Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9.cer
File:                     554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9.cer (raw, json)
Hash identifier:          j5t7K0nCYogV0AInX0GLyGKNtZboCzASRrGsjh1c5dc=
Subject key identifier:   55:4C:9B:7D:E7:6D:DB:DE:12:B5:80:B0:F0:7E:00:1D:7B:2B:57:A9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       73D31BAACE7E2B65C4FA427EAD5714FEC900ABCB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/1/554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Apr 2024 19:59:36 +0000
Certificate not after:    Mon 21 Apr 2025 20:04:36 +0000
Subordinate resources:    AS: 268289
                          IP: 45.237.200.0/22
                          IP: 170.233.20.0/22
                          IP: 2804:4ee4::/32

Validation:               Failed, certificate revoked on Mon 24 Jun 2024 09:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d3:1b:aa:ce:7e:2b:65:c4:fa:42:7e:ad:57:14:fe:c9:00:ab:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 22 19:59:36 2024 GMT
            Not After : Apr 21 20:04:36 2025 GMT
        Subject: CN=554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:a2:0c:b5:d0:2d:b5:d0:37:bb:08:f3:06:
                    06:63:93:64:ea:c6:59:d9:cc:55:79:3c:41:4e:47:
                    1c:89:86:43:a4:b4:12:7f:e7:cf:b4:8a:2d:93:f1:
                    ef:14:2d:74:e9:73:aa:08:0d:5d:05:1d:36:00:bf:
                    24:d1:fa:94:d5:ed:4e:67:e5:39:1f:ef:38:fc:be:
                    06:01:44:20:59:b7:0a:78:3d:cf:8f:87:b0:38:fd:
                    85:9f:8e:11:95:d5:9b:14:c3:91:28:96:6c:eb:5a:
                    32:0d:d1:e7:b0:cb:af:16:e1:0e:94:39:11:7f:3a:
                    bc:7f:be:b4:0c:c6:c5:e9:5a:ba:5a:42:2e:ff:2f:
                    ab:e4:fa:64:17:96:f6:79:22:9c:cc:57:cb:90:a3:
                    2d:2a:f4:a1:3f:6c:84:c6:f3:48:6b:96:66:d7:aa:
                    67:20:4a:2d:91:fc:0c:73:3b:09:c0:e4:77:00:96:
                    ba:fc:9f:50:7c:7c:5f:a9:21:cb:c3:58:6f:d1:39:
                    7a:90:ba:0a:ac:d8:90:bd:43:40:8d:5b:45:c1:2d:
                    31:1e:4c:22:ed:b2:bf:b2:9c:db:a6:3c:1d:de:cf:
                    e7:40:fa:48:1e:fa:36:c2:d6:0a:b2:eb:18:0e:90:
                    20:32:d9:c9:7a:e5:20:9a:96:2d:64:a4:0d:25:17:
                    af:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:4C:9B:7D:E7:6D:DB:DE:12:B5:80:B0:F0:7E:00:1D:7B:2B:57:A9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/1/554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.200.0/22
                  170.233.20.0/22
                IPv6:
                  2804:4ee4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268289

    Signature Algorithm: sha256WithRSAEncryption
         33:36:50:c8:72:19:66:17:0f:ef:54:6d:28:56:2f:d4:e3:6e:
         19:94:38:64:37:48:31:6d:d5:e4:c7:f1:1c:55:92:15:38:35:
         81:b8:74:07:fb:ed:d5:d3:50:3e:40:8f:b7:58:47:66:3f:be:
         23:0e:79:a4:73:b6:89:27:f1:a9:84:d9:82:b8:4b:57:09:cc:
         e3:5a:9f:fd:62:87:d4:76:ad:7d:9d:c0:9c:c7:4f:52:d0:bb:
         d7:53:45:a8:96:dd:68:62:ae:7f:f8:65:76:80:7e:17:df:17:
         51:28:6f:1f:32:2b:71:77:b7:a9:9d:27:dd:96:51:39:18:ed:
         f0:8c:57:93:fd:23:e8:f1:dc:b2:26:e1:17:ae:08:f0:8b:48:
         b1:50:e9:1d:18:6c:3c:d0:26:9f:b1:ac:d7:c6:89:75:20:c4:
         5f:4c:a1:98:68:fc:0f:e3:02:ec:b2:3b:a8:1b:9d:13:e3:94:
         0a:ed:4b:77:35:e1:06:29:92:8b:be:d8:18:3b:89:aa:5d:a5:
         4a:bb:0a:7c:50:ee:8a:fe:20:9e:42:cc:44:25:62:45:4f:a2:
         23:f5:54:a1:58:ae:15:b5:93:2a:42:ee:b8:b6:ec:3d:3c:d5:
         22:93:33:c0:76:3b:a4:21:22:3a:ae:7c:87:e5:ad:d3:0f:f3:
         6a:42:4f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 13:02:52 2024 by rpki-client on console-fra.rpki-client.org