Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98478D9BCA6E6F14D35B8D2C3E0208CB6F2426ED.cer
File:                     98478D9BCA6E6F14D35B8D2C3E0208CB6F2426ED.cer (raw, json)
Hash identifier:          RsUaOhFJXC36oNdhtCCZkrf4gZPxuzBqDii1FEG386c=
Subject key identifier:   98:47:8D:9B:CA:6E:6F:14:D3:5B:8D:2C:3E:02:08:CB:6F:24:26:ED
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       10E1F406222F639345B2AF4CAE4F1A2ACC177AFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/98478D9BCA6E6F14D35B8D2C3E0208CB6F2426ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Jun 2024 13:42:41 +0000
Certificate not after:    Wed 04 Jun 2025 13:47:41 +0000
Subordinate resources:    AS: 267500
                          IP: 201.182.60.0/22
                          IP: 2804:4270::/32

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 01:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e1:f4:06:22:2f:63:93:45:b2:af:4c:ae:4f:1a:2a:cc:17:7a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  5 13:42:41 2024 GMT
            Not After : Jun  4 13:47:41 2025 GMT
        Subject: CN=98478D9BCA6E6F14D35B8D2C3E0208CB6F2426ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c5:6c:f7:8d:e1:32:9b:c0:8c:23:1b:3b:57:
                    93:c8:d4:0b:03:1c:81:6a:09:23:b0:7c:b3:80:e2:
                    cf:9b:9f:3a:a9:69:0b:38:80:8b:fe:0f:c7:f0:8c:
                    ae:e1:e1:ef:62:3f:7a:96:67:73:c7:64:f9:07:76:
                    08:f8:de:85:c9:f4:4c:55:57:1e:14:19:21:ec:8e:
                    86:a9:f0:1e:43:d4:70:a4:05:c8:91:13:64:33:a9:
                    c8:4e:b5:e9:23:4f:4b:17:13:e6:e4:4f:22:f6:f9:
                    5d:35:60:04:04:72:49:e8:50:e2:00:ac:26:9b:98:
                    d1:dd:3d:15:ab:ab:4f:da:61:a9:08:ef:68:01:a1:
                    27:22:f4:6a:71:6e:f7:dc:c4:88:27:ac:b1:38:fd:
                    44:d4:c6:06:ea:e2:bd:b8:a0:71:af:ea:e1:a9:60:
                    33:ba:8b:aa:4b:12:dc:8d:57:10:58:1d:17:19:f2:
                    b2:25:e5:01:ea:d8:cb:f1:34:73:d8:a5:0e:5a:af:
                    6f:b5:d1:ba:e5:3c:2a:f9:3d:a3:19:05:d1:09:85:
                    cc:73:95:8c:bf:c0:2f:99:69:9e:cd:33:82:2b:61:
                    0d:33:f4:26:a5:fa:d5:14:58:81:94:e6:22:f7:32:
                    ea:4a:83:95:77:46:c8:61:e5:c8:ba:8e:2f:77:85:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:47:8D:9B:CA:6E:6F:14:D3:5B:8D:2C:3E:02:08:CB:6F:24:26:ED
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/98478D9BCA6E6F14D35B8D2C3E0208CB6F2426ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.60.0/22
                IPv6:
                  2804:4270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267500

    Signature Algorithm: sha256WithRSAEncryption
         bf:79:53:ea:b8:80:4c:c7:4d:07:ae:99:07:35:a9:f1:6e:97:
         0b:b6:43:be:5f:79:81:c1:20:f5:8e:0e:53:ab:d1:36:98:75:
         ac:88:ef:83:99:4f:17:e5:ca:96:6a:ca:d0:7c:ad:35:47:a3:
         2b:1f:c3:f6:24:6c:cf:fa:36:6e:ac:4f:71:47:0f:1d:4c:a0:
         02:ea:f2:93:95:47:1e:ec:af:08:53:a2:f5:45:11:e6:d2:86:
         8b:a9:f5:6c:1c:3b:ac:5a:fd:1e:4f:2a:43:6f:cb:0e:1b:c5:
         05:40:fe:ec:e1:d8:ee:a4:63:31:21:36:23:7d:25:73:6b:7a:
         e0:9c:aa:85:b0:4a:c8:a4:9a:e4:93:ee:41:30:96:14:b4:aa:
         88:8a:52:78:32:ed:33:f6:7d:f4:96:c3:05:a8:af:8c:2f:f7:
         bd:da:e9:26:15:6e:61:fc:94:04:e1:01:a2:3c:2b:cb:b8:57:
         88:92:37:0d:70:6a:7e:b9:45:de:b4:1d:5b:22:f0:73:30:98:
         7d:69:2e:09:bf:05:12:71:0e:26:4a:bf:f3:f9:0e:c5:4e:93:
         5d:8f:f8:54:fb:31:8c:ba:3f:05:20:0e:93:e0:fb:a0:49:69:
         e3:97:54:06:1f:04:79:3f:de:b1:a1:cf:11:73:8d:ca:bd:e1:
         30:7a:e4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 04:03:11 2024 by rpki-client on console-ams.rpki-client.org