Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663.cer
File:                     942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663.cer (raw, json)
Hash identifier:          D+Xw+wc5oa0cHGJHzuEQupsgHRA1tnMdwSxZ0F43pNE=
Subject key identifier:   94:2A:D0:AA:1A:2F:AD:0F:14:46:F7:93:06:49:E8:CF:DE:8F:F6:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       44B912D5B3A54C3341A40667C36963C4139A9B7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/1/942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 20:09:47 +0000
Certificate not after:    Thu 03 Apr 2025 20:14:47 +0000
Subordinate resources:    AS: 267296
                          IP: 45.233.76.0/22
                          IP: 2804:4b4c::/32

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 12:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b9:12:d5:b3:a5:4c:33:41:a4:06:67:c3:69:63:c4:13:9a:9b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 20:09:47 2024 GMT
            Not After : Apr  3 20:14:47 2025 GMT
        Subject: CN=942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:58:52:1f:ac:ca:de:25:e7:3d:4c:d2:15:
                    cf:73:5c:58:71:9e:ed:5d:51:9a:12:1f:ad:4f:1a:
                    53:98:90:a9:b5:be:1a:08:84:17:e8:d8:b0:72:99:
                    e1:da:0a:32:02:b4:f2:82:c5:ea:2b:95:b1:59:10:
                    48:17:cd:cd:56:89:b8:bd:bf:02:f9:83:09:a2:ba:
                    4d:ae:c8:98:d3:55:74:74:3b:12:ed:54:bf:01:f4:
                    88:8c:33:36:d6:db:15:47:98:94:d5:8b:6a:aa:39:
                    b8:da:94:b9:78:0c:7f:66:10:9d:9f:6d:ab:45:04:
                    3a:4b:19:79:65:d1:06:2b:b8:77:d8:f3:62:d4:f4:
                    bd:f5:4c:02:61:52:17:2a:6a:3f:d8:36:fb:04:b2:
                    52:c9:a0:2d:7c:4e:cd:bf:d8:a7:c8:83:a2:76:7a:
                    32:9e:f4:a5:0a:c6:5a:02:e4:28:fc:37:5c:fb:4f:
                    bd:66:61:a8:83:92:67:ae:d5:6e:98:75:44:d2:3f:
                    51:eb:2c:3e:b3:56:63:3d:53:42:7c:28:71:af:03:
                    be:d4:e5:52:14:96:77:db:d4:d3:79:f9:e5:4a:03:
                    9c:b5:60:a1:da:c2:c0:b2:d6:05:63:a3:39:de:c7:
                    c9:a6:41:e1:31:23:df:16:4b:0a:9b:da:fa:ba:a0:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:2A:D0:AA:1A:2F:AD:0F:14:46:F7:93:06:49:E8:CF:DE:8F:F6:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/1/942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.76.0/22
                IPv6:
                  2804:4b4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267296

    Signature Algorithm: sha256WithRSAEncryption
         1e:04:9e:74:e2:59:7e:fd:03:c2:f8:cb:6a:d5:72:e4:52:be:
         4c:09:37:ab:6f:c0:9f:44:bb:7b:c4:be:35:3d:d1:8c:f6:fc:
         63:c7:8d:db:e4:55:d6:6f:45:a9:33:46:3c:e2:35:4b:4d:f0:
         11:a8:74:36:17:b0:ef:12:b7:11:9b:c0:6e:f4:33:1c:f1:c6:
         18:63:ae:7f:82:7d:6c:02:2b:fc:c5:30:0a:c8:d9:1b:2e:84:
         56:14:b8:e7:49:fd:6e:0b:d1:2b:7a:d6:12:0e:52:79:cf:37:
         fd:d3:ef:05:63:ce:89:4c:ee:78:d0:83:0f:cb:50:56:89:a1:
         3e:48:e7:fa:9c:d4:af:8d:2b:a3:40:3d:59:fc:42:73:69:7e:
         db:d4:6e:78:7b:d0:99:e4:2e:40:a4:76:2b:06:25:49:f1:a1:
         49:f9:42:24:7b:31:22:de:45:d5:20:ba:fe:ff:61:24:59:f2:
         85:af:41:c8:6b:ad:26:f7:fb:a7:6e:b6:4d:11:4a:7b:b3:cc:
         aa:4f:65:b8:75:57:d1:dd:a2:63:0f:76:a5:6f:7b:de:fa:c4:
         28:98:bc:8b:c1:7c:1b:a9:54:24:16:a7:32:d9:1c:d1:fa:41:
         45:2c:77:aa:1f:58:90:3d:ac:cc:21:b6:c1:ba:69:d9:4f:e4:
         04:bd:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 15:20:46 2024 by rpki-client on console-ams.rpki-client.org