Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98395AED1C5386EB667D2CD30DDAF80EC4EC4807.cer
File:                     98395AED1C5386EB667D2CD30DDAF80EC4EC4807.cer (raw, json)
Hash identifier:          JZIip1AaHIRwZ6+vqLVYBNu3ejmX0dqRg1NE9SVCSfk=
Subject key identifier:   98:39:5A:ED:1C:53:86:EB:66:7D:2C:D3:0D:DA:F8:0E:C4:EC:48:07
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4CE6EFF05B135427C82DE2BBE92AD4912C30D373
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/98395AED1C5386EB667D2CD30DDAF80EC4EC4807.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Oct 2024 20:22:19 +0000
Certificate not after:    Fri 24 Oct 2025 20:27:19 +0000
Subordinate resources:    AS: 270588
                          IP: 177.129.36.0/22
                          IP: 2804:6e50::/32

Validation:               Failed, certificate revoked on Fri 22 Nov 2024 17:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e6:ef:f0:5b:13:54:27:c8:2d:e2:bb:e9:2a:d4:91:2c:30:d3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 25 20:22:19 2024 GMT
            Not After : Oct 24 20:27:19 2025 GMT
        Subject: CN=98395AED1C5386EB667D2CD30DDAF80EC4EC4807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:e4:eb:e7:37:7a:1d:8e:73:3a:b2:74:0f:
                    9d:b6:d4:12:62:78:60:28:45:1a:48:d4:d3:6b:40:
                    55:e2:2b:1b:53:1a:ce:6d:1f:6f:46:dc:3d:97:45:
                    70:01:0d:f8:0f:57:63:64:be:f6:37:2e:ae:60:c7:
                    ba:04:43:d7:3a:12:f9:f5:a8:cf:fe:c4:89:e2:f9:
                    70:dd:d3:bb:08:36:f5:2d:a2:3a:20:03:d4:4f:6b:
                    e9:44:ea:94:2a:3e:09:eb:fc:7d:57:dc:2b:54:47:
                    d8:8c:48:c0:5d:1a:f7:4a:c7:75:a8:78:51:95:8e:
                    98:1d:89:c1:58:8b:4b:53:c6:6a:17:77:8b:ac:61:
                    76:5a:02:ce:02:e9:f8:0f:7c:b9:bd:75:9d:21:25:
                    a7:7f:a4:72:2b:f8:94:33:d7:27:e4:10:07:96:fa:
                    36:7f:fb:28:b0:a7:cf:66:fa:81:7f:b8:eb:0d:b0:
                    69:b4:67:85:85:bf:f3:38:fb:00:a3:6a:86:22:c1:
                    cc:1a:d4:14:1d:cc:d0:b3:ab:64:08:2f:0a:e3:ae:
                    02:a5:c7:d1:06:df:92:bf:42:9e:5b:f3:66:eb:fe:
                    dd:27:f8:1d:4f:21:f6:92:89:f1:76:49:f4:f3:49:
                    c2:9f:db:fd:8d:ba:04:e0:20:42:da:6d:38:7f:e7:
                    cf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:39:5A:ED:1C:53:86:EB:66:7D:2C:D3:0D:DA:F8:0E:C4:EC:48:07
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/98395AED1C5386EB667D2CD30DDAF80EC4EC4807.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.36.0/22
                IPv6:
                  2804:6e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270588

    Signature Algorithm: sha256WithRSAEncryption
         ad:cb:91:3a:1e:e6:8b:48:30:8e:07:c9:4d:6f:0a:47:da:96:
         47:fd:4f:f6:a1:ba:5f:74:7d:bb:07:ce:9a:87:95:58:9e:e1:
         fc:2d:05:f0:ea:27:33:d1:2a:91:60:7c:b3:9c:28:62:d5:09:
         ac:e7:59:fc:6f:ec:9f:4c:73:ab:15:83:97:61:2e:36:d4:76:
         99:97:c8:ca:9d:36:cf:c3:84:d6:9b:5d:06:df:1c:93:c9:6b:
         3b:76:39:d9:45:3c:c4:a1:0d:06:8d:8f:4b:ea:5d:d9:6d:59:
         09:af:68:c9:ac:87:bf:3d:5d:92:b7:0f:19:66:e4:6f:a2:a4:
         86:52:6e:ca:61:69:03:c5:4f:71:3c:2e:40:82:ce:1b:48:88:
         60:a1:89:8e:27:1e:27:86:c4:ef:38:ee:89:d8:81:bf:1f:f1:
         e6:fa:1c:3e:4d:6b:49:61:ff:09:4d:7a:c4:27:b3:23:57:8c:
         08:e1:3e:82:92:71:ee:1c:59:4a:07:89:64:3d:23:9a:96:0f:
         c2:96:77:40:a2:5e:3e:43:f6:73:49:8c:13:b4:29:67:5d:46:
         5c:af:f8:19:0c:ad:28:82:4a:fb:0e:63:31:90:32:e5:c2:f9:
         5d:a2:0a:b2:d4:a2:56:37:cf:d1:4e:59:0f:86:6e:5a:ea:bf:
         f8:9a:2a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:55:19 2024 by rpki-client on console-fra.rpki-client.org