Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A66980B40B0A3FD763EEBEC65A7C4CD82A5553D7.cer
File:                     A66980B40B0A3FD763EEBEC65A7C4CD82A5553D7.cer (raw, json)
Hash identifier:          UxBxzYR8yg1f7v5hR3AScMbZ4ZoyiGLodALXfwXzmps=
Subject key identifier:   A6:69:80:B4:0B:0A:3F:D7:63:EE:BE:C6:5A:7C:4C:D8:2A:55:53:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4892AED1DD5A92A2950DAB822858E7A4F76716D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/A66980B40B0A3FD763EEBEC65A7C4CD82A5553D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Jul 2024 20:47:06 +0000
Certificate not after:    Wed 09 Jul 2025 20:52:06 +0000
Subordinate resources:    AS: 266343
                          IP: 170.239.4.0/22
                          IP: 2804:365c::/32

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 12:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:92:ae:d1:dd:5a:92:a2:95:0d:ab:82:28:58:e7:a4:f7:67:16:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 10 20:47:06 2024 GMT
            Not After : Jul  9 20:52:06 2025 GMT
        Subject: CN=A66980B40B0A3FD763EEBEC65A7C4CD82A5553D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7b:d3:bb:4a:83:5b:4b:1b:b3:1a:f9:d9:63:
                    e4:a9:d0:6d:ea:d6:24:66:05:5a:ba:81:b9:b6:bd:
                    e0:16:a7:13:f3:21:de:d0:ad:81:5c:36:f8:10:08:
                    0c:ee:a3:db:94:06:26:10:3d:93:d2:ae:84:1d:3f:
                    e9:64:b5:be:b7:c2:9c:30:91:a1:bd:e8:98:0b:f3:
                    17:05:9c:b0:dc:da:ee:1e:97:b0:7a:95:2f:f5:ea:
                    b1:a7:41:c7:41:f2:0b:9b:72:52:f0:04:73:87:c3:
                    0d:be:23:3f:3d:e8:0e:08:38:a8:1d:23:68:63:27:
                    99:df:b4:43:8e:84:4c:4e:ee:54:fc:19:3e:af:dc:
                    ea:9a:7a:87:be:75:53:64:aa:e1:11:37:f0:03:5f:
                    e6:e0:f8:79:1e:13:0b:69:df:fe:38:04:e2:97:d9:
                    73:fa:ed:8b:0e:37:b4:be:7b:f1:b6:64:63:33:46:
                    06:28:41:64:1e:cc:59:5c:5b:73:f2:b7:39:9d:de:
                    48:3c:6a:19:cb:cd:ab:69:0c:65:d3:de:85:ca:44:
                    1b:95:28:0b:cd:26:88:4b:6b:9e:25:06:7f:56:41:
                    cb:93:de:b8:64:87:70:aa:7a:3a:44:5d:32:cb:ff:
                    67:32:32:b7:e0:c8:c4:d1:9e:cd:0d:7c:55:2b:7a:
                    26:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:69:80:B4:0B:0A:3F:D7:63:EE:BE:C6:5A:7C:4C:D8:2A:55:53:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/A66980B40B0A3FD763EEBEC65A7C4CD82A5553D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.4.0/22
                IPv6:
                  2804:365c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266343

    Signature Algorithm: sha256WithRSAEncryption
         56:3f:81:e7:e0:12:b2:4b:d1:74:e5:0b:3a:80:95:c5:5c:c2:
         97:c0:9a:be:e4:fd:bf:da:50:5e:d1:66:fd:e4:5c:27:61:26:
         43:57:f0:84:f1:b2:16:29:5b:db:16:c7:cc:5a:fe:03:53:dd:
         8d:36:fb:11:27:dd:b0:0d:e2:7f:ab:2c:2f:2c:dc:83:5e:75:
         e6:1e:1a:7e:1a:09:6d:6c:6e:e1:b5:ab:31:66:f1:51:ed:bb:
         dc:8f:45:be:7e:1e:4d:e2:14:5a:1a:33:dd:d9:d4:3c:f6:30:
         26:75:d0:d5:3e:b5:4e:f3:df:28:09:d4:d4:3d:d2:0c:a8:94:
         c0:34:c8:f8:8c:5d:33:55:ba:d3:16:3f:6d:c6:99:1a:db:85:
         73:4a:37:5f:1e:af:b7:9d:c9:0c:bf:1e:2f:e6:24:0d:20:d0:
         71:36:be:70:b2:72:57:d0:8f:2d:67:13:df:df:07:f7:43:8b:
         da:94:38:82:ee:63:4e:cd:ca:6a:b8:98:41:1e:98:69:63:95:
         a3:35:53:8c:95:10:e7:2b:8a:96:8a:89:51:6b:23:79:f6:bc:
         d3:3f:6c:9e:eb:90:fd:63:23:a4:43:97:eb:07:be:99:61:b0:
         5b:6a:1a:18:c1:a5:36:87:4d:eb:e6:d6:21:2d:b7:d9:d2:95:
         53:76:0c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 17:34:00 2024 by rpki-client on console-ams.rpki-client.org