Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/521029F41F1850584158B89F3F2BD1C7DB0F4A76.cer
File:                     521029F41F1850584158B89F3F2BD1C7DB0F4A76.cer (raw, json)
Hash identifier:          ktW//L60GX5OpFS4c3tJxIMyY5e8OYj7salmSEr2xMo=
Subject key identifier:   52:10:29:F4:1F:18:50:58:41:58:B8:9F:3F:2B:D1:C7:DB:0F:4A:76
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       130DD229F5B7419CB803FFBB7E834C5350DDE68F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BDbFZUFETg2hDTtrJ17GnsYUbykj4YHKVoptgL2GYVGW/0/521029F41F1850584158B89F3F2BD1C7DB0F4A76.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BDbFZUFETg2hDTtrJ17GnsYUbykj4YHKVoptgL2GYVGW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Jun 2024 13:50:37 +0000
Certificate not after:    Fri 27 Jun 2025 13:55:37 +0000
Subordinate resources:    AS: 273336
                          IP: 2804:8d20::/32

Validation:               Failed, certificate revoked on Sun 03 Nov 2024 20:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0d:d2:29:f5:b7:41:9c:b8:03:ff:bb:7e:83:4c:53:50:dd:e6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 28 13:50:37 2024 GMT
            Not After : Jun 27 13:55:37 2025 GMT
        Subject: CN=521029F41F1850584158B89F3F2BD1C7DB0F4A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:00:62:d1:7b:e4:17:41:33:ae:72:f0:e5:11:
                    87:3a:d1:ca:2e:65:09:d1:bd:1d:e8:6d:77:e5:a8:
                    76:93:fb:d7:fd:ef:f7:07:0f:0f:70:16:1c:65:1c:
                    40:4b:85:51:cb:be:ce:9c:89:12:59:10:fa:f5:4f:
                    9b:15:0f:e1:27:af:d6:e7:13:7c:00:69:93:f8:5e:
                    f2:b1:94:b6:b7:63:25:19:ff:ce:27:d7:16:0f:58:
                    dd:e0:d2:a0:24:bc:9a:03:90:b4:4a:46:0e:a6:19:
                    bc:ff:13:3b:9d:0e:c6:51:53:0e:3a:76:8d:c8:dd:
                    a2:3b:69:ba:71:cc:62:b2:f0:81:c1:ff:c5:68:b2:
                    00:d7:51:e2:5e:f6:e5:46:fd:79:a3:60:4b:2f:86:
                    f4:c8:5f:70:e6:74:f3:77:3e:07:93:8e:34:c3:52:
                    3a:6c:70:cc:7d:6e:f9:39:e7:f1:42:b6:c9:e0:c4:
                    d1:9d:04:95:38:aa:02:dd:61:fa:ab:77:2d:bc:6a:
                    9a:d5:f0:fc:f6:47:d7:0d:5d:7a:1f:f9:ca:40:47:
                    57:23:9d:5d:ec:3d:bb:f2:88:82:8e:94:ad:52:46:
                    a5:7d:11:4a:e9:2f:52:86:f7:6c:cd:0f:5f:d7:53:
                    d5:84:a1:78:eb:c6:7c:31:c6:75:09:d6:08:fb:25:
                    c8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:10:29:F4:1F:18:50:58:41:58:B8:9F:3F:2B:D1:C7:DB:0F:4A:76
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BDbFZUFETg2hDTtrJ17GnsYUbykj4YHKVoptgL2GYVGW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BDbFZUFETg2hDTtrJ17GnsYUbykj4YHKVoptgL2GYVGW/0/521029F41F1850584158B89F3F2BD1C7DB0F4A76.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273336

    Signature Algorithm: sha256WithRSAEncryption
         51:f0:0d:9b:f3:71:4e:84:c3:79:05:12:5a:78:4d:24:6a:b8:
         a9:36:94:56:2c:79:68:e3:bd:39:ca:a5:a5:6f:54:c6:06:69:
         54:7f:2f:25:be:94:dc:9e:b3:4e:b7:6a:e5:8d:b8:d2:3e:63:
         74:47:30:13:31:12:5b:16:e7:3f:eb:f9:52:dc:6f:3e:29:15:
         4c:4f:91:87:f5:a5:41:f1:d2:07:0e:5f:f2:f4:7a:d2:4e:13:
         24:d6:07:74:a6:e1:8d:bb:4b:a7:af:47:c8:6f:c9:a3:8f:b5:
         0d:89:ff:66:f3:41:d2:30:c4:5e:9c:17:f2:06:af:2b:61:37:
         95:e6:10:fe:f3:45:ee:30:05:f5:54:37:75:41:53:c4:ec:a6:
         14:54:0b:b1:d8:25:a7:91:ea:08:d0:4c:af:51:0d:c6:d0:18:
         d1:13:df:94:f1:30:46:13:41:28:a4:b8:33:ed:16:7f:67:10:
         a1:65:e4:3d:57:d4:fe:b7:b1:b6:ae:5b:dc:d3:15:e5:78:d0:
         b5:ee:af:bf:e5:ea:90:53:fb:b0:db:4b:6a:c8:b3:86:b1:1e:
         86:6e:ac:60:a8:79:2e:6c:d3:5f:f6:59:2a:64:e2:cd:9a:6d:
         f0:5d:c7:b1:16:cb:9a:44:0f:d1:4f:f8:11:e9:22:01:63:1b:
         bc:7c:5a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 22:48:49 2024 by rpki-client on console-fra.rpki-client.org