Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/85DDFF880A3FB4B062137E733971D4BE2C00760C.cer
File:                     85DDFF880A3FB4B062137E733971D4BE2C00760C.cer (raw, json)
Hash identifier:          mj1QB5JCJp1bENF/Wzb3/9dUatsLFPdGp7bEV1AY65A=
Subject key identifier:   85:DD:FF:88:0A:3F:B4:B0:62:13:7E:73:39:71:D4:BE:2C:00:76:0C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       76BECA49D453B79064C10584710A1686DB4318EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/85DDFF880A3FB4B062137E733971D4BE2C00760C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Jul 2024 00:11:54 +0000
Certificate not after:    Fri 11 Jul 2025 00:16:54 +0000
Subordinate resources:    AS: 268091
                          IP: 45.169.24.0/22
                          IP: 2804:57dc::/32

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 11:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:be:ca:49:d4:53:b7:90:64:c1:05:84:71:0a:16:86:db:43:18:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 12 00:11:54 2024 GMT
            Not After : Jul 11 00:16:54 2025 GMT
        Subject: CN=85DDFF880A3FB4B062137E733971D4BE2C00760C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:5d:4c:45:28:fe:86:b2:2e:ad:45:65:81:
                    f0:13:7f:e7:fa:be:9c:4b:d1:2c:42:0b:16:ba:15:
                    12:1d:ee:6b:e1:5f:28:39:13:93:d9:f8:8f:42:da:
                    b6:07:aa:44:e7:2a:30:19:9f:f9:18:ee:83:e9:96:
                    fa:8e:91:9c:0c:e7:1c:bd:d0:47:47:fc:3e:82:53:
                    0e:e3:93:e1:a5:e0:77:69:6e:9d:72:f1:fc:b7:51:
                    f4:62:6a:c6:bb:85:09:46:24:23:0d:42:75:10:b4:
                    61:9c:f5:f2:ca:00:47:1a:e5:35:78:b1:b9:92:42:
                    a2:f5:c5:a1:25:e5:31:3d:0c:0f:d2:bd:4b:cc:9b:
                    7b:c5:03:7b:8d:91:8e:47:42:6c:73:4d:72:fa:25:
                    c6:1b:a0:25:48:73:e6:3a:8a:13:ce:d4:86:04:54:
                    07:38:e0:24:38:71:2c:bb:b3:88:3d:e3:87:0b:c5:
                    2d:8f:ff:32:71:06:96:63:c4:7d:5b:66:af:8c:7d:
                    4e:b9:4d:97:95:e6:68:13:69:62:0d:29:59:de:07:
                    ec:83:3a:81:d9:2d:00:69:30:18:2b:50:71:9b:06:
                    1b:cf:d3:19:b8:d2:83:a9:fa:7d:c5:97:3d:bf:b4:
                    aa:58:31:ff:27:0b:a0:b3:89:e7:0d:dc:ea:12:c5:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:DD:FF:88:0A:3F:B4:B0:62:13:7E:73:39:71:D4:BE:2C:00:76:0C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/85DDFF880A3FB4B062137E733971D4BE2C00760C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.24.0/22
                IPv6:
                  2804:57dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268091

    Signature Algorithm: sha256WithRSAEncryption
         29:47:2c:72:62:6c:5e:63:c5:5a:5f:c0:43:e8:e3:0e:ec:ec:
         c5:99:b6:e1:39:ca:96:17:7e:d8:72:a2:4c:66:9c:11:08:51:
         54:8c:a8:cd:8a:ec:be:7a:88:88:61:29:af:a8:a2:d4:73:dc:
         8c:bd:d2:c7:c5:7c:d9:e7:98:3e:78:ba:2c:30:6b:c6:c3:fb:
         d5:f9:0c:a1:2f:77:49:fa:9e:b1:8e:8f:d0:d6:51:5c:e5:a4:
         89:81:25:e9:21:f0:c3:40:a9:d8:09:4d:0c:c7:94:41:4d:ce:
         f5:57:fd:d2:19:77:e8:01:e0:47:c5:96:7d:80:44:90:2e:8c:
         41:4d:13:1f:70:97:50:71:fc:8f:c7:34:ef:c0:06:1d:da:87:
         d5:95:b4:ba:5e:28:39:fa:14:7b:c8:68:ee:ea:1d:0c:46:ab:
         9c:2a:de:e4:78:c2:bb:a8:d2:7c:23:cf:19:b6:7c:3c:f3:73:
         3f:f1:f3:62:0c:11:7d:41:61:74:94:a8:5f:69:1b:96:92:1f:
         16:3e:4d:63:d1:cb:90:d1:ac:23:45:6f:7a:1a:7e:22:3b:b5:
         44:b5:e3:5c:48:e8:74:cd:4b:81:cc:97:7e:c7:70:8e:4f:fc:
         84:d5:f2:fa:98:5e:11:91:f0:7a:e3:45:ec:e6:55:f0:dd:0c:
         d2:ad:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 14:36:52 2024 by rpki-client on console-fra.rpki-client.org