Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A416EC91EB730A965AC756B83ABC9AE436C3DFC1.cer
File:                     A416EC91EB730A965AC756B83ABC9AE436C3DFC1.cer (raw, json)
Hash identifier:          bGvZPyMlig0CMgz4X9JYckNJ5u9LuaiM4/jGEUjTOl4=
Subject key identifier:   A4:16:EC:91:EB:73:0A:96:5A:C7:56:B8:3A:BC:9A:E4:36:C3:DF:C1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62FED6978703E4595BBC3A4C4A371790B8800362
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/A416EC91EB730A965AC756B83ABC9AE436C3DFC1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Oct 2024 11:46:56 +0000
Certificate not after:    Mon 13 Oct 2025 11:51:56 +0000
Subordinate resources:    AS: 272470
                          IP: 2804:81b0::/32

Validation:               Failed, certificate revoked on Sun 20 Oct 2024 09:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fe:d6:97:87:03:e4:59:5b:bc:3a:4c:4a:37:17:90:b8:80:03:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 14 11:46:56 2024 GMT
            Not After : Oct 13 11:51:56 2025 GMT
        Subject: CN=A416EC91EB730A965AC756B83ABC9AE436C3DFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:f8:c7:42:f5:91:bd:2b:01:34:e2:77:47:
                    07:48:5a:a8:f4:fb:54:8d:9d:f8:7e:d2:53:a1:59:
                    50:76:a1:51:15:7b:9d:54:7c:e9:f4:9e:ea:93:e6:
                    0d:36:ea:6b:4a:fe:7a:91:a0:5d:95:2c:bf:3d:83:
                    0b:b8:62:ec:69:59:96:58:df:41:d1:4a:10:d3:8c:
                    f9:8b:50:fb:77:a6:2e:d6:1e:06:25:07:0e:f8:21:
                    17:8b:5a:05:54:51:ad:e0:fc:96:b9:c2:77:bc:9e:
                    5c:c0:b5:d1:7d:55:fa:52:85:e8:7c:7d:d3:5f:b9:
                    47:9f:dc:08:c5:44:6f:6f:55:07:9d:e2:38:ee:82:
                    a2:ab:39:49:ed:8f:8c:bb:5f:ff:cd:4c:74:22:7d:
                    37:53:71:80:08:19:26:e5:e1:47:61:0c:d9:a9:fc:
                    24:8d:76:f8:b6:55:7a:a3:94:c0:38:ab:cf:86:43:
                    0a:b2:72:9e:39:85:a0:65:b8:5d:c4:db:19:22:39:
                    f6:3c:76:7e:2e:78:c5:4f:64:54:4c:57:f6:10:91:
                    81:05:62:1f:09:bb:9e:42:92:d2:a6:b9:9f:13:a5:
                    da:c1:81:69:58:3f:93:8c:d0:60:9a:9b:9d:6b:9e:
                    38:8c:a4:e0:eb:d2:2a:1a:11:41:3b:99:78:fa:ad:
                    df:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:16:EC:91:EB:73:0A:96:5A:C7:56:B8:3A:BC:9A:E4:36:C3:DF:C1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/A416EC91EB730A965AC756B83ABC9AE436C3DFC1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272470

    Signature Algorithm: sha256WithRSAEncryption
         49:32:77:59:c6:b0:c0:a1:5d:3e:dd:13:94:5e:03:68:61:c1:
         19:81:a5:be:9e:db:5c:f8:74:26:26:f4:de:f2:8d:04:41:8a:
         9a:35:f0:e1:51:43:04:6a:73:ef:21:a8:55:c4:0b:84:41:47:
         e2:d6:77:4e:12:d6:18:26:08:8f:f5:3b:d0:5a:e9:6a:f3:89:
         ef:5f:c2:7a:ff:c7:51:9b:97:44:53:bb:c9:db:f3:85:b1:69:
         9a:d1:7b:17:1b:60:d0:8a:78:bc:31:3a:c3:c6:d2:a9:29:13:
         a5:3e:38:95:dd:58:40:05:eb:8a:f6:65:72:39:39:9d:99:ce:
         d4:3d:f0:0b:f1:da:b9:30:be:02:1a:2b:7d:bd:ae:3b:55:33:
         67:f5:a4:9d:6a:25:90:69:ac:1d:11:4f:cf:62:79:5f:34:7a:
         cd:be:57:f9:e5:6d:a8:a9:4c:96:f1:e5:e4:d1:61:7b:6b:81:
         d7:fe:22:22:e4:59:52:c0:c1:5e:28:79:13:38:d8:ca:18:a2:
         ea:e1:75:48:da:50:cd:7a:ed:a4:ad:c0:d7:51:13:05:0b:76:
         c5:81:8a:ab:b3:8e:e2:bc:fd:b2:62:1a:6d:63:39:a3:11:db:
         6c:66:c4:43:7c:a3:81:f3:f2:6d:72:ff:e0:78:05:2b:b6:b4:
         8e:43:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 10:21:45 2024 by rpki-client on console-fra.rpki-client.org