Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/814C6B153820C8660A1EE837464B8AB9BE2B7DC3.cer
File:                     814C6B153820C8660A1EE837464B8AB9BE2B7DC3.cer (raw, json)
Hash identifier:          yzWUJpuGKPPxd5emEjc0PpvHADuCfW5b/JY7K8QVV7M=
Subject key identifier:   81:4C:6B:15:38:20:C8:66:0A:1E:E8:37:46:4B:8A:B9:BE:2B:7D:C3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       189A5A3E84A8724F21C4052866C4EBF31072782A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/814C6B153820C8660A1EE837464B8AB9BE2B7DC3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Sep 2024 20:17:48 +0000
Certificate not after:    Tue 23 Sep 2025 20:22:48 +0000
Subordinate resources:    AS: 270274
                          IP: 200.124.84.0/22
                          IP: 2804:6980::/32

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 20:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9a:5a:3e:84:a8:72:4f:21:c4:05:28:66:c4:eb:f3:10:72:78:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 24 20:17:48 2024 GMT
            Not After : Sep 23 20:22:48 2025 GMT
        Subject: CN=814C6B153820C8660A1EE837464B8AB9BE2B7DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ec:e8:57:95:06:46:76:fb:8f:97:43:93:07:
                    26:4a:cc:07:0e:bd:8b:b3:a9:95:fa:a8:f0:58:d6:
                    da:97:66:43:ef:ce:ff:80:3f:83:62:de:aa:d0:46:
                    e5:7c:bd:de:4a:f2:f4:c7:57:ee:8a:4c:01:eb:73:
                    c0:a3:2a:24:47:f7:d6:e0:b1:00:38:3d:77:18:ba:
                    f1:cd:02:0f:a6:b2:5e:f1:58:07:f6:7d:e4:13:bb:
                    20:ce:2b:f8:fa:0e:b8:ad:45:55:e9:30:28:16:21:
                    a4:8d:c9:3f:8a:70:64:1b:68:86:2d:c2:53:11:74:
                    f0:bc:ca:04:72:2c:76:44:32:00:bb:0d:22:d0:4e:
                    5e:52:13:d3:1a:21:71:2b:4c:2b:6b:44:ac:24:05:
                    da:e3:53:e4:1e:75:b4:8d:21:93:14:1e:a0:52:e0:
                    3b:c4:0c:42:bc:53:62:da:a3:37:f1:34:66:e6:a3:
                    6e:07:04:89:49:b3:ae:a0:6a:fd:c6:e5:1c:78:f6:
                    f9:40:fa:2a:70:42:bf:ee:84:e9:5d:c9:48:53:07:
                    60:02:e9:a8:45:64:23:b3:ff:32:04:d5:eb:88:65:
                    b0:f9:57:ab:d8:32:e9:99:b3:51:e8:7d:05:60:40:
                    d0:e5:52:12:a8:1d:3e:d9:4e:80:5a:a1:73:28:c4:
                    37:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:4C:6B:15:38:20:C8:66:0A:1E:E8:37:46:4B:8A:B9:BE:2B:7D:C3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/814C6B153820C8660A1EE837464B8AB9BE2B7DC3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.84.0/22
                IPv6:
                  2804:6980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270274

    Signature Algorithm: sha256WithRSAEncryption
         3e:60:1e:c1:11:75:87:e2:a5:fc:36:fe:06:0d:f5:cb:d0:28:
         1a:6c:d2:1c:1d:cd:2a:66:4b:29:99:04:3c:9f:28:08:4c:4a:
         4d:f7:b1:c9:20:ae:b0:d3:cf:a5:32:bb:18:53:5e:90:8d:2a:
         93:c4:0d:af:45:7b:3a:bc:94:e2:d0:dc:b5:30:a3:16:bb:8b:
         83:13:9d:a0:de:77:05:8b:71:34:42:9e:25:eb:23:99:97:79:
         68:40:7c:de:d0:1c:a9:de:09:5f:6a:e9:fc:be:65:b0:e8:44:
         55:43:98:da:0c:50:80:c9:13:bc:f6:57:72:62:2c:4c:a6:c8:
         0d:a7:dd:f9:54:14:4e:e2:ce:2d:b3:89:89:d3:95:8c:f6:f1:
         22:6e:5d:1c:2a:88:a4:38:3a:96:25:de:2b:a5:a2:11:f9:d7:
         03:06:11:39:68:2d:4d:b5:97:15:aa:24:57:c9:cb:64:51:8f:
         25:db:69:b5:bb:81:bf:17:50:83:12:ed:23:0d:ee:ae:a0:33:
         8a:3f:03:90:f2:95:db:ee:f3:e4:b3:2c:20:c2:78:07:e3:56:
         34:f8:54:d5:42:c6:21:af:d9:30:1d:4a:63:69:37:a2:5c:92:
         df:69:9e:51:2d:37:ba:b7:d5:73:d2:86:ff:c7:13:3a:48:d2:
         0f:f9:e5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:59:01 2024 by rpki-client on console-fra.rpki-client.org