Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.cer
File:                     82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.cer (raw, json)
Hash identifier:          R/Qi90E+gGSIvikKXjLiJVSPGB9liMGdj6VRNkIs9uQ=
Subject key identifier:   82:AA:2A:44:58:71:43:03:9E:CC:7B:4D:4C:30:99:B1:E3:FA:EB:64
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       69F99F010891AAF0F7D74B611DF61147D1981D89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Oct 2024 23:40:37 +0000
Certificate not after:    Fri 10 Oct 2025 23:45:37 +0000
Subordinate resources:    AS: 262447
                          IP: 177.54.16.0/20
                          IP: 2804:488::/32

Validation:               Failed, certificate revoked on Sun 03 Nov 2024 06:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f9:9f:01:08:91:aa:f0:f7:d7:4b:61:1d:f6:11:47:d1:98:1d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 11 23:40:37 2024 GMT
            Not After : Oct 10 23:45:37 2025 GMT
        Subject: CN=82AA2A44587143039ECC7B4D4C3099B1E3FAEB64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:4c:a6:8d:3b:bc:34:cd:f5:42:90:fe:8e:
                    d0:33:6f:99:5c:ae:7b:91:82:19:aa:26:0b:0c:a0:
                    a8:1b:4e:de:4a:9e:4e:18:f1:8b:f4:e6:da:b6:7c:
                    ad:93:ca:c5:3c:14:64:a6:4f:50:7f:1b:80:ae:80:
                    22:51:e9:f0:8d:c4:39:40:b7:fd:dd:33:33:22:9f:
                    67:6f:c6:71:15:0d:a2:21:2c:99:b1:e6:7b:44:2e:
                    2f:ea:76:1b:33:56:7a:fe:d1:de:79:ee:6d:43:cf:
                    88:ec:2f:65:32:23:e8:25:a8:ed:15:86:5e:21:4f:
                    43:2d:64:43:95:20:0d:17:e5:f7:39:f6:15:18:57:
                    f3:e5:85:16:01:89:3d:4e:62:82:35:c8:d2:0b:07:
                    b6:78:1a:51:99:6e:10:f7:7a:72:d9:64:4f:12:d3:
                    e0:c8:63:71:32:4e:38:ab:d7:fc:d2:dc:68:e5:19:
                    e4:c0:53:51:a3:a4:7b:ec:28:15:91:cd:cf:d0:e9:
                    62:8b:98:67:77:0b:01:65:67:2a:91:a1:8b:61:34:
                    c1:3d:dd:cc:46:88:d8:46:ca:a3:56:ba:02:29:56:
                    d9:f2:3c:82:79:d2:a2:f0:4e:71:3c:61:02:45:88:
                    5d:84:4c:7c:fb:2e:26:d3:c8:74:f2:ee:22:a8:8e:
                    b3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:AA:2A:44:58:71:43:03:9E:CC:7B:4D:4C:30:99:B1:E3:FA:EB:64
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/82AA2A44587143039ECC7B4D4C3099B1E3FAEB64.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.16.0/20
                IPv6:
                  2804:488::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262447

    Signature Algorithm: sha256WithRSAEncryption
         d3:85:c0:3d:f7:c3:95:72:b2:cd:e5:29:4a:f4:1d:39:14:ce:
         8f:6f:a3:21:fb:14:e6:9d:c8:1c:8e:ae:ab:4b:9b:ba:fc:01:
         43:bf:36:7f:99:3a:60:9e:ae:64:dc:9b:ae:6d:cb:d1:28:3c:
         6d:6b:c5:bf:12:ec:da:4c:c0:3e:63:13:2f:20:f4:cf:e7:84:
         4b:a2:a3:68:36:e9:0f:8f:00:1d:28:5b:2f:b9:38:41:f8:ef:
         1f:44:26:05:3a:92:c7:ce:ea:fb:a4:40:c7:8e:3c:95:4f:10:
         19:d7:c9:12:36:13:a6:09:79:01:47:6b:d9:c0:e3:7a:14:7f:
         1a:14:41:30:fb:5d:07:04:e4:a3:e7:ba:af:20:4a:f2:e3:86:
         2d:16:db:b3:48:77:89:bb:91:77:ed:07:58:31:a4:43:08:6b:
         0a:51:14:0c:6d:0b:9e:b5:d5:c6:2d:8b:67:14:d4:7f:c5:6f:
         38:bb:dd:0a:5f:ba:b8:0d:c4:0c:2e:1a:2f:66:45:92:ed:f9:
         8e:a9:1c:a8:dc:33:bb:8f:98:f5:d8:d4:3e:d5:a7:61:bf:0a:
         35:30:86:29:5b:f3:fb:48:3e:a6:d0:d6:cc:73:de:64:f1:4c:
         c0:f6:66:0b:8b:05:bf:32:1f:a6:1c:8e:c1:12:10:43:90:0f:
         97:bc:3f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 09:10:18 2024 by rpki-client on console-ams.rpki-client.org