Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CC9540166EC287505A5559227CBD46E2F3EC666.cer
File:                     7CC9540166EC287505A5559227CBD46E2F3EC666.cer (raw, json)
Hash identifier:          4hdzlRxClYxwHXuHPeHBD89/0rvIyE/iy0oqIlrFYcE=
Subject key identifier:   7C:C9:54:01:66:EC:28:75:05:A5:55:92:27:CB:D4:6E:2F:3E:C6:66
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3625439A0E7979181C382DC669F08F691AFE8D74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/7CC9540166EC287505A5559227CBD46E2F3EC666.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Jul 2024 14:51:23 +0000
Certificate not after:    Mon 14 Jul 2025 14:56:23 +0000
Subordinate resources:    AS: 270426
                          IP: 190.111.140.0/22
                          IP: 2804:6bcc::/32

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 11:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:25:43:9a:0e:79:79:18:1c:38:2d:c6:69:f0:8f:69:1a:fe:8d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 15 14:51:23 2024 GMT
            Not After : Jul 14 14:56:23 2025 GMT
        Subject: CN=7CC9540166EC287505A5559227CBD46E2F3EC666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:33:51:f9:86:39:a2:97:0e:0f:8b:58:96:3d:
                    6b:ba:ac:49:f5:c6:dd:b9:7a:0d:c9:4b:69:93:78:
                    d8:3f:07:b3:e9:0a:37:de:dc:be:bf:a3:0b:57:ae:
                    05:41:d2:fd:29:0f:62:cb:7a:34:08:0e:23:66:96:
                    23:f8:ff:1c:e7:10:39:8f:f1:d1:3f:c8:59:22:0d:
                    90:49:50:84:23:2d:90:46:4b:7d:c5:43:0a:aa:5a:
                    fa:4f:cd:b3:4f:76:8c:f6:26:75:15:ed:97:bd:cc:
                    f2:f9:60:34:1f:eb:f7:77:4f:92:15:2d:d7:7d:a7:
                    73:1a:d8:7b:2d:76:50:ab:59:56:78:50:e2:68:6b:
                    6c:0f:4e:a6:13:50:e2:66:32:28:b1:c3:5d:fd:be:
                    07:b1:eb:81:95:28:1a:4a:66:c1:42:7b:b2:7d:8c:
                    ad:f2:35:0d:95:1f:98:ca:01:ff:10:f8:a3:b7:8a:
                    4c:0f:76:09:5c:50:88:44:60:56:39:4b:1b:5f:79:
                    5d:92:e3:70:07:4a:48:74:44:cf:9a:f1:f1:14:df:
                    67:75:64:3e:a8:63:b9:d9:23:dc:6b:01:ce:6b:21:
                    78:5f:42:62:f1:2e:be:de:e0:0d:0d:5b:91:50:79:
                    4f:f4:71:ec:74:b7:b3:21:a8:25:86:ef:9c:28:86:
                    08:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:C9:54:01:66:EC:28:75:05:A5:55:92:27:CB:D4:6E:2F:3E:C6:66
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/7CC9540166EC287505A5559227CBD46E2F3EC666.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.140.0/22
                IPv6:
                  2804:6bcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270426

    Signature Algorithm: sha256WithRSAEncryption
         43:22:1e:6b:aa:5e:78:d5:a6:81:46:24:b1:e2:49:f4:34:67:
         5c:3c:ff:59:9f:94:d4:7f:d1:15:ee:b3:43:15:ea:2e:9e:6a:
         72:69:97:c4:49:a9:25:b6:5c:b5:c2:cf:80:39:1a:a2:b5:a3:
         e1:a4:41:06:ff:dd:ab:09:51:e1:52:45:fb:03:81:d0:ad:2b:
         8d:0c:bb:04:cd:12:5a:90:9d:2a:bd:18:6a:e2:08:f9:58:de:
         4a:6e:04:af:d9:45:6b:8b:53:3b:85:43:2a:4c:0c:00:bc:ff:
         d0:09:1e:59:80:06:0b:e6:a1:d7:27:d4:15:b2:d7:fb:c9:1f:
         ec:06:97:04:08:4d:88:ea:b2:4d:3f:b1:6b:4c:65:29:36:00:
         7d:d1:45:08:84:fd:b2:5f:55:55:62:72:87:e5:a0:3a:e8:35:
         c9:20:9e:e9:43:67:ee:10:3f:b0:3d:53:72:a7:79:61:da:7e:
         a8:2a:1e:a6:58:ed:f4:a9:8f:c4:14:be:00:20:ed:84:e2:47:
         d5:d9:d0:2c:e4:68:d6:24:a0:01:08:5e:a3:70:6d:64:8b:f9:
         27:bc:83:e3:2e:46:4d:9b:0f:19:c3:20:8d:17:62:fe:d9:7f:
         f7:18:c2:eb:27:56:3d:ac:68:9a:83:e1:d0:e5:b7:1c:ca:fa:
         cc:67:a5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:11 2024 by rpki-client on console-ams.rpki-client.org