Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/514E4DA72AE5239524C79C4BF5A78B447815F2B7.cer
File:                     514E4DA72AE5239524C79C4BF5A78B447815F2B7.cer (raw, json)
Hash identifier:          sikh0Wnq60pRNEDlAG/QIrirmAWZ1TQWqEb9Pj74WY0=
Subject key identifier:   51:4E:4D:A7:2A:E5:23:95:24:C7:9C:4B:F5:A7:8B:44:78:15:F2:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6CE7071DEBDCC7DA43A92B0881573E908DF12113
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/514E4DA72AE5239524C79C4BF5A78B447815F2B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jul 2024 15:56:07 +0000
Certificate not after:    Mon 28 Jul 2025 16:01:07 +0000
Subordinate resources:    AS: 266160
                          IP: 177.85.80.0/21
                          IP: 192.140.12.0/22
                          IP: 2804:3b9c::/32

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 10:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e7:07:1d:eb:dc:c7:da:43:a9:2b:08:81:57:3e:90:8d:f1:21:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 29 15:56:07 2024 GMT
            Not After : Jul 28 16:01:07 2025 GMT
        Subject: CN=514E4DA72AE5239524C79C4BF5A78B447815F2B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:ec:2b:39:82:ab:72:2f:2b:cd:16:48:1d:
                    9e:fc:57:6e:01:86:6c:6e:a0:ca:1b:2c:48:91:2f:
                    75:74:28:e1:e9:de:a2:c0:7d:ff:04:20:18:74:34:
                    94:47:5d:f5:09:95:ae:f4:89:82:44:37:45:42:53:
                    45:82:eb:8b:49:bb:07:8c:12:c0:e6:2e:9b:e1:7a:
                    ed:5e:9d:74:b8:4c:fb:31:12:7a:b3:2b:28:e3:66:
                    5c:4d:9c:8b:a1:c6:73:f5:52:20:25:80:46:6f:3d:
                    2f:a9:11:61:7c:62:df:76:f7:47:d1:7f:b3:a7:c3:
                    4d:72:ba:8a:fb:a3:2b:97:48:91:df:d0:14:50:a4:
                    f1:e4:f4:ab:69:40:b9:3f:8a:6f:4b:b6:8b:d0:da:
                    f0:11:b9:38:e0:3b:61:cb:54:47:8d:cf:1c:3c:7c:
                    86:b3:f8:6f:4f:5f:b3:81:30:f9:51:e8:6f:90:21:
                    6e:51:ad:25:57:35:8a:4d:cb:b3:4c:ac:39:14:b3:
                    93:6e:65:ee:a9:ea:e4:9c:b9:e6:fb:48:ed:58:b2:
                    c5:23:e8:a8:a6:ad:39:46:0d:df:46:30:ea:1c:9a:
                    ab:61:56:69:46:d8:f0:ea:ce:9f:5f:f2:fa:04:ef:
                    8c:80:a0:e2:69:2a:16:8f:c2:78:ee:08:01:3d:1c:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:4E:4D:A7:2A:E5:23:95:24:C7:9C:4B:F5:A7:8B:44:78:15:F2:B7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/514E4DA72AE5239524C79C4BF5A78B447815F2B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.80.0/21
                  192.140.12.0/22
                IPv6:
                  2804:3b9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266160

    Signature Algorithm: sha256WithRSAEncryption
         b3:47:80:fc:c2:c9:fd:48:bb:59:fd:8b:ff:10:61:c8:ec:18:
         cd:90:b7:2b:90:37:b3:ba:d1:74:92:07:c3:75:b3:14:8e:a2:
         67:f9:4e:8a:b3:84:8d:b0:d9:cd:58:b2:1c:a1:80:fd:70:72:
         f1:bb:f1:ae:0b:a8:f6:3a:40:83:76:91:31:e8:06:1a:c8:e5:
         7e:13:8f:aa:41:fe:91:73:4c:7a:36:1e:24:fd:c5:97:df:15:
         54:32:8e:e0:f2:ba:a5:84:3a:fd:3a:95:e4:39:bc:96:b8:5c:
         d1:0c:a6:d2:fe:ac:ea:46:2d:f5:54:58:a9:7b:2d:84:d2:e5:
         01:2a:01:9e:f0:25:4e:9f:92:b9:c0:97:35:33:02:2a:e1:66:
         94:26:13:13:5c:05:dc:b4:30:ef:10:de:e7:b6:29:b2:e7:a4:
         90:ef:22:13:fb:45:ce:67:93:05:ac:5c:0a:14:48:d8:92:27:
         52:16:18:0e:24:ee:89:76:74:7f:9b:5b:ee:4d:3d:f3:71:2c:
         36:32:cd:32:c3:e0:3a:5e:56:27:a0:12:61:6a:ff:19:e2:e1:
         3e:d5:67:0c:33:bc:cd:75:9d:95:37:1e:eb:77:9e:ae:58:6d:
         c5:fa:a6:ef:05:af:a1:f0:6d:26:be:84:30:60:af:91:e9:dd:
         39:cb:47:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 13:37:57 2024 by rpki-client on console-fra.rpki-client.org