Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
File:                     64E08193273EEA26A89B833428798A9E6FFD296C.cer (raw, json)
Hash identifier:          pAUOTjeBtM/uIy3IoZr92bufdzBLjYx/iV9ADCyECbQ=
Subject key identifier:   64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0EDA520D86F4A9440BDA05CD791A22AA8B316BAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Aug 2024 19:27:34 +0000
Certificate not after:    Mon 25 Aug 2025 19:32:34 +0000
Subordinate resources:    AS: 269359
                          IP: 45.184.68.0/22
                          IP: 45.230.84.0/23
                          IP: 168.194.248.0/22
                          IP: 2804:6368::/32

Validation:               Failed, certificate revoked on Sat 07 Sep 2024 03:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:da:52:0d:86:f4:a9:44:0b:da:05:cd:79:1a:22:aa:8b:31:6b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 26 19:27:34 2024 GMT
            Not After : Aug 25 19:32:34 2025 GMT
        Subject: CN=64E08193273EEA26A89B833428798A9E6FFD296C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:3b:8b:42:20:40:72:59:2a:2e:6a:5d:d4:
                    97:81:89:5a:6f:6c:ac:fd:27:bb:91:70:50:f6:b1:
                    3c:22:8b:a6:da:b7:09:8a:1a:d2:66:ab:46:44:f9:
                    d4:b3:4d:0c:6e:be:e6:5e:1c:8a:45:45:d4:39:4e:
                    24:d9:f5:77:ee:4b:db:76:44:74:4c:b1:30:72:31:
                    d8:d3:51:9b:a8:bd:30:f9:c0:fd:58:54:b3:1c:c2:
                    67:de:e4:b7:2b:1b:33:ff:19:1e:d8:6c:c2:cb:a0:
                    c4:de:d0:fd:c6:40:ac:b2:ad:41:f0:e9:6b:14:cc:
                    19:3d:f7:dd:c6:ed:8e:c8:93:82:0a:ba:1b:8a:65:
                    b3:ee:98:6e:0a:3d:d3:b1:c9:77:04:6a:3f:75:21:
                    b2:95:8e:68:eb:0e:e2:55:3f:43:a1:ec:1a:12:28:
                    cb:e1:9d:cc:00:7e:4d:15:43:6f:7a:8c:8d:b0:cf:
                    16:b6:73:e1:7c:82:12:0f:c9:0d:12:95:89:05:06:
                    d9:b3:ff:60:05:6a:3e:23:3a:fa:be:3b:29:ce:ec:
                    c9:24:0a:15:6a:57:6d:53:f2:36:ba:bd:69:74:a7:
                    2e:2f:8f:f1:90:b5:f5:2c:f6:0d:fe:30:24:2c:b8:
                    ea:51:a9:e7:48:8c:7f:4a:cf:2e:e5:df:36:12:b2:
                    68:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22
                  45.230.84.0/23
                  168.194.248.0/22
                IPv6:
                  2804:6368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269359

    Signature Algorithm: sha256WithRSAEncryption
         65:c3:97:29:99:55:b7:eb:0e:31:a2:f8:ba:70:a3:21:4e:08:
         5a:bc:4f:40:1e:d4:63:ec:41:6c:23:60:9e:47:78:17:da:d2:
         ad:fc:db:81:92:1b:48:f8:da:4f:d0:d7:2e:ff:28:a2:1a:b8:
         4f:99:06:d0:e0:92:4d:7b:32:d8:cb:d8:2a:13:5a:86:dc:19:
         c5:cc:81:d0:53:0d:0c:0e:7b:36:9a:a9:15:ae:e3:36:23:70:
         91:a1:c8:0d:7a:82:01:23:73:4b:42:3c:5b:a6:29:3b:08:f6:
         5e:41:1c:dc:0c:48:22:ed:21:b4:a3:04:c9:f2:80:c7:00:77:
         19:99:9d:30:57:64:28:54:12:47:d2:a4:b0:f2:05:e9:b8:92:
         6e:aa:19:2e:aa:36:cc:3e:2b:c9:d8:b7:a0:e8:f3:a5:a0:32:
         48:e5:bb:36:b5:a5:36:16:f6:ad:f7:1f:e6:bf:08:ff:4e:86:
         c3:4a:e7:e7:08:51:ff:4d:a7:5c:22:86:ff:49:f9:3b:66:6f:
         fd:bf:93:06:a7:46:32:b2:e5:11:55:80:51:01:52:be:eb:43:
         90:dc:45:e5:9b:d7:f3:93:50:84:08:db:1d:dd:40:36:b0:ed:
         e9:21:51:86:95:ef:bc:50:1a:36:22:5e:94:fe:a5:28:85:8e:
         e0:ce:2c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 05:36:25 2024 by rpki-client on console-fra.rpki-client.org