Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA7DD0399E0192DD2E1740148BE2B4962F522878.cer
File:                     AA7DD0399E0192DD2E1740148BE2B4962F522878.cer (raw, json)
Hash identifier:          CeD4zWPHIm7cbdSOKDAd2KuORTAMWU8QbuhSWTNuOuk=
Subject key identifier:   AA:7D:D0:39:9E:01:92:DD:2E:17:40:14:8B:E2:B4:96:2F:52:28:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7AF2CDC54675462585EC0AD862E277E03FC1454F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/AA7DD0399E0192DD2E1740148BE2B4962F522878.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Oct 2024 01:36:08 +0000
Certificate not after:    Mon 13 Oct 2025 01:41:08 +0000
Subordinate resources:    AS: 53054
                          IP: 187.73.192.0/19
                          IP: 2804:a3c::/32

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 20:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f2:cd:c5:46:75:46:25:85:ec:0a:d8:62:e2:77:e0:3f:c1:45:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 14 01:36:08 2024 GMT
            Not After : Oct 13 01:41:08 2025 GMT
        Subject: CN=AA7DD0399E0192DD2E1740148BE2B4962F522878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:20:47:07:d2:6b:e5:42:2b:22:de:5c:40:
                    71:50:0c:1d:ee:47:fe:61:f8:c8:0d:46:ae:5c:a7:
                    35:ad:be:d2:65:a4:74:a7:4c:fb:74:2f:ed:b0:df:
                    68:5f:69:b6:f2:5c:53:74:ea:ab:18:d1:d6:af:32:
                    48:26:98:74:c1:78:99:25:bf:25:0d:8f:3b:cf:3f:
                    4d:0c:e5:35:aa:7c:49:9a:a7:8f:39:1a:cb:14:61:
                    ea:a3:ac:f7:96:e5:c0:3e:36:3b:0e:ef:f1:78:61:
                    bf:aa:0a:04:3a:d3:a8:7d:b8:1d:fc:84:7c:3b:ad:
                    c5:47:46:61:7c:75:b8:5e:b8:2d:b2:78:64:9c:4b:
                    a3:86:bf:57:de:61:e5:39:16:71:9d:f3:33:d7:2a:
                    9e:40:af:a4:dc:b9:82:e1:01:8f:33:c3:2b:eb:97:
                    a9:0e:d7:ba:79:51:4a:43:89:6b:fc:3d:29:99:80:
                    11:5d:c6:05:dc:94:06:fc:b6:77:70:9e:97:64:e5:
                    20:01:37:a5:d7:9a:21:82:85:d3:33:a5:64:bc:37:
                    20:11:9b:0e:5f:dd:ed:7c:4e:e6:63:fd:33:65:5c:
                    8d:db:2f:e5:81:9f:07:c2:8f:f2:6e:4d:52:8d:e2:
                    ee:ba:92:bf:80:ac:68:e2:22:7b:de:65:39:7d:79:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:7D:D0:39:9E:01:92:DD:2E:17:40:14:8B:E2:B4:96:2F:52:28:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/AA7DD0399E0192DD2E1740148BE2B4962F522878.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.192.0/19
                IPv6:
                  2804:a3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53054

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:7d:2d:5f:ba:37:5c:a6:9d:8a:55:fb:cf:08:97:4c:15:
         db:8b:1c:b7:91:ed:6b:97:be:4b:a0:cd:56:c4:f4:16:e9:3f:
         47:22:78:42:d9:19:4e:ad:f4:21:76:77:48:bb:8e:81:96:06:
         57:02:dc:9d:72:c1:50:4c:15:d9:19:55:3e:61:b9:22:62:e6:
         85:5f:93:0c:83:12:d3:0f:88:d1:a3:d1:a4:8f:54:78:df:54:
         80:09:15:b4:b7:ee:24:00:73:f0:24:37:b3:80:e7:c4:63:49:
         af:c1:c5:bd:62:98:c2:63:8d:94:ef:c5:22:72:da:e0:34:ed:
         7d:e7:a6:c8:30:52:14:c0:46:4e:a6:2e:5f:33:51:32:f3:41:
         31:7b:84:29:36:33:25:2d:c1:55:22:b5:de:86:2d:ed:8b:8e:
         b3:0c:d6:5b:42:53:2b:42:52:f6:bc:53:7d:58:af:7a:83:6e:
         d4:43:6b:3b:b4:44:d9:da:a7:3b:12:da:10:38:62:ba:9e:3a:
         0f:3f:01:d9:32:6a:2a:4b:7b:ca:f1:0b:36:f6:14:ab:ea:19:
         fa:94:ef:ed:c2:7d:9e:ca:14:b0:d9:39:de:d8:1c:b4:13:96:
         c5:a0:f2:58:66:3c:13:42:00:34:e7:08:8c:84:ac:b9:a7:39:
         88:91:39:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 21:39:20 2024 by rpki-client on console-ams.rpki-client.org