Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/57678057080E52061A1CA6E454ADEB9345B4646B.cer
File:                     57678057080E52061A1CA6E454ADEB9345B4646B.cer (raw, json)
Hash identifier:          6B75O1zqYwOxWu+D2Eidm3MGJFUhVugfi4TMK5VyJoo=
Subject key identifier:   57:67:80:57:08:0E:52:06:1A:1C:A6:E4:54:AD:EB:93:45:B4:64:6B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3094D563220EE07852521826B28F4C965121595C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/57678057080E52061A1CA6E454ADEB9345B4646B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 Aug 2024 17:40:48 +0000
Certificate not after:    Fri 29 Aug 2025 17:45:48 +0000
Subordinate resources:    AS: 268257
                          IP: 45.236.240.0/22
                          IP: 177.92.162.0/23
                          IP: 2804:4e60::/32

Validation:               Failed, certificate revoked on Thu 12 Sep 2024 11:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:94:d5:63:22:0e:e0:78:52:52:18:26:b2:8f:4c:96:51:21:59:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 30 17:40:48 2024 GMT
            Not After : Aug 29 17:45:48 2025 GMT
        Subject: CN=57678057080E52061A1CA6E454ADEB9345B4646B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:c5:65:a0:31:45:b0:d3:58:4b:47:11:cc:
                    f4:b6:fe:b5:9e:bf:8b:79:52:62:27:68:ae:89:c1:
                    f1:f2:bf:c3:28:7d:82:6c:21:bf:ce:2f:ce:5e:f5:
                    d4:77:de:55:8c:f2:31:54:b8:28:ac:72:1d:1d:4c:
                    73:25:ba:c2:9f:80:da:fa:ae:b8:0e:1c:ec:4b:18:
                    ed:61:b1:33:f5:4c:82:b2:0b:e4:7b:8e:78:c5:9f:
                    66:63:3d:82:dc:c9:76:04:c6:a9:a4:29:cd:e8:d4:
                    19:fa:f1:04:58:8f:9c:f2:0e:09:94:52:2a:bd:ed:
                    2f:92:6b:7a:27:04:00:6c:63:87:71:03:8e:ab:24:
                    67:0c:82:99:86:3e:88:2c:a8:d1:80:19:21:7f:c3:
                    af:ea:2f:0e:62:ac:35:ec:2b:aa:a5:47:2e:2b:e2:
                    f0:bd:8f:28:a8:c9:3c:d5:26:e1:18:5d:6c:b8:55:
                    20:14:c7:b3:71:cd:34:32:5c:da:d2:cb:5a:cf:1f:
                    39:8c:b8:f8:16:33:4e:85:e5:1b:7b:8d:de:ec:d2:
                    a7:84:f6:c8:c8:5c:ae:bc:e1:d8:04:74:ab:b9:20:
                    c7:b6:f1:b8:af:b9:53:f5:83:a5:d4:e3:55:72:4a:
                    aa:fe:ca:64:ff:d6:a1:f7:34:67:11:94:ed:f9:f2:
                    8f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:67:80:57:08:0E:52:06:1A:1C:A6:E4:54:AD:EB:93:45:B4:64:6B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/57678057080E52061A1CA6E454ADEB9345B4646B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.240.0/22
                  177.92.162.0/23
                IPv6:
                  2804:4e60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268257

    Signature Algorithm: sha256WithRSAEncryption
         a9:26:a8:3b:d5:75:be:d7:2a:62:ca:50:0a:4b:43:98:43:2d:
         cb:2a:39:38:57:1a:06:d8:9a:f6:eb:b8:7c:74:2f:c0:0c:b0:
         36:51:f7:5b:8b:16:c2:31:f0:0f:39:79:a3:8d:e0:99:e5:77:
         97:3d:20:8a:00:5d:e9:a6:8d:69:86:cf:8e:5f:79:b2:0d:33:
         ca:ba:ed:54:80:b1:83:b0:9b:84:79:02:1f:ea:eb:ad:8d:e5:
         a9:74:30:6d:95:6f:d7:47:7c:48:32:33:87:ad:63:29:fc:e6:
         7a:84:7d:02:53:32:35:ca:48:05:e0:f5:a1:a1:7e:1b:33:98:
         bc:7c:90:1a:87:e3:62:d7:a9:a9:30:7b:2f:60:61:c9:15:4a:
         5c:5a:eb:54:80:1a:6e:d6:ca:1d:8e:55:19:dc:31:e3:98:0e:
         f5:18:09:50:47:f0:9c:8e:53:07:04:41:90:eb:4e:70:8b:07:
         42:f5:9e:51:84:d2:62:91:ab:7a:5a:6d:1f:20:f4:c6:fd:fa:
         5f:65:7e:48:6f:ca:47:d6:08:af:98:37:ac:bc:0e:35:89:f4:
         43:d2:fc:3f:cc:f5:0e:eb:62:74:54:0d:56:82:f2:5f:7c:20:
         3e:db:c6:54:20:13:c2:be:02:3b:3a:96:4c:14:48:d9:c8:6d:
         a2:31:fe:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 14:04:22 2024 by rpki-client on console-ams.rpki-client.org