Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.cer
File:                     7844A4130B44EBA72382E59A5F8133D0DA50FC7A.cer (raw, json)
Hash identifier:          xVS2wAle18INDNKH1CNBjzB5xzD+3K1ysD5sVthcgvc=
Subject key identifier:   78:44:A4:13:0B:44:EB:A7:23:82:E5:9A:5F:81:33:D0:DA:50:FC:7A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       217690691430F1C1C00F90FDDEB2F03C48BE64E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 07 Jul 2024 17:14:21 +0000
Certificate not after:    Sun 06 Jul 2025 17:19:21 +0000
Subordinate resources:    AS: 266151
                          IP: 160.238.104.0/22
                          IP: 2804:3b78::/32

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 07:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:76:90:69:14:30:f1:c1:c0:0f:90:fd:de:b2:f0:3c:48:be:64:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  7 17:14:21 2024 GMT
            Not After : Jul  6 17:19:21 2025 GMT
        Subject: CN=7844A4130B44EBA72382E59A5F8133D0DA50FC7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:6e:f6:b0:91:8f:2e:64:72:fc:e9:6f:a6:
                    62:0b:b3:43:c6:5f:f4:3e:9f:09:8d:73:7a:19:c7:
                    69:74:fb:b5:2c:9c:5a:0d:4a:cc:d9:ce:56:98:18:
                    ea:8a:b5:de:5d:ba:0b:85:c9:40:da:16:d3:fd:35:
                    6d:cf:4c:34:fd:c8:bd:b4:b1:b9:c1:56:ab:37:5c:
                    c7:c8:46:d0:53:75:22:7a:4a:e4:bb:41:e1:9e:c1:
                    e4:fc:cb:08:88:6c:4c:7d:f9:4b:90:6f:21:3d:3c:
                    e7:6f:6d:69:54:3c:ca:06:c1:37:83:48:ef:f9:09:
                    1d:57:f9:7b:01:5d:fb:39:bb:2e:0b:c0:ee:81:37:
                    91:ac:ec:95:f5:a0:e0:cf:1a:0f:2c:66:1c:b0:83:
                    90:f4:cd:a9:c9:7b:73:f0:8c:04:c0:4c:ec:54:12:
                    32:f5:6e:72:55:cc:79:04:55:60:a7:40:18:30:80:
                    0a:f4:66:54:9a:a2:91:d4:15:cb:d1:b3:22:f2:b5:
                    d0:21:b8:26:e7:c0:e7:d5:e8:4a:5d:de:e9:e9:29:
                    50:9b:f3:ba:48:c5:63:ba:00:5a:c2:f6:9b:2a:98:
                    d6:f2:2e:17:ee:9b:f3:cf:a0:05:32:90:d9:89:40:
                    e6:4d:3a:d1:7b:ed:d8:c3:63:84:da:e8:d3:b8:38:
                    9e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:44:A4:13:0B:44:EB:A7:23:82:E5:9A:5F:81:33:D0:DA:50:FC:7A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.104.0/22
                IPv6:
                  2804:3b78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266151

    Signature Algorithm: sha256WithRSAEncryption
         97:45:cf:9b:e7:fd:5c:7f:f2:5b:e5:51:99:8d:f2:21:7c:13:
         00:a6:b1:66:dc:55:55:0b:5a:e6:2d:d1:c6:cb:12:e6:82:d1:
         b9:fa:d1:9d:9a:3b:fe:35:79:ad:19:c7:c6:8b:52:10:54:26:
         2d:11:70:c5:aa:e5:d1:6d:33:66:33:8b:6d:f2:9d:fb:2a:39:
         05:4d:b5:19:58:7a:86:1b:b9:e3:8f:5c:7f:bd:6d:b3:94:13:
         3c:8d:c5:7e:de:c9:75:a2:b9:53:d5:04:be:05:3e:9e:71:92:
         78:8b:5c:3f:8c:65:d5:a6:8b:39:33:e3:89:3c:77:2c:5d:da:
         22:7c:f7:02:2a:dc:9b:40:9e:d6:66:2d:c8:65:e6:28:9c:9d:
         5a:e5:82:95:88:1d:c7:98:2e:b3:8a:af:e8:df:f3:13:20:e8:
         56:74:c9:0d:3d:c7:bf:9c:ed:e4:cd:82:33:3f:47:a0:9d:b2:
         d5:d3:a7:32:07:b5:5c:af:1b:d8:ff:8e:7b:e6:e9:67:51:3f:
         ee:26:49:f1:97:d2:7c:cd:d9:00:79:53:4e:a8:3a:73:ce:32:
         a3:61:5c:1d:65:07:fe:6a:16:89:50:04:4b:22:f7:5f:f8:cf:
         ea:52:da:9a:a3:07:4a:4f:e7:34:11:87:36:1b:eb:79:3f:7d:
         21:bf:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 09:39:47 2024 by rpki-client on console-ams.rpki-client.org