Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A0C53C4472B862583355BBACAFD0255B69389183.cer
File:                     A0C53C4472B862583355BBACAFD0255B69389183.cer (raw, json)
Hash identifier:          BcmUVo1XC5Fr9Cgh1WrF1F+qMJ6APjiPu4x7zyU4XmQ=
Subject key identifier:   A0:C5:3C:44:72:B8:62:58:33:55:BB:AC:AF:D0:25:5B:69:38:91:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       278D486129B51E9A1D2AF8BC62F511804AE16772
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/A0C53C4472B862583355BBACAFD0255B69389183.mft
caRepository:             rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Nov 2024 11:52:31 +0000
Certificate not after:    Sat 15 Nov 2025 11:57:31 +0000
Subordinate resources:    AS: 270968
                          IP: 181.225.168.0/22
                          IP: 2804:743c::/32

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 19:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8d:48:61:29:b5:1e:9a:1d:2a:f8:bc:62:f5:11:80:4a:e1:67:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 16 11:52:31 2024 GMT
            Not After : Nov 15 11:57:31 2025 GMT
        Subject: CN=A0C53C4472B862583355BBACAFD0255B69389183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:0e:a4:7e:32:a5:f0:3e:00:7b:32:0b:80:
                    7e:9c:81:b7:70:85:c8:d1:cf:50:0e:01:a6:6c:3d:
                    15:52:c9:bd:3d:a0:57:08:c9:24:71:60:04:d1:28:
                    37:ad:4f:02:f2:f0:20:7b:6e:24:9e:dc:3a:ef:95:
                    47:e2:f6:5b:bf:e8:dd:06:5d:4d:4b:da:6f:76:02:
                    79:d5:44:29:73:2c:c6:be:1c:37:f9:b7:b0:77:37:
                    97:24:de:fb:88:e9:85:75:db:92:30:86:9f:3c:11:
                    07:a2:c7:be:84:66:16:cf:d3:7a:b5:a1:f7:57:0c:
                    b7:b2:f7:a5:cb:85:39:ec:9e:a7:ab:89:46:b6:65:
                    b6:7b:12:13:cb:48:43:18:fd:35:c4:f6:cd:df:21:
                    ec:54:21:1a:03:72:25:a1:d2:42:96:55:cc:19:ea:
                    11:2b:e4:9e:4c:e6:e3:a8:e2:9d:6d:ac:eb:c6:97:
                    09:09:3d:45:10:ce:ac:3c:ed:0f:34:42:88:a3:5e:
                    9f:0e:d5:05:85:84:d3:19:fb:4c:1e:51:03:f9:6e:
                    df:ef:d2:c6:f6:bd:9e:fa:95:0f:5b:63:c9:60:6c:
                    d8:28:10:80:31:55:d8:04:e8:0c:b5:1a:69:ee:81:
                    1c:f7:c6:fb:6c:f4:ab:bd:3c:05:c6:aa:a6:2d:f0:
                    5d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:C5:3C:44:72:B8:62:58:33:55:BB:AC:AF:D0:25:5B:69:38:91:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/A0C53C4472B862583355BBACAFD0255B69389183.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.168.0/22
                IPv6:
                  2804:743c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270968

    Signature Algorithm: sha256WithRSAEncryption
         6a:18:28:eb:8b:79:66:8c:f3:98:91:4a:ca:ce:d6:02:02:cd:
         d0:02:cf:25:71:2a:0b:72:63:bb:81:5c:76:a5:45:8e:65:b8:
         3c:fa:23:af:12:10:8e:82:89:09:72:df:33:20:66:11:87:13:
         71:3e:b5:87:e2:f3:31:75:ce:ca:38:80:a9:38:12:08:ff:f0:
         71:e5:da:40:e7:bf:30:62:9a:40:e5:58:59:41:c4:9a:4c:73:
         55:1e:2c:72:01:e0:35:01:c8:e8:a5:1d:42:a4:6d:95:7d:93:
         8e:e4:98:66:65:a1:39:ad:66:11:8a:f5:2c:eb:94:58:45:10:
         a0:f9:b6:fd:56:ed:b2:2e:90:e8:3e:a0:87:58:63:fb:2b:5d:
         8e:94:25:8b:d0:94:14:7e:91:e6:66:39:fd:e4:13:f6:e3:32:
         fe:1d:a1:fc:d5:37:8f:6a:13:ab:46:5d:29:2c:63:ee:90:f9:
         73:51:e5:01:54:4a:d9:39:d6:9f:50:e3:85:ab:bf:1a:75:40:
         02:4b:ff:15:fe:b2:2c:83:46:ab:f1:65:b2:94:8e:0e:35:fc:
         5e:86:e3:71:76:2c:20:14:1c:e4:d8:31:82:26:78:28:da:67:
         44:bb:09:df:c0:27:a3:66:e9:27:78:bf:5b:e8:5e:9c:d1:2b:
         7c:74:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:46:12 2024 by rpki-client on console-fra.rpki-client.org