Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.cer
File:                     9842039AC3B384E016FBCFF2C783844A2F64CE38.cer (raw, json)
Hash identifier:          BTFZsyqTnd5rVBD+SD6PuI3/kOMu+P00sqHZIlEPXpE=
Subject key identifier:   98:42:03:9A:C3:B3:84:E0:16:FB:CF:F2:C7:83:84:4A:2F:64:CE:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       20436C5351D0732D919202C58E5F22F1E36A5E5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:09:33 +0000
Certificate not after:    Thu 03 Apr 2025 10:14:33 +0000
Subordinate resources:    AS: 264987
                          IP: 170.84.12.0/22
                          IP: 181.191.56.0/22
                          IP: 2804:3104::/32

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 19:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:43:6c:53:51:d0:73:2d:91:92:02:c5:8e:5f:22:f1:e3:6a:5e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:09:33 2024 GMT
            Not After : Apr  3 10:14:33 2025 GMT
        Subject: CN=9842039AC3B384E016FBCFF2C783844A2F64CE38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:d2:31:e0:93:40:d6:87:2d:c4:e8:e1:fe:
                    c4:1c:39:ce:d9:89:aa:03:3d:84:4a:de:5d:86:02:
                    b9:a0:ee:00:77:16:1b:e6:47:c5:5c:db:a4:78:63:
                    a5:9e:b7:bb:82:16:ff:d5:00:e7:ff:da:38:00:e5:
                    c1:f2:88:fc:47:64:91:79:61:e0:3e:47:52:a6:2e:
                    93:2a:09:0d:44:77:ee:03:10:77:ce:3c:e5:e4:39:
                    2a:8b:42:de:d8:86:87:c6:2d:b5:1a:6a:02:1c:ac:
                    73:9e:c0:0f:77:07:51:a3:1b:f2:1e:7f:ac:d2:fc:
                    b9:95:ca:ab:0a:b9:48:c3:0f:59:de:e5:07:b3:89:
                    9d:67:d4:35:56:f7:64:85:b7:fc:ef:01:cb:54:50:
                    46:07:f5:1b:de:e1:3a:4e:4c:9e:43:e9:c7:c0:5b:
                    cc:84:fa:d0:e5:1e:60:29:6f:8a:dc:d7:db:57:58:
                    ab:ed:20:e1:cd:3f:82:2b:4f:41:c1:d1:e3:55:36:
                    a3:8f:8f:6c:14:20:21:7a:68:fc:44:f5:94:44:7d:
                    81:3c:6c:42:86:78:1f:83:de:58:3c:ca:e3:45:6a:
                    11:2c:fb:0a:b5:03:4b:60:d3:18:2d:58:18:7c:e0:
                    03:13:2f:aa:a5:1d:3d:19:e5:20:cf:44:11:36:83:
                    96:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:42:03:9A:C3:B3:84:E0:16:FB:CF:F2:C7:83:84:4A:2F:64:CE:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.12.0/22
                  181.191.56.0/22
                IPv6:
                  2804:3104::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264987

    Signature Algorithm: sha256WithRSAEncryption
         21:12:5b:f4:66:81:a1:a7:d4:1e:3a:85:de:69:fb:e2:f5:34:
         4c:c7:86:5b:dd:1c:08:0a:cf:90:e7:4b:2f:38:cb:24:62:4e:
         d6:56:04:92:82:36:0e:ce:0e:68:ee:dc:68:c8:8d:2e:56:d7:
         3c:a5:d6:67:ab:73:ba:e6:0e:98:3f:73:5e:9a:cd:51:5a:bc:
         be:27:14:e8:92:32:47:ce:48:57:f1:ec:40:e7:28:e5:8e:51:
         eb:51:28:da:d7:5c:3c:0a:69:09:7a:d8:5d:be:cd:ad:94:34:
         d3:49:22:d0:d4:40:50:cf:fe:88:c5:4a:89:9f:7e:58:a7:8d:
         18:50:b3:c1:78:a0:20:65:fc:fb:02:8b:98:99:7f:3b:15:42:
         59:f8:ef:13:e8:d8:cc:7c:65:ac:29:1c:7a:d6:d2:cf:d3:74:
         80:44:5c:85:62:83:38:0c:cb:7c:2b:04:da:ef:03:65:11:72:
         fd:18:8f:b9:0a:e3:58:46:86:3c:83:b6:49:0e:f3:8e:17:a9:
         d5:e9:6b:e2:3b:aa:7d:18:4f:a7:42:1e:02:44:3b:ba:e7:c4:
         dd:e9:c6:11:10:60:4e:95:23:8b:f5:6e:03:e8:c1:85:46:8f:
         a5:11:d3:8b:d5:d4:3f:51:92:95:7c:03:91:a0:c0:4e:12:19:
         b5:f8:f5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 00:09:57 2024 by rpki-client on console-ams.rpki-client.org