Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/66E03B85E0118A709DF8E8B2C13E4D4E68AB6B25.cer
File:                     66E03B85E0118A709DF8E8B2C13E4D4E68AB6B25.cer (raw, json)
Hash identifier:          3iTynPU9SUeDgLSGZyTb/n5b6VNcLEyz9gPP/T+s7l4=
Subject key identifier:   66:E0:3B:85:E0:11:8A:70:9D:F8:E8:B2:C1:3E:4D:4E:68:AB:6B:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       10AAE385B2DFB8B7BFE0DB3092CEF9C4987679BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/1/66E03B85E0118A709DF8E8B2C13E4D4E68AB6B25.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 20:36:26 +0000
Certificate not after:    Thu 03 Apr 2025 20:41:26 +0000
Subordinate resources:    AS: 270505
                          IP: 177.37.44.0/22
                          IP: 2804:6cfc::/32

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 13:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:aa:e3:85:b2:df:b8:b7:bf:e0:db:30:92:ce:f9:c4:98:76:79:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 20:36:26 2024 GMT
            Not After : Apr  3 20:41:26 2025 GMT
        Subject: CN=66E03B85E0118A709DF8E8B2C13E4D4E68AB6B25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f7:32:2e:d6:c3:c2:ae:3f:d6:0e:19:ac:d3:
                    27:99:e3:b2:ac:ee:91:7b:fb:af:17:7c:22:79:14:
                    ce:e9:8f:36:37:6c:c1:98:64:39:fe:84:4d:8e:00:
                    0b:22:bb:e6:0c:aa:c2:e5:04:be:a7:8d:db:3d:49:
                    51:88:44:24:11:07:2b:cb:f4:f8:aa:76:4a:10:bc:
                    a2:de:c1:21:ee:f4:28:e3:d2:d0:f7:f9:f1:72:2d:
                    23:de:1c:d5:59:58:b9:33:35:4f:26:bd:86:59:35:
                    22:8a:2f:ad:41:14:bb:36:66:ee:86:9c:03:b0:0f:
                    f1:01:52:cb:ab:b8:69:c8:42:8c:8f:e5:39:1e:ea:
                    ab:18:8d:a4:93:df:f3:11:76:26:b3:eb:17:be:83:
                    d4:92:3d:bd:cc:36:c2:ff:e0:bc:31:b3:41:57:b4:
                    12:82:97:05:de:2c:f8:71:d2:30:56:14:75:41:cb:
                    e6:c0:0b:4f:92:ea:60:01:4b:81:b3:67:31:78:e0:
                    b9:ea:ef:d1:ca:1f:71:08:13:d7:fe:3f:0d:97:6c:
                    58:9b:e0:db:b6:01:24:c1:c0:1a:64:b7:c3:5b:ec:
                    3a:a3:46:85:80:dc:3a:3c:49:5c:a9:75:7c:cc:b4:
                    74:b9:cb:7d:08:63:c8:70:3e:8e:f1:41:6e:88:d1:
                    40:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:E0:3B:85:E0:11:8A:70:9D:F8:E8:B2:C1:3E:4D:4E:68:AB:6B:25
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/1/66E03B85E0118A709DF8E8B2C13E4D4E68AB6B25.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.44.0/22
                IPv6:
                  2804:6cfc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270505

    Signature Algorithm: sha256WithRSAEncryption
         1d:12:25:b8:8e:7a:ab:f6:8e:50:ce:b3:f6:51:22:ed:83:63:
         eb:58:ba:a6:8a:86:05:7c:c3:20:6e:20:d7:63:a8:28:04:97:
         58:db:8e:cf:d5:47:74:6b:4e:ba:23:04:57:5f:2f:8a:35:85:
         28:14:73:0c:cb:a4:0b:7a:78:22:d4:50:52:89:49:a0:0d:56:
         cd:eb:97:8c:f8:58:26:f6:0e:03:75:5b:b3:b7:93:8d:8b:e9:
         a7:cd:2a:b1:9e:ba:c5:46:8b:01:05:db:83:ea:99:04:e4:a4:
         d6:a9:6e:bd:71:de:e3:e0:65:ba:0c:ae:d5:7c:a5:e0:a1:b4:
         d8:79:6d:79:27:7f:74:f6:43:40:c6:45:00:7d:18:e3:7c:58:
         39:bb:18:fb:e1:0b:f2:3f:48:ef:14:63:f6:d5:78:2a:6a:bd:
         1c:ed:b6:44:10:70:e5:32:09:ec:84:37:57:3b:80:16:9e:38:
         ee:45:fc:61:13:f9:65:f6:fc:86:54:6f:0b:2b:7f:01:c0:68:
         19:2a:2c:4b:41:cb:b6:c2:08:9b:db:ab:7d:ea:65:0b:3e:0c:
         39:81:3c:e6:76:3b:88:ce:1a:4f:1f:cc:e4:d9:84:43:cc:f1:
         f5:42:6e:53:ce:c7:0c:28:d9:fa:57:8a:7c:e5:69:9f:f3:ad:
         7f:cb:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org