Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/84555EA2A351023C03643DD4393917DFED046A48.cer
File:                     84555EA2A351023C03643DD4393917DFED046A48.cer (raw, json)
Hash identifier:          VvCG4JZHqD2Wox7nADZm0KwZzdMpvGKHOYprREEFyfs=
Subject key identifier:   84:55:5E:A2:A3:51:02:3C:03:64:3D:D4:39:39:17:DF:ED:04:6A:48
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5EFD0EDAF085D76BF559F06442531EEC6BCECEF6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/1/84555EA2A351023C03643DD4393917DFED046A48.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 17 Aug 2024 12:44:49 +0000
Certificate not after:    Sat 16 Aug 2025 12:49:49 +0000
Subordinate resources:    AS: 264211
                          IP: 138.99.164.0/22
                          IP: 2804:2444::/32

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 15:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fd:0e:da:f0:85:d7:6b:f5:59:f0:64:42:53:1e:ec:6b:ce:ce:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 17 12:44:49 2024 GMT
            Not After : Aug 16 12:49:49 2025 GMT
        Subject: CN=84555EA2A351023C03643DD4393917DFED046A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:76:47:83:18:53:82:b0:e0:c1:9a:c7:d4:
                    0b:8e:31:01:cf:6a:16:7e:4d:bf:de:fb:43:ba:a8:
                    5c:bf:08:ba:c4:e9:d3:88:d0:36:d3:38:f6:3a:c4:
                    96:19:59:c6:cf:f4:f8:ac:5c:b4:8c:cd:84:42:d2:
                    5b:c8:7b:fe:d5:ba:22:5c:38:c3:c0:b9:2e:55:a3:
                    e8:54:ab:41:59:84:75:8f:93:fa:8b:57:2a:52:d9:
                    cc:56:de:31:ad:3b:31:fb:de:d6:3f:81:36:38:3e:
                    ae:51:39:39:a3:9f:f3:5c:77:c4:61:3b:99:f1:4f:
                    b6:b7:cd:63:2d:67:c0:c6:2b:70:88:71:ff:b6:c5:
                    06:f5:46:7c:99:ba:d8:e2:86:c3:cd:28:b1:23:28:
                    e2:8d:a7:a7:97:16:6a:59:9c:0f:6d:40:7e:a5:89:
                    54:99:18:13:f9:04:6a:c3:d6:9b:3b:97:65:dc:56:
                    6c:d6:87:1a:30:41:23:66:e4:39:f3:4f:b0:5e:91:
                    b5:1b:09:fb:4f:0b:20:e8:fe:66:a1:21:00:c0:76:
                    63:1c:62:f4:20:a3:13:b2:70:2f:23:67:14:80:3d:
                    5d:88:71:34:8e:3a:57:6e:5a:77:7d:c2:19:b8:bc:
                    83:9e:b3:1d:57:46:1e:db:10:fe:f0:c6:ac:2f:76:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:55:5E:A2:A3:51:02:3C:03:64:3D:D4:39:39:17:DF:ED:04:6A:48
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/1/84555EA2A351023C03643DD4393917DFED046A48.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.164.0/22
                IPv6:
                  2804:2444::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264211

    Signature Algorithm: sha256WithRSAEncryption
         0a:5e:5a:2e:c1:4e:dd:f7:e1:f7:51:b3:d1:07:3a:99:51:1e:
         07:df:d1:16:1f:34:db:5a:93:8f:fc:37:96:08:46:4b:5c:f0:
         54:7e:b7:c3:66:13:6e:e3:65:d3:13:b5:16:46:58:69:00:86:
         c7:9d:b7:8a:89:d4:4a:a6:c5:b4:68:9a:fc:af:aa:4f:88:ee:
         19:cb:a4:bb:fc:e0:85:ce:a5:61:de:2e:22:15:86:32:3c:33:
         c6:73:89:11:c8:47:a2:df:3f:e4:09:2a:64:d5:f2:ab:f5:fa:
         ba:fc:8c:0a:02:68:7a:fa:b6:4b:2c:e7:73:05:5e:21:8e:87:
         ae:e4:f4:78:15:46:3e:ec:81:f2:d6:42:24:8b:b9:86:13:48:
         fb:65:65:33:be:7b:8f:0a:87:7d:71:c1:12:78:be:78:a0:e0:
         4f:b7:bb:6a:a0:ed:a4:21:8d:fe:d8:d6:60:54:d4:6c:20:93:
         68:5e:c2:b3:07:3f:b6:0e:7c:61:9e:d4:ad:08:88:ec:9a:5f:
         1d:5e:fd:62:6d:39:e9:9c:44:41:41:03:a6:f6:da:41:c9:8f:
         0e:68:cf:64:4b:d9:91:5c:ae:34:5d:4f:08:d8:a7:64:e1:74:
         f5:93:a1:4f:09:1c:41:aa:7d:76:c2:bc:fd:a1:bb:07:87:db:
         7c:7b:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 18:29:51 2024 by rpki-client on console-ams.rpki-client.org