Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A2838E50EF4130DD6AD153940830854022E210E9.cer
File:                     A2838E50EF4130DD6AD153940830854022E210E9.cer (raw, json)
Hash identifier:          i60dNpCjOOjCQUfFxAIROGo292kae/tJCh4gbHAoI0c=
Subject key identifier:   A2:83:8E:50:EF:41:30:DD:6A:D1:53:94:08:30:85:40:22:E2:10:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       153C2735BF71AB4DB415E0D1D96A349435544E6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/A2838E50EF4130DD6AD153940830854022E210E9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Oct 2024 19:25:26 +0000
Certificate not after:    Fri 24 Oct 2025 19:30:26 +0000
Subordinate resources:    AS: 61664
                          IP: 131.108.60.0/22
                          IP: 2804:1c98::/32

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 15:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3c:27:35:bf:71:ab:4d:b4:15:e0:d1:d9:6a:34:94:35:54:4e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 25 19:25:26 2024 GMT
            Not After : Oct 24 19:30:26 2025 GMT
        Subject: CN=A2838E50EF4130DD6AD153940830854022E210E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:45:63:30:8c:56:df:a1:52:9a:5c:43:9c:
                    e3:1d:b7:3a:1c:36:5c:d2:73:0a:5d:33:54:29:09:
                    76:cb:4e:34:12:3a:01:f7:81:39:5c:ae:01:30:1a:
                    9e:dc:bb:26:8d:e5:06:5a:92:e1:21:91:9f:11:97:
                    da:db:61:7e:7e:f1:69:72:72:cf:ed:11:39:bd:a1:
                    db:30:eb:9d:94:94:dd:9c:5e:a4:d5:ba:c5:dd:6f:
                    63:20:69:ef:99:d9:70:76:f5:f1:42:84:55:d4:8a:
                    91:64:bd:6d:b4:71:f7:4a:be:f9:f6:13:e7:a7:3b:
                    99:3c:b6:ac:e2:01:c9:f6:10:2a:04:cd:5f:11:4f:
                    36:39:0c:36:d5:86:2a:15:40:84:64:29:2d:99:e4:
                    4b:fb:e3:10:06:87:a8:b0:a6:95:b7:2c:b3:86:b1:
                    98:72:ab:99:48:01:04:b8:6d:43:88:fc:8f:02:cd:
                    ce:c2:ee:2c:53:64:fa:28:6f:eb:d5:84:14:09:ab:
                    f5:3c:bb:74:62:ec:02:92:e0:5d:b2:b5:81:2c:01:
                    25:0a:fe:97:c5:cc:f6:89:fc:f1:b5:fc:af:c9:71:
                    49:57:6e:65:76:68:14:44:c0:77:88:ac:19:7c:13:
                    58:25:79:e3:7f:44:7a:30:40:e8:2e:b1:79:df:c1:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:83:8E:50:EF:41:30:DD:6A:D1:53:94:08:30:85:40:22:E2:10:E9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/A2838E50EF4130DD6AD153940830854022E210E9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.60.0/22
                IPv6:
                  2804:1c98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61664

    Signature Algorithm: sha256WithRSAEncryption
         62:e9:07:df:c7:a6:3f:93:1e:64:f9:08:2b:5c:26:f5:c9:1f:
         5a:2d:0f:15:a9:ab:f2:f3:1a:b5:41:b4:84:96:2f:59:90:8a:
         39:8d:4c:3b:ce:49:ae:a2:2c:14:49:7d:f1:a4:02:2f:ac:b6:
         39:5d:96:6a:fb:92:a3:01:b6:c7:8d:33:4e:aa:48:ce:5c:0d:
         63:82:bd:49:fa:d3:85:c3:16:e7:1c:3c:4d:c0:6e:9e:51:f7:
         f2:07:f9:4b:f8:77:90:ec:2d:5a:be:2a:48:f4:a6:40:f6:51:
         75:e6:46:a4:11:56:d2:9e:eb:d0:0e:d3:5a:15:cd:8b:4b:e5:
         53:36:88:38:f6:8d:d2:52:4f:5a:1f:89:19:9b:a3:35:a2:c7:
         cc:ff:0a:86:3e:c0:f8:44:93:b7:e0:1a:94:ad:5d:4e:fc:64:
         f6:36:3b:71:7f:ae:c1:5f:82:8f:b9:8c:a6:ce:51:2c:04:e7:
         7e:2a:08:20:9c:38:ce:90:f4:fc:db:90:35:45:5e:f8:5c:c2:
         e5:92:4f:a3:20:8e:b9:6e:af:4f:13:d6:ab:9c:f5:6d:77:d3:
         44:9e:e3:d3:62:a9:89:e3:40:af:82:2e:8f:dd:44:3d:87:40:
         0b:1d:f2:a5:8a:ee:7c:a0:7f:0e:6e:d8:d9:2c:df:81:ab:99:
         e7:81:4f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 17:47:12 2024 by rpki-client on console-fra.rpki-client.org