Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778.cer
File:                     61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778.cer (raw, json)
Hash identifier:          0jP8anLbPZWoNkc4PIM2/d2IR9yOzQNBL3a3sD0tfAg=
Subject key identifier:   61:D3:FA:D8:31:4E:F4:2C:B4:E9:E3:1F:8F:D1:2D:9D:6B:66:F7:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1001091C88194E5E9DA6C1FAE80A3BD54943DC83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/1/61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:25:09 +0000
Certificate not after:    Thu 03 Apr 2025 19:30:09 +0000
Subordinate resources:    AS: 53123
                          IP: 187.111.192.0/20
                          IP: 2804:6478::/32

Validation:               Failed, certificate revoked on Thu 11 Jul 2024 16:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:01:09:1c:88:19:4e:5e:9d:a6:c1:fa:e8:0a:3b:d5:49:43:dc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:25:09 2024 GMT
            Not After : Apr  3 19:30:09 2025 GMT
        Subject: CN=61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:06:d3:ca:80:f1:61:86:66:73:bf:c6:83:
                    54:08:13:cf:00:f9:ce:79:07:ad:26:e9:88:ae:04:
                    26:4d:1c:52:82:1a:9f:20:88:e8:b9:7d:c1:a3:48:
                    cf:04:18:59:5c:c4:af:0b:31:03:ed:18:62:dc:67:
                    28:d9:db:6f:ca:34:44:a4:8b:e0:ed:59:4e:d0:81:
                    f0:20:b4:a7:d8:54:88:04:bc:8f:82:63:6a:e8:d5:
                    a5:7d:27:0f:94:06:da:68:05:75:f1:b8:80:8a:d7:
                    87:2d:d5:e4:d2:a5:31:ec:50:17:c1:e5:4e:68:20:
                    91:2b:59:6b:2e:38:a4:c4:fd:66:83:86:60:e5:25:
                    14:9b:c2:1d:b2:37:8a:e6:09:83:22:70:91:28:24:
                    e6:59:e1:28:83:85:c4:ef:33:6b:a3:ec:2d:86:b1:
                    0e:1c:58:34:49:94:05:ec:4e:6e:64:cf:c9:3c:e0:
                    75:df:93:6b:4e:dd:9d:23:3e:cc:c8:21:75:84:b4:
                    77:18:eb:d6:9d:21:c5:37:92:85:81:15:19:32:c0:
                    67:28:eb:80:41:c3:f3:9e:08:ce:31:31:4f:7e:7e:
                    9e:f3:4a:b0:96:2f:2f:02:38:41:c7:ac:8b:49:d6:
                    6f:ee:e1:4a:3a:08:7d:66:0e:ba:04:96:e2:18:e6:
                    7c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:D3:FA:D8:31:4E:F4:2C:B4:E9:E3:1F:8F:D1:2D:9D:6B:66:F7:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/1/61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.192.0/20
                IPv6:
                  2804:6478::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53123

    Signature Algorithm: sha256WithRSAEncryption
         1a:43:d5:bf:e7:cf:d5:b0:5a:cd:2f:1a:73:8f:ee:6f:9c:e4:
         71:ed:91:48:e7:30:ea:fb:99:4d:36:ea:12:13:31:3a:0a:5a:
         71:6b:a6:9b:83:1a:7e:4c:85:cd:b9:37:94:76:dd:57:17:a7:
         d0:e7:ed:89:af:05:bd:1e:ca:ca:81:6f:c8:32:98:36:0c:4a:
         4d:16:50:70:b5:9f:93:71:31:e5:f6:c3:11:b6:95:18:91:fc:
         49:80:d9:1b:4b:fa:68:1f:8f:4e:2c:d3:2c:a9:f9:ba:d6:5e:
         37:a3:75:d5:60:a7:e2:b3:41:af:bf:8d:01:c2:4d:27:7b:f2:
         60:3e:7b:1c:f9:e8:bf:2b:f6:c1:61:0a:7d:d3:e5:9f:55:db:
         2d:da:c3:6c:d9:9f:0e:a5:4f:d9:4b:20:36:f8:f7:3b:25:78:
         b9:38:49:3f:a5:a0:51:4a:68:0b:8a:f1:d2:bc:48:3b:51:16:
         4c:4c:c7:f6:99:6b:b9:4f:29:c9:47:65:67:41:bd:e4:31:40:
         6b:00:62:d3:c5:30:a8:4f:3e:cc:fd:1b:f1:af:6b:e4:d0:29:
         c7:c2:22:2a:b9:1c:65:cf:9d:5c:53:18:f0:38:1b:a9:3d:54:
         f2:59:7b:dc:5b:6f:27:ef:d2:7e:50:be:46:be:e2:9f:71:93:
         a8:e3:3b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 17:47:36 2024 by rpki-client on console-fra.rpki-client.org