Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E.cer
File:                     9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E.cer (raw, json)
Hash identifier:          68F7cf1kCKWcXdFsGx+/ihAbE0TLfkzcQGyYLNzM2KQ=
Subject key identifier:   99:26:DA:4D:EE:27:83:7F:B8:0C:7A:7D:43:11:F5:53:7F:A2:AB:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2B89247BD47C0A6E004458D12E67B575F133BE6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/1/9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:38:51 +0000
Certificate not after:    Thu 03 Apr 2025 19:43:51 +0000
Subordinate resources:    AS: 268887
                          IP: 45.174.80.0/22
                          IP: 2804:5c18::/32

Validation:               Failed, certificate revoked on Sat 12 Oct 2024 07:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:89:24:7b:d4:7c:0a:6e:00:44:58:d1:2e:67:b5:75:f1:33:be:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:38:51 2024 GMT
            Not After : Apr  3 19:43:51 2025 GMT
        Subject: CN=9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a0:cd:97:cc:d0:a9:e0:57:29:99:e7:80:4e:
                    dd:b0:01:89:a3:75:c1:d1:81:c3:a4:8b:77:5e:7f:
                    07:3c:c5:50:46:3e:31:fb:99:63:a0:44:35:da:fb:
                    8c:de:9b:17:a1:4c:e8:c4:91:2d:5b:49:3c:fa:c8:
                    a9:b3:db:fc:f5:cd:35:a7:76:fe:c6:7b:d8:05:76:
                    53:02:fd:89:aa:d1:94:f1:66:76:b5:0d:09:65:63:
                    d6:70:25:2b:5e:7a:50:cb:78:2f:43:92:0e:fc:f4:
                    86:0d:a5:23:e7:29:23:98:ad:3d:5e:bb:6e:4a:08:
                    25:4e:83:f0:c1:3c:2e:04:01:18:b7:f2:c8:53:97:
                    66:2c:b7:f1:70:e7:42:63:c3:e4:a3:6c:bb:ac:05:
                    a8:f1:c3:90:47:a8:e2:b8:17:17:82:a3:b4:2d:cb:
                    5b:3e:04:65:d9:0b:ae:ef:95:5a:9f:95:f8:16:f3:
                    cd:68:90:cf:12:a8:53:48:01:13:b9:ed:38:8f:e3:
                    82:e5:4c:b5:2f:ff:40:14:9d:2f:0d:b8:d4:e7:b7:
                    50:40:05:60:75:6d:64:0f:da:1b:c0:94:64:7a:41:
                    52:5a:97:8c:d8:e9:6a:e0:a4:cd:3e:0e:31:9b:84:
                    d0:39:d0:2a:d8:46:58:a5:d0:1f:59:19:fd:2b:1d:
                    97:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:26:DA:4D:EE:27:83:7F:B8:0C:7A:7D:43:11:F5:53:7F:A2:AB:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/1/9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.80.0/22
                IPv6:
                  2804:5c18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268887

    Signature Algorithm: sha256WithRSAEncryption
         3b:f0:51:5f:fd:3a:cf:22:01:93:5d:b4:a5:3f:33:42:f4:d0:
         6f:52:6e:0c:75:44:2e:d5:3a:74:bf:68:44:07:95:5c:47:31:
         db:0e:2f:94:40:6f:b4:ec:72:ad:c6:0a:7a:b8:4f:de:2c:81:
         a8:b6:fc:97:6e:8d:bd:47:0c:94:1f:32:91:cc:19:75:e9:12:
         73:d2:c2:e9:93:0e:1c:58:59:5f:c7:ae:e6:d5:30:59:3f:53:
         58:6c:28:7c:7e:79:2d:82:05:e2:f5:8b:40:07:cd:97:88:92:
         d0:ba:1b:42:4d:a8:66:f9:a1:12:a8:fd:2e:db:5c:37:74:95:
         a6:67:be:f8:15:48:96:a0:4b:a9:b2:aa:1f:66:0b:11:0c:8d:
         f6:01:2f:c0:8c:30:6e:95:19:c3:10:fa:60:b0:58:fa:84:10:
         f0:3b:69:5b:a6:2b:b5:69:02:ef:36:fa:fd:6c:7c:f2:5d:25:
         a9:b9:ad:f8:8f:be:3b:f5:3d:25:21:d5:98:dd:e8:60:9d:49:
         be:2b:f3:e7:76:c7:81:32:f1:55:83:eb:b6:f6:c2:24:3b:5b:
         29:48:d0:7d:c4:75:14:c5:a5:61:9e:c7:d3:64:ea:2d:73:31:
         b8:db:0a:be:3f:cb:d7:1e:b6:3c:86:28:6b:0b:85:4c:dc:01:
         e3:06:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 10:59:26 2024 by rpki-client on console-ams.rpki-client.org