Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68ABA559858245888A12DE16C23E7B7C0D450AF8.cer
File:                     68ABA559858245888A12DE16C23E7B7C0D450AF8.cer (raw, json)
Hash identifier:          dzARhyLW09JaK3KoVa0rsN9IGRpDg/qVfkxVQANm/Hs=
Subject key identifier:   68:AB:A5:59:85:82:45:88:8A:12:DE:16:C2:3E:7B:7C:0D:45:0A:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       12B6F81840FE6DB4D323A189A5B4B05484A3D994
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/68ABA559858245888A12DE16C23E7B7C0D450AF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Nov 2024 20:36:08 +0000
Certificate not after:    Thu 06 Nov 2025 20:41:08 +0000
Subordinate resources:    AS: 263665
                          IP: 45.165.20.0/22
                          IP: 45.227.188.0/22
                          IP: 131.161.108.0/22
                          IP: 131.255.156.0/22
                          IP: 138.255.172.0/22
                          IP: 168.196.20.0/22
                          IP: 170.150.112.0/22
                          IP: 170.150.204.0/22
                          IP: 191.241.32.0/21
                          IP: 2804:1134::/32
                          IP: 2804:343c::/32
                          IP: 2804:47c0::/32

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 20:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b6:f8:18:40:fe:6d:b4:d3:23:a1:89:a5:b4:b0:54:84:a3:d9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  7 20:36:08 2024 GMT
            Not After : Nov  6 20:41:08 2025 GMT
        Subject: CN=68ABA559858245888A12DE16C23E7B7C0D450AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:10:05:b5:aa:cb:c8:65:e6:6f:bc:ba:82:
                    11:27:80:ae:36:0e:88:7d:3b:69:7f:0a:a2:88:5c:
                    aa:03:3b:2b:82:4f:b0:f4:97:2c:fc:0a:df:69:18:
                    d4:fa:74:ff:a8:07:27:64:d5:95:38:ae:66:4e:06:
                    18:9d:0a:8f:04:c8:97:48:32:3c:72:6f:4a:a2:d6:
                    66:32:c2:40:7a:81:ad:cd:f2:95:33:46:7c:f1:d8:
                    8a:95:c6:fe:ee:cb:14:78:df:f8:0f:21:84:96:06:
                    34:d2:a7:14:75:d1:04:9f:95:5f:77:90:2f:9e:8d:
                    a9:c3:08:23:d2:5e:e5:f9:ca:ce:48:f8:e3:7c:b5:
                    64:c2:4d:54:7d:85:c4:88:48:a5:85:c9:9c:ec:92:
                    91:ce:1a:7e:64:15:44:d5:c4:a8:e0:34:c1:e0:c1:
                    7c:c9:80:5a:fa:56:dc:01:9b:bd:a4:b0:58:87:d3:
                    9a:5b:3f:ea:df:7c:36:d1:d7:12:3a:0a:7f:6b:aa:
                    98:d0:fe:3f:f5:97:18:c1:8d:e1:1c:ee:fd:0e:68:
                    6c:97:e6:69:fa:df:52:2e:f6:67:06:90:b4:5e:0e:
                    83:74:c8:69:36:c7:f4:3b:a6:0d:b1:44:a8:9e:d2:
                    ce:ef:43:d2:5a:45:14:62:54:9f:ff:25:33:40:fb:
                    ad:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:AB:A5:59:85:82:45:88:8A:12:DE:16:C2:3E:7B:7C:0D:45:0A:F8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/68ABA559858245888A12DE16C23E7B7C0D450AF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.20.0/22
                  45.227.188.0/22
                  131.161.108.0/22
                  131.255.156.0/22
                  138.255.172.0/22
                  168.196.20.0/22
                  170.150.112.0/22
                  170.150.204.0/22
                  191.241.32.0/21
                IPv6:
                  2804:1134::/32
                  2804:343c::/32
                  2804:47c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263665

    Signature Algorithm: sha256WithRSAEncryption
         8d:36:b0:90:4c:1f:3d:b9:46:e5:9e:93:3c:5e:21:c8:8e:31:
         2c:cf:65:93:d8:d4:65:44:63:8f:7c:bb:25:32:5f:cb:e1:ed:
         6d:b3:cf:8b:b2:ab:30:43:54:ad:b0:d5:85:fb:38:e6:5c:e0:
         5c:ff:9e:5c:7f:31:d7:dd:c3:b8:70:96:db:93:fb:ea:4e:63:
         57:0c:d1:fc:e4:2d:05:92:62:fd:e8:2e:28:1e:ea:b4:09:a9:
         64:50:77:f0:0f:0d:5a:bb:40:f5:66:9d:c5:a9:e0:7a:28:a2:
         63:3a:19:de:66:45:fd:84:ad:ae:d6:ce:d7:3f:77:cf:a7:ac:
         9a:d9:5e:3e:e8:96:07:e0:80:37:6b:92:05:a4:54:9d:1a:57:
         7b:ce:1e:89:35:e2:61:d3:1d:be:5f:25:61:47:37:50:d6:dc:
         04:cc:39:f6:2e:a6:2f:e4:67:02:99:b1:06:21:53:7f:9a:61:
         d7:29:c4:86:d4:ce:90:7f:4b:6e:98:8f:18:e3:df:5c:77:99:
         e2:67:a7:2f:02:82:23:c8:f9:df:fc:11:62:55:09:63:d6:a4:
         f9:11:c0:f9:c6:18:36:52:23:d1:fb:3a:c4:bb:83:48:ae:30:
         36:9b:be:93:29:4a:8e:01:41:1d:ed:c7:ba:c5:33:35:fc:07:
         ca:97:cf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:09 2024 by rpki-client on console-ams.rpki-client.org