9f:73:1b:a2:7a:f3:
                    52:c3:b2:0a:9f:1d:8b:c0:a8:d1:54:07:9b:be:51:
                    97:f0:a4:15:79:ec:1f:67:bb:44:ca:72:80:f2:cc:
                    35:ea:b0:67:b6:b8:d6:23:26:62:c6:d7:d7:ad:25:
                    25:17:e4:0f:82:d0:ce:04:e6:d2:d5:84:64:1b:68:
                    f2:04:3d:87:28:af:6e:a6:81:8e:d7:e4:f1:28:6c:
                    62:52:ff:9a:28:ba:20:33:1e:e6:f4:8b:3a:e8:a8:
                    e6:12:b0:ca:52:5a:db:70:1a:d8:4b:60:0a:fa:e4:
                    4e:2d:ab:00:15:62:36:ec:f8:b9:39:11:65:f2:f0:
                    ff:cd:0c:96:8d:4f:b6:15:56:ec:c9:c9:e7:d4:1a:
                    69:b5:0c:62:05:a6:57:af:09:e8:11:48:be:0d:57:
                    9b:f6:5d:51:8e:8b:62:bf:8b:00:20:16:6c:b4:95:
                    97:e7:e9:0a:e7:60:d9:ff:0c:1f:48:88:c3:93:fe:
                    27:82:1f:58:3b:a4:75:a8:7a:96:c8:78:34:a5:49:
                    5e:64:e9:a9:3c:45:9a:9f:50:16:36:d3:8a:9b:eb:
                    31:24:f9:14:24:26:04:62:3a:f3:ce:ed:67:80:a9:
                    e6:a5:5a:56:5a:d2:66:d2:58:34:46:8a:35:0c:eb:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:4B:F1:C9:C5:D9:61:31:64:7A:B2:C7:43:04:0F:2B:D6:6C:FC:D4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/454BF1C9C5D96131647AB2C743040F2BD66CFCD4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.52.248.0/21
                IPv6:
                  2804:17b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263165

    Signature Algorithm: sha256WithRSAEncryption
         6e:23:f8:02:10:e9:22:03:bb:42:48:75:4a:3b:a3:b8:01:1a:
         b6:73:a7:59:28:38:fa:f2:c3:f3:e0:60:d6:e7:82:3b:a8:6d:
         3b:65:a0:86:5e:b5:f5:25:c2:8b:bd:03:9c:d5:8e:f2:a4:3e:
         b4:95:b7:bb:4d:b2:d9:0c:65:ef:c6:0a:16:07:c6:33:bd:e3:
         95:bd:88:82:05:80:7c:9c:85:52:4e:e6:22:08:fe:c3:2b:8a:
         6f:45:27:0c:d1:04:d2:1e:32:2d:63:11:cf:13:78:af:44:75:
         07:77:e8:0b:23:de:0c:29:25:0d:e2:d1:a4:13:46:d6:76:5a:
         9c:71:a0:1d:00:cb:d1:5b:f3:ab:87:c2:f7:54:66:c0:75:0a:
         8b:98:b8:eb:70:dd:a7:c6:34:8d:f0:09:75:1f:88:a8:8d:29:
         46:63:de:ca:f3:b3:b9:a9:d2:d3:2f:8e:7e:46:d1:58:74:19:
         15:24:f8:f7:85:f1:2e:8e:c4:10:c1:3d:61:d4:0c:a1:c8:30:
         af:7f:6e:3e:ee:b2:f8:a3:93:71:f9:b8:b9:52:81:56:1b:28:
         aa:a2:33:21:3e:7e:7c:15:5d:af:6c:92:d2:f1:09:57:37:c4:
         f9:4d:4c:b4:fb:ba:27:2f:f4:20:1b:cf:90:8c:65:b2:ec:56:
         a8:87:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 14:22:52 2024 by rpki-client on console-ams.rpki-client.org