Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.cer
File:                     54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.cer (raw, json)
Hash identifier:          3q4IF7nZVK1ZYzYVQ/OCWbYXEFv8yD1Um9mpxVM2ugs=
Subject key identifier:   54:04:7D:92:A5:97:9C:89:1E:BA:43:F1:DD:69:4E:BF:CC:3D:CD:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4FCF3438CF2E1C920E11BBD543711ECCE2D567E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Aug 2024 20:16:52 +0000
Certificate not after:    Mon 18 Aug 2025 20:21:52 +0000
Subordinate resources:    AS: 264585
                          IP: 138.36.192.0/22
                          IP: 2804:2200::/32

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 13:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cf:34:38:cf:2e:1c:92:0e:11:bb:d5:43:71:1e:cc:e2:d5:67:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 19 20:16:52 2024 GMT
            Not After : Aug 18 20:21:52 2025 GMT
        Subject: CN=54047D92A5979C891EBA43F1DD694EBFCC3DCD1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:24:8e:1f:47:87:b7:34:c1:73:c7:81:ce:
                    e4:e6:ef:00:a5:d4:6b:4f:c3:bc:4b:f0:e4:99:03:
                    ef:e0:0d:0e:c5:8c:bf:a5:86:a9:50:90:fa:cc:39:
                    13:69:57:40:bc:66:9a:ee:7e:00:18:02:f3:78:8f:
                    7a:eb:27:d3:c4:9c:b1:87:c3:1b:18:d3:7f:c2:d7:
                    88:44:61:e4:ac:7e:89:d1:0f:99:dc:05:db:96:06:
                    3a:10:3f:43:8a:0a:8d:44:2a:63:2b:b1:97:e6:23:
                    1a:29:71:48:ae:64:f3:8a:be:6e:9e:27:57:75:a7:
                    a1:ca:8d:81:15:5f:f9:24:ed:45:6e:b5:82:25:0f:
                    bb:0d:d4:f9:48:12:90:9d:46:a4:6f:f0:f1:f7:e9:
                    59:8b:f1:b0:40:7e:20:a1:85:a2:4c:0f:a1:00:0d:
                    da:14:3b:89:d5:81:28:78:fc:49:1b:49:93:ee:1f:
                    0d:75:3e:9f:94:ea:43:1b:98:67:f2:80:66:9c:ef:
                    3c:74:6d:92:a3:de:d6:1a:bc:69:be:0c:56:1c:40:
                    2f:96:82:43:16:27:26:f9:22:2b:89:9e:7f:49:b6:
                    2a:94:24:94:15:12:8d:2f:d1:cd:f2:c4:ab:4d:06:
                    d0:12:30:0a:6a:5a:59:21:0b:87:96:1c:60:58:ad:
                    6b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:04:7D:92:A5:97:9C:89:1E:BA:43:F1:DD:69:4E:BF:CC:3D:CD:1D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.192.0/22
                IPv6:
                  2804:2200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264585

    Signature Algorithm: sha256WithRSAEncryption
         b2:cd:a9:19:0a:1a:0f:dc:19:75:52:65:04:ad:00:51:86:02:
         0f:bc:fb:0e:ae:d3:ee:95:2f:c2:63:3a:3c:35:6c:1e:2b:b2:
         2b:1a:8b:ca:83:cb:93:9c:c9:6e:f9:26:d5:1b:11:ea:b0:5b:
         24:6a:78:6c:db:bc:67:8b:48:a7:b4:8e:04:c0:cc:c6:a1:9b:
         4f:08:4e:07:a2:69:65:e6:c2:a6:7f:b3:08:e3:ce:b0:da:45:
         8d:51:22:46:f4:5b:94:cf:ab:33:e1:00:13:5b:bc:40:00:b7:
         64:33:89:a1:ee:ea:61:db:18:29:36:1c:c2:1d:1c:bf:71:d5:
         c1:92:e3:58:26:7f:00:da:b1:3a:5b:42:63:b9:ae:19:3b:81:
         40:c5:ca:54:7f:84:a4:67:2f:55:03:e1:b0:cf:04:1d:93:1e:
         91:1e:a4:7c:fc:ab:8c:90:be:de:25:59:f8:c5:22:95:e9:19:
         62:50:0e:2d:9b:e6:a3:77:a5:a7:83:bc:d3:52:52:37:14:82:
         26:ae:bb:79:34:84:93:f8:97:a5:64:aa:10:ec:71:1d:f1:9e:
         5e:ee:29:f7:ea:a2:52:3c:9a:d9:22:9f:67:62:61:55:48:9c:
         5c:82:96:dc:ed:51:92:db:df:b8:89:d2:2e:50:53:f0:aa:d8:
         6a:d5:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 15:34:13 2024 by rpki-client on console-fra.rpki-client.org