Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A7F9CF47EF7A22D2CC104FD2833007A31C40F03.cer
File:                     5A7F9CF47EF7A22D2CC104FD2833007A31C40F03.cer (raw, json)
Hash identifier:          15ANGq5hj/IYXDOws6NNqBLQsjWTUtv/OAYlIeFpffE=
Subject key identifier:   5A:7F:9C:F4:7E:F7:A2:2D:2C:C1:04:FD:28:33:00:7A:31:C4:0F:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       176113AD12167C3B60AF6B9ECDA3F93A0F091FF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/5A7F9CF47EF7A22D2CC104FD2833007A31C40F03.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Oct 2024 13:34:02 +0000
Certificate not after:    Wed 15 Oct 2025 13:39:02 +0000
Subordinate resources:    AS: 264999
                          IP: 170.84.76.0/22
                          IP: 2804:3130::/32

Validation:               Failed, certificate revoked on Sun 10 Nov 2024 07:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:61:13:ad:12:16:7c:3b:60:af:6b:9e:cd:a3:f9:3a:0f:09:1f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 16 13:34:02 2024 GMT
            Not After : Oct 15 13:39:02 2025 GMT
        Subject: CN=5A7F9CF47EF7A22D2CC104FD2833007A31C40F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:95:28:fa:f9:8a:be:4a:50:1e:11:d7:c8:
                    8d:96:35:33:26:ea:12:5d:12:82:c0:21:72:76:80:
                    12:22:26:71:4b:ab:30:c1:ac:4f:1b:c9:67:b2:36:
                    45:78:f1:5f:14:ed:c0:52:7f:36:13:cd:a7:21:dd:
                    fe:15:f4:4e:3d:0c:b7:2f:a3:84:0b:22:89:fa:dc:
                    d6:0c:ee:7d:29:e6:d7:05:b8:0e:c0:4f:5f:70:b5:
                    ef:d5:9c:07:d8:45:a8:2d:01:a9:00:95:16:69:e4:
                    a9:09:89:0c:76:78:ad:dc:ad:14:d8:98:2a:1b:97:
                    f1:df:bb:97:90:18:a3:6b:e4:e8:7a:12:d1:a2:4a:
                    c9:2f:d2:01:ce:08:05:2d:9d:93:ba:d9:56:79:45:
                    84:5a:75:f7:58:f8:2b:f4:a7:d2:e0:86:55:63:b7:
                    72:e9:ac:2e:2d:49:8e:41:1e:99:a4:ff:08:fd:7c:
                    2c:e0:b2:9e:96:3c:05:cd:bf:a5:5f:60:71:7e:a9:
                    fe:0b:5b:d4:6a:a7:77:53:c1:71:b6:f6:4f:8c:f1:
                    ba:b2:e4:df:42:d2:f1:a5:4a:01:1c:c5:98:1c:ab:
                    4a:b7:67:ee:4c:9e:a3:21:6a:e1:bf:ec:21:67:d6:
                    5f:74:df:98:75:e2:f5:f1:f9:58:e8:bb:f2:f8:5f:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:7F:9C:F4:7E:F7:A2:2D:2C:C1:04:FD:28:33:00:7A:31:C4:0F:03
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/5A7F9CF47EF7A22D2CC104FD2833007A31C40F03.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.76.0/22
                IPv6:
                  2804:3130::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264999

    Signature Algorithm: sha256WithRSAEncryption
         1d:8f:ae:61:58:ed:5a:d2:d4:a0:06:9f:81:b7:be:3c:e0:4b:
         f7:85:60:1a:0c:38:b6:0a:70:e3:94:e4:ac:01:83:55:71:75:
         a8:63:db:96:67:30:10:8e:48:61:7e:52:fa:f3:de:d4:f9:90:
         eb:bf:95:f2:69:2e:69:1c:a6:71:97:e6:be:cb:cf:a8:32:27:
         99:6d:5a:e1:14:2b:54:91:3f:57:db:f4:ec:ff:70:d8:97:67:
         b3:7a:ec:5f:04:90:25:f8:c7:61:bd:65:5e:14:5d:d3:dd:03:
         fc:f0:25:3f:8b:37:6f:57:b6:be:e5:10:a8:40:c2:cc:7d:61:
         d8:66:76:a2:fb:e0:2c:05:82:69:99:70:9c:e5:d9:7c:58:0c:
         a9:82:93:be:d9:ea:37:6b:5e:6d:2d:21:f1:d1:bb:df:b3:9d:
         ca:14:4c:fb:cd:f8:27:38:7f:59:1e:67:66:c6:3c:b4:fe:03:
         7b:aa:8f:b8:75:e1:db:27:50:1a:22:2b:20:75:5f:c2:6e:fd:
         82:28:81:48:62:e8:65:8d:45:3d:50:59:ca:f9:2d:00:83:67:
         37:e8:6b:80:5e:f7:85:34:e6:fd:79:26:b0:25:9d:c8:3e:66:
         ba:64:2f:86:8d:6e:4a:cb:e7:03:75:f4:9e:4c:96:5b:6b:ba:
         98:d4:f2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 14:00:34 2024 by rpki-client on console-ams.rpki-client.org