Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer
File:                     7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer (raw, json)
Hash identifier:          0x9YAiGaVih4nDWygQp110+ptul4HEF7c+z2deC7jV8=
Subject key identifier:   79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       235965D63B4F0A4FD1AF070F97291DDC1602E208
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/7973A6F7D25B519ADA938A8C3A955ED8765A3404.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Sep 2024 17:34:17 +0000
Certificate not after:    Thu 04 Sep 2025 17:39:17 +0000
Subordinate resources:    AS: 263035
                          IP: 177.20.176.0/21
                          IP: 2804:a38::/32

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 16:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:59:65:d6:3b:4f:0a:4f:d1:af:07:0f:97:29:1d:dc:16:02:e2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  5 17:34:17 2024 GMT
            Not After : Sep  4 17:39:17 2025 GMT
        Subject: CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3d:62:63:66:3d:6d:7a:b7:d1:05:fd:87:7e:
                    30:fc:ee:3e:34:34:15:ea:2c:89:4d:77:41:24:25:
                    05:f3:cb:61:b3:40:6b:5f:56:1e:e4:0d:fa:ef:ab:
                    c9:52:27:c9:4d:ca:7e:a6:ce:97:b6:0f:a2:aa:65:
                    5f:27:09:b2:99:15:10:9d:8c:0a:e3:bf:96:c6:be:
                    69:bc:58:7d:fb:15:5f:a0:5b:e4:e8:0a:c2:7c:82:
                    93:98:d8:73:24:ed:42:af:25:b7:a8:a9:ca:f3:38:
                    60:6e:b2:7f:25:70:2c:60:8c:92:71:d6:aa:25:a7:
                    d9:22:33:98:f7:41:a8:91:b3:7d:1c:80:ed:60:4f:
                    7d:22:09:1f:50:90:90:78:d1:bf:8d:73:62:55:52:
                    33:44:9b:8e:15:14:c7:a9:77:0b:0e:54:4d:28:02:
                    8e:97:4f:5d:08:ef:41:96:5e:d8:11:e3:42:d1:67:
                    35:40:dc:19:e6:3a:76:6e:13:fe:45:7a:f7:f6:0c:
                    64:ce:23:3e:e4:d1:2f:63:ff:45:ac:96:db:dd:5f:
                    22:06:54:f4:ac:0b:d6:96:12:dc:20:66:2a:09:ef:
                    b2:39:5d:9c:25:e2:c7:d2:fd:9b:c8:a5:f3:e0:ba:
                    4d:25:ca:a3:54:b2:b1:93:6d:3d:b4:bb:90:98:96:
                    fa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/7973A6F7D25B519ADA938A8C3A955ED8765A3404.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.176.0/21
                IPv6:
                  2804:a38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263035

    Signature Algorithm: sha256WithRSAEncryption
         1a:5e:cd:36:08:f8:9a:a7:c3:94:df:d0:ba:aa:39:08:3e:76:
         86:a3:72:c2:37:b3:21:8e:b7:9b:91:76:b9:1e:f3:13:3a:6f:
         75:39:63:96:90:6e:62:5a:94:27:a0:6f:2d:88:b9:f2:64:18:
         fc:6d:c2:c1:6b:89:69:66:03:a5:0e:eb:6c:e1:3a:84:f3:f0:
         8f:5d:52:59:8f:9a:4e:cd:78:7d:38:45:de:80:fa:1d:fb:06:
         b5:99:e0:68:7e:09:9a:b5:ef:16:ff:c5:de:59:35:58:ee:c4:
         2f:b0:56:6f:fb:68:8d:06:7c:8e:98:60:a5:26:4a:7d:60:53:
         16:67:fb:bd:5a:5f:41:10:bc:00:9c:1f:8b:1a:3a:45:d4:7b:
         79:ec:c2:8e:48:16:6e:e8:89:a7:a2:1d:5e:38:b9:4b:d0:67:
         67:e8:26:1a:54:77:b8:f3:3a:14:16:c7:74:2c:7a:b1:5e:33:
         70:42:bd:c2:2a:3a:00:84:88:74:31:21:35:3c:26:9b:4b:75:
         d4:1c:ec:b1:fd:6b:bd:29:8a:85:01:c5:6c:8e:6c:13:50:40:
         38:69:27:98:d0:03:11:bd:80:83:f7:74:22:76:56:c1:ab:a1:
         d3:a1:b5:7b:4a:04:63:45:69:84:4b:0e:9f:ea:95:fb:9c:b5:
         50:a8:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:35:09 2024 by rpki-client on console-ams.rpki-client.org