Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/898859FBCDF505522D04699B7BFFC51B18DA4F2C.cer
File:                     898859FBCDF505522D04699B7BFFC51B18DA4F2C.cer (raw, json)
Hash identifier:          S1KXupPzIEALngm1zgf+wWgeowi4+39H3kJmI7EidNk=
Subject key identifier:   89:88:59:FB:CD:F5:05:52:2D:04:69:9B:7B:FF:C5:1B:18:DA:4F:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       35BE264CA245155398776B3190DCAA86778B75AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/1/898859FBCDF505522D04699B7BFFC51B18DA4F2C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:59:47 +0000
Certificate not after:    Thu 03 Apr 2025 11:04:47 +0000
Subordinate resources:    AS: 270548
                          IP: 190.115.68.0/22
                          IP: 2804:6dac::/32

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 23:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:be:26:4c:a2:45:15:53:98:77:6b:31:90:dc:aa:86:77:8b:75:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:59:47 2024 GMT
            Not After : Apr  3 11:04:47 2025 GMT
        Subject: CN=898859FBCDF505522D04699B7BFFC51B18DA4F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:79:92:61:30:72:15:cd:4b:ce:e8:17:13:
                    8a:f4:e5:32:32:f5:ed:d2:80:69:8d:9b:a7:d9:98:
                    ab:47:25:94:7a:d3:90:0c:c0:97:4d:80:99:f1:8f:
                    42:f6:b9:59:2f:b7:bf:ce:45:85:d0:20:9d:7b:ee:
                    3b:6e:34:26:dd:02:9d:d0:06:7d:df:35:01:3b:4c:
                    cd:f5:27:b7:81:e7:e4:95:0a:c1:f5:fd:64:09:da:
                    0b:98:fb:96:4a:aa:de:ae:ee:a1:40:40:8b:72:48:
                    67:ad:33:f4:90:cd:f4:5b:b6:c0:b4:3e:da:89:87:
                    3d:2e:5a:d4:5d:5b:15:ec:e9:3b:21:b5:55:16:6e:
                    58:f5:13:33:42:6a:1c:a8:28:55:30:04:71:24:3c:
                    08:b7:b3:75:3e:18:b7:5c:56:c3:90:78:88:34:13:
                    57:c2:3e:2f:6d:de:cf:27:b0:f8:8e:2c:f1:a7:80:
                    55:86:26:8a:62:a9:f0:3e:26:ef:2d:b4:e7:9d:15:
                    9e:00:2f:f8:9a:2a:b8:63:bf:a6:6a:4b:92:79:d2:
                    6e:34:3f:41:42:ea:f7:0d:f6:a1:79:19:6a:53:79:
                    66:fc:ce:e7:63:7b:f8:de:a0:55:21:ff:53:82:72:
                    b2:a5:40:1a:95:f4:57:73:84:99:28:22:19:e9:7e:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:88:59:FB:CD:F5:05:52:2D:04:69:9B:7B:FF:C5:1B:18:DA:4F:2C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/1/898859FBCDF505522D04699B7BFFC51B18DA4F2C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.68.0/22
                IPv6:
                  2804:6dac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270548

    Signature Algorithm: sha256WithRSAEncryption
         74:6b:5a:76:b4:a0:bf:6a:f3:04:a2:9f:d4:ea:af:4e:64:3c:
         55:c5:18:85:03:3a:d6:e1:62:35:c2:78:ce:7b:fe:93:7b:7f:
         fb:16:dd:03:5f:e1:16:39:fc:5e:f3:75:8f:f7:22:07:5e:65:
         8f:8f:e7:0a:ec:dc:1c:7b:50:6c:14:de:f6:07:90:1f:fd:d3:
         a9:9b:a1:e3:fe:6f:6d:ff:eb:69:60:fa:2b:e4:50:82:ea:1d:
         94:dd:f0:55:8c:1e:11:e2:88:57:48:f1:61:33:3b:3a:79:e4:
         a8:1d:6a:7b:b8:1b:8d:28:dd:0f:7b:5b:d7:7f:b9:27:e4:54:
         74:db:bb:1b:66:aa:bb:c7:db:ad:9c:72:a2:7e:37:ca:90:97:
         4f:73:32:36:5d:b0:f8:f3:72:2e:c4:c5:4f:da:8f:75:fc:d8:
         73:61:29:3c:09:a8:21:c7:51:44:34:f7:14:04:dd:cd:f4:68:
         bf:cc:50:bc:96:61:77:20:e9:56:4a:69:0b:43:92:8b:58:16:
         d5:02:b1:8f:45:3f:91:c8:81:fb:37:f4:75:b3:4b:7a:83:b4:
         6d:62:42:77:2f:36:4d:fc:3b:aa:7d:60:42:dd:4e:ae:c3:2b:
         a7:40:6d:ce:ca:4c:23:d0:20:e2:d8:4f:eb:9f:8f:2f:27:6b:
         1b:77:d1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 01:31:57 2024 by rpki-client on console-ams.rpki-client.org