Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/61439C6B374499CD367F3A3160983AD24FB789C1.cer
File:                     61439C6B374499CD367F3A3160983AD24FB789C1.cer (raw, json)
Hash identifier:          +fD1AIzIW6db+mP60eeFS/7k0+B9Atyl7tUH5l3B/5Q=
Subject key identifier:   61:43:9C:6B:37:44:99:CD:36:7F:3A:31:60:98:3A:D2:4F:B7:89:C1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77B077EA3D63B74A170F66E90AEE31B174474A7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/1/61439C6B374499CD367F3A3160983AD24FB789C1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Aug 2024 14:00:22 +0000
Certificate not after:    Tue 05 Aug 2025 14:05:22 +0000
Subordinate resources:    AS: 264273
                          IP: 138.118.220.0/22
                          IP: 2804:2550::/32

Validation:               Failed, certificate revoked on Fri 06 Sep 2024 17:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b0:77:ea:3d:63:b7:4a:17:0f:66:e9:0a:ee:31:b1:74:47:4a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  6 14:00:22 2024 GMT
            Not After : Aug  5 14:05:22 2025 GMT
        Subject: CN=61439C6B374499CD367F3A3160983AD24FB789C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:82:30:3f:82:ec:06:46:06:50:37:35:dc:e4:
                    63:a1:8d:40:b8:5f:a9:4c:27:95:98:13:c4:04:fc:
                    98:91:a2:fa:a5:9e:dd:db:d3:e3:ce:77:a2:eb:27:
                    f0:63:1e:2d:0f:24:a2:5f:0c:63:4b:8c:39:22:ee:
                    dd:b6:96:1b:34:78:43:55:08:eb:b8:d1:d9:93:f4:
                    2e:0b:5c:3d:2c:0a:32:96:56:a0:03:d0:d1:71:e1:
                    5e:ac:6b:88:a2:fd:6c:cc:58:e5:89:bc:e1:3d:69:
                    00:40:85:74:83:e8:9b:83:0a:a5:8c:de:78:9c:5e:
                    66:43:79:df:6d:df:96:20:a8:35:62:63:8f:fa:9a:
                    1a:38:cb:53:8f:37:c7:c8:c5:ce:12:d9:22:d4:84:
                    b5:81:5a:43:b5:6a:0e:a0:b4:d7:d7:ac:58:1d:f8:
                    a6:e5:13:78:05:bc:a1:ff:93:31:d8:8b:1d:08:11:
                    76:40:1d:dc:60:61:8b:01:a5:27:9f:3a:5e:22:3a:
                    b0:d0:f4:ca:58:33:1a:24:ac:ae:de:18:a6:73:1b:
                    c6:2b:9d:2c:04:f6:48:e4:e9:1c:2e:34:6e:82:6c:
                    f0:b9:9e:49:87:54:2b:90:35:f5:72:b3:ac:76:b6:
                    cd:b7:6b:9d:00:90:05:04:fc:1c:e4:1f:2e:8b:f3:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:43:9C:6B:37:44:99:CD:36:7F:3A:31:60:98:3A:D2:4F:B7:89:C1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/1/61439C6B374499CD367F3A3160983AD24FB789C1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.220.0/22
                IPv6:
                  2804:2550::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264273

    Signature Algorithm: sha256WithRSAEncryption
         55:4d:3b:e9:4f:52:bc:02:e3:00:9a:a3:6f:fe:a2:a5:25:be:
         1b:3c:ea:93:e0:54:ab:9d:ad:b4:90:25:8c:ac:7e:b6:b3:21:
         8b:7a:80:f8:43:49:05:24:71:a5:67:e0:64:4d:ac:f4:fe:b5:
         9b:f7:c0:46:b4:b1:8b:2f:55:f2:05:4c:52:19:8e:3a:9b:09:
         ea:fa:ae:f2:55:19:78:c2:2d:c0:2e:08:57:f6:f8:51:84:3f:
         05:2c:b2:fd:13:30:a4:eb:d8:d4:2d:e7:82:8f:5c:4a:06:d8:
         48:7b:8b:f5:b8:90:97:11:27:12:ee:c1:38:97:c5:0b:15:d3:
         fb:3f:58:ac:81:15:9d:75:98:dc:f2:dd:f7:15:38:21:59:d4:
         9b:be:c8:2d:44:78:8c:be:87:d1:4d:70:9f:c5:3c:bb:6c:be:
         81:39:4c:7e:3d:26:da:b3:05:b1:98:86:df:3d:b8:3f:73:6e:
         4c:27:da:e6:03:52:2c:8b:ac:08:96:58:aa:95:1b:a6:33:8b:
         16:d6:e8:cb:13:ca:0b:d6:aa:d7:52:a0:54:1c:3e:fd:95:15:
         a5:2e:46:74:ec:95:ac:7d:64:a8:9e:ca:1d:2c:6a:4d:75:9f:
         ae:9d:1b:81:a1:fe:20:86:5a:a0:b6:e3:d2:bd:aa:b6:71:db:
         58:56:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 20:41:34 2024 by rpki-client on console-fra.rpki-client.org