Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/97474013CA486CF79D2DDD137F716DFF7FAC995B.cer
File:                     97474013CA486CF79D2DDD137F716DFF7FAC995B.cer (raw, json)
Hash identifier:          r3NiGFVhiGrYZ6iulnambVIdk897MmlS3z4EzfAv8sU=
Subject key identifier:   97:47:40:13:CA:48:6C:F7:9D:2D:DD:13:7F:71:6D:FF:7F:AC:99:5B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       201C3CB8CE241C83D528A29CF08FD171EA48F907
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/1/97474013CA486CF79D2DDD137F716DFF7FAC995B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:56:19 +0000
Certificate not after:    Thu 03 Apr 2025 03:01:19 +0000
Subordinate resources:    AS: 266510
                          IP: 170.244.224.0/22
                          IP: 2804:38ec::/32

Validation:               Failed, certificate revoked on Wed 25 Sep 2024 10:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1c:3c:b8:ce:24:1c:83:d5:28:a2:9c:f0:8f:d1:71:ea:48:f9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:56:19 2024 GMT
            Not After : Apr  3 03:01:19 2025 GMT
        Subject: CN=97474013CA486CF79D2DDD137F716DFF7FAC995B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:21:f4:71:ec:ca:ee:84:bf:14:45:da:41:
                    79:f0:26:b0:76:4d:01:c9:f7:bf:26:05:f6:5f:92:
                    7e:fd:08:49:01:4e:83:80:f1:4e:2a:24:31:d7:fd:
                    81:cc:3c:2a:5a:72:f2:de:52:1d:b6:be:0c:88:b1:
                    2d:79:d8:df:d6:07:7e:8d:cb:42:ff:36:7f:66:23:
                    03:64:cd:a1:22:6a:e8:e3:d3:f3:23:e2:4f:eb:7c:
                    55:d9:fa:32:91:d3:bd:2e:50:29:0a:58:8d:d1:cd:
                    4f:37:d0:a6:98:5a:6c:43:0e:79:96:79:a2:54:86:
                    9b:fb:ec:58:3e:2a:98:8b:4e:e4:37:4e:33:39:51:
                    2f:83:4c:cc:e8:af:31:97:8e:36:1e:60:ed:a7:1d:
                    1e:8b:47:75:82:a6:ca:d2:99:33:65:c2:63:dd:a6:
                    51:73:8a:38:e8:de:ed:1d:0a:33:b1:b5:ec:46:ab:
                    2d:4a:8c:51:b1:c8:5b:88:da:c2:2c:2e:15:3c:e5:
                    db:f0:8b:49:0c:ff:7e:ad:43:95:b9:08:26:da:da:
                    68:29:77:fb:60:23:80:84:20:89:54:82:9e:55:28:
                    f9:86:62:f0:07:59:a6:03:b2:dd:86:9f:54:2f:00:
                    03:35:1f:5f:ed:71:c8:0c:24:46:2b:be:cd:26:9b:
                    bf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:47:40:13:CA:48:6C:F7:9D:2D:DD:13:7F:71:6D:FF:7F:AC:99:5B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/1/97474013CA486CF79D2DDD137F716DFF7FAC995B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.224.0/22
                IPv6:
                  2804:38ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266510

    Signature Algorithm: sha256WithRSAEncryption
         bf:7a:df:aa:19:d4:bf:88:87:51:73:2b:fc:a6:a0:f5:60:00:
         2a:ae:65:ad:d3:5c:7e:63:10:95:cf:9f:8a:a1:47:a3:fb:22:
         1d:5a:20:8e:34:86:9b:9b:6b:42:a9:49:65:ee:97:f4:fd:7b:
         0f:f2:50:b0:36:91:b4:0f:b6:67:86:fd:8c:8f:ce:3e:95:7e:
         13:ff:fb:83:fa:88:97:af:41:fb:7d:36:64:e0:9c:d9:0c:99:
         96:91:4c:75:22:a8:46:5f:e0:de:13:94:9c:d8:d2:ee:9a:cc:
         6c:be:34:04:41:1f:7e:80:7c:08:d5:75:4a:0b:23:07:c9:c6:
         72:cb:1c:19:25:72:02:df:df:82:fa:c8:d3:6c:04:c9:cb:0a:
         8d:1a:48:57:21:84:84:2b:02:a8:71:4c:25:bf:15:ef:25:85:
         c6:d3:c0:09:1a:a4:f6:0c:17:df:f4:3c:67:c5:d0:d2:8b:70:
         df:c4:24:8d:29:b7:b2:00:eb:f8:fc:96:fc:44:63:e2:38:ef:
         8d:0d:2e:fa:b2:90:a3:70:a8:bd:73:1c:1b:59:2e:c5:df:9d:
         69:75:95:88:5a:df:19:f0:60:d1:66:03:f9:24:24:dd:d8:83:
         8c:e4:8a:ff:bc:79:45:fa:00:fd:d0:f7:58:29:68:5f:e1:ea:
         ba:95:88:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 13:23:31 2024 by rpki-client on console-fra.rpki-client.org