Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer
File:                     AADA19A8F33624B7B066BD949E208F7B0E08B621.cer (raw, json)
Hash identifier:          HIerKzCHhrusRN8Xvj+RXrUN/b+74QpmNPaPabwMEKg=
Subject key identifier:   AA:DA:19:A8:F3:36:24:B7:B0:66:BD:94:9E:20:8F:7B:0E:08:B6:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62602B114CA204C0E9DB571DBE4B67A89F40BED7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 05:38:11 +0000
Certificate not after:    Thu 03 Apr 2025 05:43:11 +0000
Subordinate resources:    AS: 265378
                          IP: 168.194.44.0/22
                          IP: 2804:3328::/32

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 19:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:60:2b:11:4c:a2:04:c0:e9:db:57:1d:be:4b:67:a8:9f:40:be:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 05:38:11 2024 GMT
            Not After : Apr  3 05:43:11 2025 GMT
        Subject: CN=AADA19A8F33624B7B066BD949E208F7B0E08B621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:65:f7:a7:82:09:a9:d9:32:f0:e9:54:0f:ad:
                    57:86:5b:e4:ca:fa:7c:cd:f7:7a:ef:77:d1:68:e0:
                    0a:0f:95:fd:0b:44:c2:7f:b8:91:0e:47:04:57:3e:
                    a9:6b:ff:35:80:15:13:90:75:4a:fc:c5:c4:b1:47:
                    bc:13:5a:82:27:f6:14:29:a9:23:ba:51:56:c3:fe:
                    c6:47:2b:31:bb:d2:c2:06:53:95:ed:3b:b7:a4:2c:
                    83:9b:d4:a6:f8:56:b0:ca:89:a2:87:07:a2:3e:14:
                    8f:78:51:7b:4f:47:c7:8d:7a:fb:f1:ba:d6:c7:23:
                    e0:64:b2:34:8b:3d:93:33:73:2c:9b:1f:30:70:b9:
                    b3:0a:09:09:f9:59:90:78:92:3c:db:f3:e7:1b:22:
                    b5:4c:c2:af:b9:a8:34:a9:37:33:dd:fb:41:d6:4b:
                    20:d0:35:6d:44:98:a7:3e:05:48:90:ed:cb:6e:7c:
                    1b:4f:d0:30:39:05:e3:1c:00:2a:ed:36:da:28:38:
                    f0:f6:a1:c5:1a:9a:96:f1:fa:3d:94:32:9e:f1:eb:
                    9a:e4:5b:2f:51:22:b1:65:d8:ed:56:a1:25:99:3c:
                    ad:c4:ae:81:ac:6a:fc:16:f0:e0:cb:85:0c:56:e5:
                    d9:80:f4:f0:79:c5:3c:4a:61:a8:f5:95:1d:ce:67:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:DA:19:A8:F3:36:24:B7:B0:66:BD:94:9E:20:8F:7B:0E:08:B6:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.44.0/22
                IPv6:
                  2804:3328::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265378

    Signature Algorithm: sha256WithRSAEncryption
         62:b4:7b:c3:5d:7d:78:a1:c6:ed:d5:a0:09:a8:65:ce:42:a3:
         29:ab:75:86:20:ff:29:a2:2f:26:b9:ad:13:a5:36:eb:62:b1:
         3b:69:be:8f:dc:b3:3d:6d:bb:90:fb:43:ba:23:1a:4a:d6:05:
         46:9f:92:2f:fc:51:29:11:e6:6a:b5:4b:8a:d7:8f:3d:d9:82:
         22:dd:b9:07:b9:62:dd:21:b5:9c:60:3b:8e:2c:95:55:c3:ca:
         fd:49:6a:15:32:61:f2:7f:15:b0:3d:03:ff:7d:76:0a:c2:19:
         01:23:9c:d3:13:01:7c:e0:a0:c3:87:d5:84:f3:e4:32:a1:a7:
         0b:df:83:56:36:bd:0a:cc:37:a3:75:c2:0a:2c:dc:6a:83:0a:
         82:d6:46:99:16:84:ff:d0:78:bd:29:e1:cc:f1:3d:27:6a:48:
         c9:b1:f3:64:cd:dd:b2:1f:c1:19:0a:b1:48:16:22:3c:bd:b2:
         16:31:4b:e5:e8:1a:27:f1:59:0f:b4:0a:64:bc:ce:57:44:a6:
         de:46:7e:bf:eb:00:4e:f7:3a:5b:05:b6:fe:3f:56:35:78:cd:
         5d:06:38:90:5e:86:25:89:cd:08:9d:f7:dc:68:03:09:53:4e:
         14:5e:72:bf:9c:86:58:86:ba:6f:8f:9e:64:f5:5b:b2:cc:be:
         31:37:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 21:15:25 2024 by rpki-client on console-ams.rpki-client.org