Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/85D0AE05227D56565003824049A1D38AF3AE2B67.cer
File:                     85D0AE05227D56565003824049A1D38AF3AE2B67.cer (raw, json)
Hash identifier:          B6i/09E5yyCw0wLKWiS8oULERTzKJSzOAxFg/6ILsYY=
Subject key identifier:   85:D0:AE:05:22:7D:56:56:50:03:82:40:49:A1:D3:8A:F3:AE:2B:67
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3586DC6847F743E75582D05622F9DD03F8D5A4BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/85D0AE05227D56565003824049A1D38AF3AE2B67.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jun 2024 20:54:05 +0000
Certificate not after:    Thu 12 Jun 2025 20:59:05 +0000
Subordinate resources:    AS: 268374
                          IP: 45.239.24.0/22
                          IP: 2804:5030::/32

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 17:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:86:dc:68:47:f7:43:e7:55:82:d0:56:22:f9:dd:03:f8:d5:a4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 13 20:54:05 2024 GMT
            Not After : Jun 12 20:59:05 2025 GMT
        Subject: CN=85D0AE05227D56565003824049A1D38AF3AE2B67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:df:70:33:df:75:16:ad:39:5b:71:03:f1:
                    02:41:1c:6d:4c:82:95:b3:52:f0:53:ea:89:25:af:
                    f8:a9:7c:d6:86:2b:f7:01:a6:b5:00:7e:a3:e2:fb:
                    e3:a2:1a:d1:3d:1a:d6:bc:c6:21:d9:f4:b0:cf:62:
                    38:59:66:4e:f2:b3:81:e9:8d:a5:08:d9:34:b7:42:
                    92:d2:5e:ec:b5:fd:eb:ce:bf:81:ed:dd:a6:9d:51:
                    ef:99:af:43:f5:9b:c8:85:46:0a:3c:fa:c0:11:24:
                    90:1f:a5:c0:1e:f7:2f:bd:db:70:0b:f4:95:1a:00:
                    1f:78:6d:95:35:5f:06:73:68:fa:a6:cf:8e:cb:76:
                    d7:ac:48:3a:9e:a4:f0:69:5b:77:0c:b5:29:c1:06:
                    a1:94:47:91:3b:f8:0c:ea:77:49:41:a2:ad:70:5b:
                    a0:87:d8:8a:2d:76:35:3f:4d:3d:e5:f5:28:74:76:
                    f1:71:85:9b:36:f2:24:c4:ed:b5:16:de:de:bf:26:
                    70:cc:eb:fd:4d:42:5e:ba:c6:2d:72:de:7b:b6:30:
                    50:63:81:c1:95:82:35:e3:e0:75:ed:16:c5:70:b8:
                    71:9e:0f:e7:f5:e9:ba:2b:2c:c0:f0:bc:a4:24:75:
                    b0:14:c9:05:5e:98:ee:f5:5a:22:19:21:02:5f:5c:
                    5a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:D0:AE:05:22:7D:56:56:50:03:82:40:49:A1:D3:8A:F3:AE:2B:67
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/85D0AE05227D56565003824049A1D38AF3AE2B67.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.24.0/22
                IPv6:
                  2804:5030::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268374

    Signature Algorithm: sha256WithRSAEncryption
         03:6e:d6:70:f0:bb:96:80:69:44:11:c3:e9:79:b3:0f:5e:c0:
         94:b1:85:cc:7b:c5:7c:32:15:08:a0:06:34:7d:53:7e:8e:05:
         99:19:dc:5e:61:2b:98:5f:90:a7:bf:61:24:26:fa:b2:c5:d2:
         70:dc:8d:8b:24:41:c5:4f:4e:39:1c:6c:c9:a7:8d:47:65:40:
         85:4a:d9:42:bb:47:01:2e:fb:ed:79:6a:be:e2:d1:05:9e:82:
         34:4f:bf:72:a6:e2:14:24:b8:45:b2:a6:7f:88:9d:f1:74:86:
         92:86:1f:8b:06:45:22:ec:07:1b:77:bc:45:a3:82:80:a6:42:
         aa:3a:92:77:28:2f:af:fe:b1:db:c7:a0:f2:56:4f:46:8f:6a:
         71:41:22:22:85:de:71:81:e2:84:ec:03:8e:0f:c8:6e:0f:49:
         91:00:c8:85:57:c7:35:f4:50:a0:31:17:e9:ef:92:c0:21:26:
         cb:d4:a3:28:5f:a3:d3:8b:46:ee:3e:45:0e:6f:74:1e:fb:94:
         d4:46:21:ed:97:66:0d:fb:6a:8a:31:cd:12:1e:04:d4:42:61:
         92:4a:69:74:a0:40:4e:11:b2:98:5f:21:20:23:e2:07:71:8a:
         60:f5:c5:15:04:b7:aa:70:d3:92:9f:60:0a:37:73:9b:60:ba:
         84:5a:19:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:43:12 2024 by rpki-client on console-fra.rpki-client.org