Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/486AACD03D5BAEA38885804852C14CA46865A461.cer
File:                     486AACD03D5BAEA38885804852C14CA46865A461.cer (raw, json)
Hash identifier:          lnXvUFfts4I7zFq8tBucwagSf0Ka03p8TkpVtneEW7M=
Subject key identifier:   48:6A:AC:D0:3D:5B:AE:A3:88:85:80:48:52:C1:4C:A4:68:65:A4:61
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1C9984ECBDFE75DD8042A997B417631892676AA8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/486AACD03D5BAEA38885804852C14CA46865A461.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Oct 2024 03:18:44 +0000
Certificate not after:    Wed 01 Oct 2025 03:23:44 +0000
Subordinate resources:    AS: 268595
                          IP: 45.163.100.0/22
                          IP: 2804:539c::/32

Validation:               Failed, certificate revoked on Thu 10 Oct 2024 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:99:84:ec:bd:fe:75:dd:80:42:a9:97:b4:17:63:18:92:67:6a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  2 03:18:44 2024 GMT
            Not After : Oct  1 03:23:44 2025 GMT
        Subject: CN=486AACD03D5BAEA38885804852C14CA46865A461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:e3:c1:5f:08:e7:e7:fb:15:1f:f1:6b:19:
                    40:dc:6f:3c:0e:65:0d:b2:48:64:47:90:48:f3:35:
                    52:cd:03:3a:fd:79:16:2f:5d:ea:1a:ef:56:79:49:
                    90:a0:f9:33:32:cf:fd:0b:e0:86:0e:67:09:1f:27:
                    40:5a:71:7f:55:cb:b6:65:eb:b9:7e:4d:8d:cb:a1:
                    6a:f8:ec:53:2a:04:7d:87:84:61:08:d3:29:66:54:
                    3a:29:56:76:26:b3:c3:f9:7b:b0:84:fa:ff:46:45:
                    ff:4f:4a:81:35:1a:26:4b:48:b4:de:29:30:7a:02:
                    e4:9e:d5:26:bf:c5:31:cc:fe:aa:e1:77:30:49:ef:
                    47:bf:10:54:af:b2:ff:18:70:10:03:84:c5:b3:ed:
                    73:85:c1:16:49:58:7e:d3:6e:6d:c7:f7:d2:1c:90:
                    a4:da:5d:46:07:08:3f:eb:1e:66:c1:fd:a2:a5:69:
                    44:b0:0b:df:f0:8e:fa:af:eb:fe:50:42:c1:79:90:
                    f8:75:23:37:83:c2:3a:c5:e4:1c:d1:60:7c:c7:d7:
                    af:cf:18:51:33:d3:be:f4:43:fa:ca:f0:f0:19:07:
                    31:4f:d2:3e:98:a9:08:9b:44:18:0b:e0:1f:35:81:
                    15:ca:da:b7:be:66:4f:3e:b1:b7:be:0c:7a:12:56:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:6A:AC:D0:3D:5B:AE:A3:88:85:80:48:52:C1:4C:A4:68:65:A4:61
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/486AACD03D5BAEA38885804852C14CA46865A461.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.100.0/22
                IPv6:
                  2804:539c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268595

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:de:35:8d:8c:c2:ce:52:47:be:89:7c:0d:53:ef:72:ce:
         fe:bf:25:b8:2c:15:3c:fc:fc:68:e0:da:e6:75:a5:f6:80:08:
         0b:88:f3:98:2e:1a:4f:7f:70:89:89:2e:02:30:ee:46:9b:e9:
         9d:7c:e5:d1:ff:b8:8b:b7:bf:74:fc:85:c7:80:19:94:26:90:
         1e:41:2a:68:bd:29:98:f0:ab:9f:8f:08:d8:66:57:1e:84:e1:
         c7:65:8a:63:91:fc:f9:a8:9f:bd:d6:a5:40:02:39:80:bb:dc:
         03:62:84:56:b4:bf:95:92:65:13:c3:90:10:8d:9d:f7:3c:b6:
         0a:1f:3b:a9:1f:5f:30:eb:dc:d9:66:48:49:14:61:a6:0a:ac:
         1d:03:48:7b:ac:1c:4a:4c:b3:e0:1c:23:9a:3b:1d:de:bd:2e:
         01:e6:eb:b5:20:28:19:4d:c7:25:21:b3:83:b8:b8:95:c7:36:
         a6:d8:2e:9c:27:0d:f1:a4:d8:cc:43:65:0b:dc:c5:54:a0:4c:
         ac:a1:3e:fb:c9:b9:57:92:ad:d7:44:d9:77:3a:45:ec:af:5a:
         5f:0c:4f:92:02:b1:c3:04:3a:ae:68:b6:6a:9d:d1:67:b5:5d:
         ee:66:11:70:b1:74:6f:7a:e0:2b:9a:04:9e:45:42:c2:ca:9c:
         cc:96:17:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 08:31:18 2024 by rpki-client on console-ams.rpki-client.org