Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer
File:                     5682495E51D353D705DB42C2671D958F655DB83F.cer (raw, json)
Hash identifier:          kyTy1nguIemgp4Vs0iwQ1/t0w6Muz7gPTvu6jVjmIXc=
Subject key identifier:   56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       49F6554E9513D73B6F96DB600185AA1C4D4082EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/5682495E51D353D705DB42C2671D958F655DB83F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jul 2024 14:10:16 +0000
Certificate not after:    Tue 08 Jul 2025 14:15:16 +0000
Subordinate resources:    AS: 266921
                          IP: 45.225.36.0/22
                          IP: 2804:455c::/32

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 07:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f6:55:4e:95:13:d7:3b:6f:96:db:60:01:85:aa:1c:4d:40:82:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  9 14:10:16 2024 GMT
            Not After : Jul  8 14:15:16 2025 GMT
        Subject: CN=5682495E51D353D705DB42C2671D958F655DB83F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:07:ca:19:d5:92:a6:74:9f:5b:3c:b0:a2:
                    31:9e:4e:9c:8c:7e:4a:88:57:20:37:08:0e:e3:c5:
                    73:39:56:f7:3a:fa:55:5b:a5:d1:22:76:80:07:73:
                    b6:1b:2f:71:61:14:d4:38:88:2c:37:41:ed:ef:82:
                    f1:3b:cc:4f:32:06:b2:d7:8e:75:4f:d1:2b:b8:4d:
                    14:89:b3:c7:2a:21:bd:a6:a9:06:ea:8d:da:06:e0:
                    4c:0e:72:68:c2:4c:9a:4d:55:7c:01:e5:ec:41:2d:
                    b4:a8:97:d8:da:01:64:9e:98:04:6f:94:38:33:cc:
                    c2:78:ad:65:4e:83:5d:dd:5e:51:cb:d5:ca:09:f3:
                    b9:5b:df:a5:2f:6d:fd:ff:85:f9:84:e5:75:33:ee:
                    81:5a:ca:e2:a6:f7:bf:e9:0d:2a:0f:0b:ce:c6:ad:
                    9c:39:4c:43:1c:d3:51:2f:85:3c:00:c1:ab:37:af:
                    22:a6:2e:46:02:be:96:73:fa:49:3a:32:fe:39:62:
                    6e:5f:97:d2:7c:d5:80:1c:9d:6b:b8:16:19:0e:32:
                    2f:03:6f:a8:50:94:ee:4f:29:58:e7:ba:b5:bb:1c:
                    7b:91:e4:9e:53:4a:9f:9c:a7:ab:93:48:4d:e6:e1:
                    10:65:de:61:d2:61:70:a0:9a:4f:6e:05:63:73:3a:
                    6b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/5682495E51D353D705DB42C2671D958F655DB83F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.36.0/22
                IPv6:
                  2804:455c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266921

    Signature Algorithm: sha256WithRSAEncryption
         c6:4f:a0:91:86:e6:d8:f6:51:af:f5:71:70:66:7b:d0:09:71:
         90:50:a6:5f:ec:ed:2f:38:14:db:eb:33:ed:e7:9a:52:1f:41:
         eb:2f:c0:1f:cb:8d:c6:d6:1a:d5:f4:d3:ff:b2:1c:bf:bb:d5:
         ce:d9:7e:58:db:0c:aa:64:c2:20:07:5b:91:27:e6:3e:c3:48:
         2e:8e:15:56:a5:e0:cb:c0:fe:ec:9c:d4:fb:2c:1f:cb:81:bd:
         a6:23:50:95:af:c0:1c:b9:bb:df:ae:b5:4b:8b:10:ce:01:34:
         04:33:60:f8:11:28:52:70:89:11:a5:ec:49:ad:88:25:66:f8:
         f1:ef:d4:eb:21:4c:24:85:16:3a:f5:dc:35:78:07:05:d9:10:
         74:4a:ff:6f:e4:3a:b8:1d:a4:5d:bf:30:e1:03:b6:12:37:52:
         e3:c0:6e:df:87:09:df:ef:f2:0a:be:87:31:b2:10:6d:95:32:
         82:4c:b3:f7:b4:25:aa:6f:2a:7a:4c:43:a9:66:7b:0e:a5:2d:
         7a:90:6b:b3:ea:dc:6f:3f:a5:f6:17:62:30:de:4f:61:da:ec:
         30:d7:68:d5:dd:eb:e1:88:3c:38:c5:f6:ce:87:54:0b:5b:70:
         10:35:a9:8a:fe:77:6f:21:c2:7c:f5:21:e9:dc:45:16:5b:f7:
         08:be:f0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 09:06:52 2024 by rpki-client on console-ams.rpki-client.org