Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/52BE1FF4DCE390617E93DF50EEC88C54A818E8B7.cer
File:                     52BE1FF4DCE390617E93DF50EEC88C54A818E8B7.cer (raw, json)
Hash identifier:          nnpqLhIBlEo7X/zQ8yoEFlQal3HAQcYy9IGKZGxyCLI=
Subject key identifier:   52:BE:1F:F4:DC:E3:90:61:7E:93:DF:50:EE:C8:8C:54:A8:18:E8:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       32EDB3D34E8C51F8512B9501BE9F920C144B7003
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/52BE1FF4DCE390617E93DF50EEC88C54A818E8B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jul 2024 17:24:37 +0000
Certificate not after:    Fri 25 Jul 2025 17:29:37 +0000
Subordinate resources:    AS: 53049
                          IP: 200.142.184.0/22
                          IP: 2804:18c4::/32

Validation:               Failed, certificate revoked on Wed 21 Aug 2024 10:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ed:b3:d3:4e:8c:51:f8:51:2b:95:01:be:9f:92:0c:14:4b:70:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 26 17:24:37 2024 GMT
            Not After : Jul 25 17:29:37 2025 GMT
        Subject: CN=52BE1FF4DCE390617E93DF50EEC88C54A818E8B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:d0:2a:95:f1:fe:b9:0c:fb:db:79:e5:89:
                    73:c1:86:9a:47:15:38:03:94:19:b1:b4:c0:5b:f1:
                    a1:3e:8e:97:e0:f7:bb:a1:9b:5f:71:fe:e6:60:94:
                    dd:20:8a:f7:a7:82:82:7c:26:fb:20:7c:e9:45:02:
                    5a:44:92:95:c1:d3:d9:28:0f:5e:98:cc:3e:be:13:
                    c4:23:77:63:01:b2:6b:6d:33:50:97:44:c1:1c:ea:
                    2b:c3:67:1b:d1:56:cb:c7:96:43:ba:e0:fb:e7:e8:
                    c8:de:17:c6:7a:64:0c:cb:5a:8d:56:3e:d2:5b:05:
                    57:1b:54:f9:7e:57:99:00:0e:da:86:38:bf:97:45:
                    18:9e:b4:84:63:23:7e:79:53:1a:f2:0a:3d:eb:28:
                    d8:74:9f:e4:b9:4a:50:17:08:f6:7c:3e:9e:8b:0b:
                    f2:41:51:24:ae:27:d5:ad:5e:97:d4:9e:85:6d:46:
                    e9:25:a4:61:64:c3:9a:f1:0e:db:d7:67:16:1b:3b:
                    fb:be:a7:1c:3e:ae:a0:8a:04:1a:c5:01:c2:b0:8e:
                    8f:c0:b5:70:ad:c0:cd:ef:24:a4:cb:84:5a:a2:3d:
                    24:f6:25:6a:ce:c7:24:b7:47:6e:08:e5:ea:1f:c9:
                    a8:b0:bf:5e:c4:0f:92:a0:14:14:29:01:a8:86:f5:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:BE:1F:F4:DC:E3:90:61:7E:93:DF:50:EE:C8:8C:54:A8:18:E8:B7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/52BE1FF4DCE390617E93DF50EEC88C54A818E8B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.184.0/22
                IPv6:
                  2804:18c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53049

    Signature Algorithm: sha256WithRSAEncryption
         65:bf:50:4a:9f:d2:59:e5:85:a5:bf:85:ef:62:df:64:6a:04:
         56:5c:1b:d6:ee:e8:1b:ce:66:ca:21:df:51:c1:0a:83:95:64:
         72:c6:a6:ce:fa:2e:a0:80:04:7f:3d:8b:20:8d:6f:c2:e4:7a:
         8a:88:3e:af:ab:82:b9:3e:3d:a3:b2:f0:c8:d0:37:f9:bf:71:
         59:04:b7:70:a7:82:4f:3f:93:45:5f:28:3e:a1:a6:c8:11:c6:
         4b:f8:79:c8:a0:ab:4d:28:b6:3b:b4:48:86:0a:4a:51:27:3b:
         18:dd:a7:13:99:27:2c:3b:57:ca:25:b6:96:3c:6e:50:82:77:
         e3:b2:6d:dc:d9:09:30:63:fc:f3:3f:a3:65:01:e6:d4:bf:b2:
         00:38:02:46:3f:11:81:f3:16:f4:82:22:ab:eb:0d:0d:ae:59:
         fa:06:33:0c:0d:af:b4:6f:d0:b7:13:af:f7:2d:fc:89:a6:96:
         cf:48:4d:ff:e7:d8:7f:05:07:0b:9b:e7:fa:c2:25:71:f3:60:
         6f:1c:66:2e:0d:be:a8:7f:d0:43:37:cb:49:84:e8:fb:29:88:
         1c:32:54:c4:ca:ef:ee:9c:28:11:a1:c6:03:dc:b8:c2:70:c4:
         b3:16:ac:15:91:59:8b:10:75:49:9f:81:10:42:8b:bb:f5:8f:
         96:f1:90:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:36:45 2024 by rpki-client on console-ams.rpki-client.org