Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/51D614FB21687226E5AB5B4AABC42D2C253C1549.cer
File:                     51D614FB21687226E5AB5B4AABC42D2C253C1549.cer (raw, json)
Hash identifier:          9gCvgm2JB0hDWXhyxDL2E/A9nrTAXJ6Kwc0lnI5NEXE=
Subject key identifier:   51:D6:14:FB:21:68:72:26:E5:AB:5B:4A:AB:C4:2D:2C:25:3C:15:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       22DE2C7B3104509EC327369333FC36EDE055AC49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/51D614FB21687226E5AB5B4AABC42D2C253C1549.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 01 Jun 2024 00:40:21 +0000
Certificate not after:    Sat 31 May 2025 00:45:21 +0000
Subordinate resources:    AS: 265139
                          IP: 143.255.52.0/22
                          IP: 2804:2b2c::/32

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 09:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:de:2c:7b:31:04:50:9e:c3:27:36:93:33:fc:36:ed:e0:55:ac:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  1 00:40:21 2024 GMT
            Not After : May 31 00:45:21 2025 GMT
        Subject: CN=51D614FB21687226E5AB5B4AABC42D2C253C1549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:80:31:7a:40:c9:e1:9e:52:a7:0c:5f:a8:
                    a3:1d:13:26:93:af:41:37:9d:44:2c:45:0a:51:1a:
                    fc:20:b2:e5:b2:77:d2:d5:0d:98:72:44:5a:e7:03:
                    b8:f1:8a:94:d9:9c:16:5d:41:97:ad:c7:ba:c5:d6:
                    00:30:f7:eb:9a:aa:79:49:59:23:ae:f1:46:87:e7:
                    ec:c1:19:27:b6:d5:46:84:2f:c6:db:80:cf:6f:5f:
                    98:1b:0d:38:5d:3e:83:34:dd:33:99:15:35:32:59:
                    d4:4d:18:be:f2:5c:9b:35:d2:30:3e:d5:f8:7a:a3:
                    c1:82:00:85:77:da:80:11:e6:b0:e3:75:2b:9b:5e:
                    11:ee:38:3e:54:b2:a2:01:5f:5e:8b:f4:01:c9:e3:
                    1c:98:2c:41:0b:3f:04:da:d2:e2:fb:1d:ff:3b:e0:
                    c6:58:6c:f9:75:8f:b0:6e:00:12:0b:d5:05:2d:b9:
                    86:08:27:9e:a4:65:d0:21:01:9a:e2:1c:50:f4:57:
                    d1:12:27:55:2e:e1:e5:dd:ce:73:ba:04:06:53:92:
                    de:4f:d9:9a:69:7b:11:b5:2d:6e:f9:9f:e2:c6:98:
                    26:c8:61:06:ff:c5:b9:00:7a:30:6d:b2:a0:0c:2d:
                    49:9f:02:e8:f9:f1:fe:ed:8e:86:bb:d5:c3:61:07:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:D6:14:FB:21:68:72:26:E5:AB:5B:4A:AB:C4:2D:2C:25:3C:15:49
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/51D614FB21687226E5AB5B4AABC42D2C253C1549.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.52.0/22
                IPv6:
                  2804:2b2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265139

    Signature Algorithm: sha256WithRSAEncryption
         8d:24:40:c8:a0:8e:a7:96:f8:f4:86:9b:de:d1:44:6b:8f:ad:
         06:9e:86:58:e7:be:a1:30:da:be:72:17:d7:4d:ce:f7:ac:e8:
         19:d4:a5:11:2e:4d:30:e4:2d:2c:ef:10:28:41:73:64:58:50:
         e1:30:26:e6:83:52:0e:c9:ef:8d:52:50:9a:2d:62:2f:48:7d:
         a8:70:f2:4b:64:63:54:1d:da:32:12:94:0f:6b:91:c4:5c:7c:
         27:88:51:37:bf:54:39:7b:98:62:44:27:61:9b:64:35:36:43:
         ab:e7:48:af:0e:cc:b7:39:c9:e3:8b:ea:10:ad:b4:5d:6d:44:
         6c:04:18:69:f9:ba:97:01:3f:d6:52:e0:d9:da:46:ba:42:3f:
         07:5a:3e:b9:c0:35:2b:25:eb:e9:94:6b:a2:04:bd:5f:ed:80:
         53:54:3c:96:22:e7:0a:ca:0c:98:7b:81:96:51:e5:63:e3:e1:
         5f:4a:77:3c:ba:51:9e:8a:0c:be:b3:1f:e5:70:a6:98:a7:f5:
         44:5e:4a:80:fb:e2:b8:88:ec:93:5a:fb:5c:d6:93:9e:31:69:
         25:64:fb:6c:f3:07:f0:b0:45:52:bd:b0:51:71:ce:5d:43:e2:
         10:1e:42:22:fe:30:b7:18:09:2c:fc:6b:99:d6:7a:68:f2:c8:
         b5:33:3c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 13:24:05 2024 by rpki-client on console-ams.rpki-client.org