Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A935BC57124B9AAC10243C59B618920ED8A5C03F.cer
File:                     A935BC57124B9AAC10243C59B618920ED8A5C03F.cer (raw, json)
Hash identifier:          6JazrcT56SJVM+i8kZnKQMuVNAZAh+jXuszbIYyog1M=
Subject key identifier:   A9:35:BC:57:12:4B:9A:AC:10:24:3C:59:B6:18:92:0E:D8:A5:C0:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2251482FBDDD81692EA0615174601A0BC47B527F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FvsSvpZARzonb5KtGTeCugJ1mX3Dq5qLYHgwyHtXgzc8/0/A935BC57124B9AAC10243C59B618920ED8A5C03F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FvsSvpZARzonb5KtGTeCugJ1mX3Dq5qLYHgwyHtXgzc8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Jun 2024 10:57:41 +0000
Certificate not after:    Mon 02 Jun 2025 11:02:41 +0000
Subordinate resources:    AS: 268601
                          IP: 45.163.216.0/22
                          IP: 2804:53b4::/32

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 21:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:51:48:2f:bd:dd:81:69:2e:a0:61:51:74:60:1a:0b:c4:7b:52:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  3 10:57:41 2024 GMT
            Not After : Jun  2 11:02:41 2025 GMT
        Subject: CN=A935BC57124B9AAC10243C59B618920ED8A5C03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:ec:f0:15:44:69:2c:4a:0a:22:98:38:d0:
                    d1:2f:d9:9c:f5:69:03:1d:ea:8d:de:8b:ab:a0:ce:
                    23:60:4d:33:28:e9:7d:e3:a6:6f:ee:1d:f9:cb:55:
                    c7:4d:f6:e2:70:67:9e:eb:66:a1:92:7f:c6:9a:70:
                    c1:7b:9a:ff:3e:a6:2b:1b:34:62:9a:c4:ab:67:ea:
                    72:5a:79:5d:98:ce:64:f5:a1:1e:fb:b9:1b:03:1b:
                    87:e2:12:9a:0d:c7:37:b6:5f:2c:47:60:8f:c0:3a:
                    61:f7:65:19:f5:1e:5d:0d:b4:5e:75:b8:aa:7e:60:
                    04:4a:fc:15:99:29:77:02:eb:53:85:55:60:36:83:
                    74:b8:5e:ed:58:1a:7d:7f:2b:72:b6:68:dc:f2:6f:
                    f2:4b:ab:72:37:07:4e:7f:39:1e:46:2d:63:4b:bf:
                    b9:e1:1f:26:49:0b:b7:1e:dd:4c:9d:8a:a7:f6:8f:
                    cf:ea:49:1c:7d:06:bd:17:2e:9a:b0:c3:f6:9e:b3:
                    55:96:cb:6d:1d:aa:8a:f0:24:eb:4a:b8:e4:66:f5:
                    0c:c5:17:3d:94:a3:61:16:31:62:86:c3:ba:0f:10:
                    53:2e:37:e3:75:08:b8:0b:73:a5:44:ba:37:1a:bc:
                    fd:57:22:8c:1f:4a:5c:c1:32:1e:30:f2:c2:c8:37:
                    cb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:35:BC:57:12:4B:9A:AC:10:24:3C:59:B6:18:92:0E:D8:A5:C0:3F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FvsSvpZARzonb5KtGTeCugJ1mX3Dq5qLYHgwyHtXgzc8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FvsSvpZARzonb5KtGTeCugJ1mX3Dq5qLYHgwyHtXgzc8/0/A935BC57124B9AAC10243C59B618920ED8A5C03F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.216.0/22
                IPv6:
                  2804:53b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268601

    Signature Algorithm: sha256WithRSAEncryption
         77:cc:bb:24:8b:7f:ab:22:b5:23:46:a6:af:b6:ca:33:58:34:
         c4:ee:f0:bd:76:b5:a5:a5:e0:38:c6:73:c7:e7:eb:70:75:15:
         a1:82:a8:43:0f:aa:61:3d:0f:37:3d:f5:c8:20:5b:92:52:e9:
         1c:6a:46:09:3f:4d:67:c2:fc:de:e7:6b:3d:05:2c:85:43:f7:
         e4:04:0f:22:9e:35:c9:96:84:47:78:04:6c:6a:97:9c:cf:79:
         fb:e8:5d:d5:d0:42:bf:a6:18:9e:55:1e:7c:c3:1c:af:71:60:
         d5:48:23:ea:68:88:54:98:90:ee:3f:41:dc:6c:f9:5e:a5:4c:
         d9:18:33:c0:77:ba:8a:67:23:6a:86:fd:53:26:75:87:d5:50:
         54:6d:5c:b4:e3:fc:d6:86:73:fa:d1:8b:87:ba:76:50:72:f2:
         a6:80:a9:1b:01:23:c5:10:97:49:2b:db:6c:36:63:67:34:98:
         50:34:a2:48:b5:e4:29:44:aa:85:0a:83:fd:2f:0c:7e:57:8a:
         64:61:bb:75:0e:4a:ff:48:47:1a:96:8b:0b:5a:27:e9:ca:3a:
         f1:a8:6e:f3:00:81:88:cd:b3:41:23:b7:2a:44:5d:c8:f6:ac:
         03:23:5a:51:4f:00:bf:ae:9a:8f:25:ac:27:6a:9f:eb:99:c1:
         f9:94:42:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:59:24 2024 by rpki-client on console-fra.rpki-client.org