Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AADC23E042EF69A4F400C7506CFD7D215AFA2EA5.cer
File:                     AADC23E042EF69A4F400C7506CFD7D215AFA2EA5.cer (raw, json)
Hash identifier:          ZF7Gn97eCl4i7UFOc7RzQijk3V1UzEZ4EefalOEb2YU=
Subject key identifier:   AA:DC:23:E0:42:EF:69:A4:F4:00:C7:50:6C:FD:7D:21:5A:FA:2E:A5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18BB7CB284EA317517DC551EE2D1867A9C4F5643
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/AADC23E042EF69A4F400C7506CFD7D215AFA2EA5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jun 2024 16:17:42 +0000
Certificate not after:    Fri 13 Jun 2025 16:22:42 +0000
Subordinate resources:    AS: 61751
                          IP: 131.72.252.0/22
                          IP: 168.228.40.0/22
                          IP: 2804:1bcc::/32

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bb:7c:b2:84:ea:31:75:17:dc:55:1e:e2:d1:86:7a:9c:4f:56:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 14 16:17:42 2024 GMT
            Not After : Jun 13 16:22:42 2025 GMT
        Subject: CN=AADC23E042EF69A4F400C7506CFD7D215AFA2EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:b7:da:aa:a5:ca:87:b8:82:ec:e1:6e:d2:
                    4f:c4:59:ce:4f:92:42:92:b1:66:46:c4:73:fc:01:
                    51:00:18:5a:f3:07:31:f9:87:b6:be:44:7c:21:9e:
                    1c:74:b1:93:19:3e:92:fd:7b:6e:3c:1c:e3:fd:1c:
                    4e:d8:74:de:39:5c:d3:ff:28:b2:52:fe:94:dd:1b:
                    8c:44:08:52:f0:76:5c:59:c9:ff:0d:da:34:3d:60:
                    af:77:19:96:36:4c:2c:f1:b7:6c:02:71:c6:2d:a9:
                    37:ce:0c:bb:c0:d5:a3:be:79:aa:68:cf:9c:eb:f2:
                    f1:33:de:4d:71:48:a3:22:6d:6a:6e:86:95:b9:d1:
                    ce:71:b7:59:f0:68:1c:3c:7e:8f:b0:2b:ba:d3:e3:
                    74:78:80:32:9e:65:72:0d:64:3b:f3:f0:03:ff:ca:
                    43:61:d5:15:2a:16:36:78:f7:5a:66:e9:b2:f7:2e:
                    f5:2e:cb:8e:7f:15:1d:9c:78:31:d1:f9:ad:fb:08:
                    aa:4e:f6:a0:a9:b8:4d:00:d7:9a:b5:29:e4:05:91:
                    35:ce:7e:2e:0a:d9:f9:5c:29:9b:4e:46:fe:c8:17:
                    45:29:10:a7:82:e5:96:bc:fc:ef:c4:58:44:d2:3b:
                    dd:9b:66:1f:dc:b6:f3:69:67:18:a9:9f:79:a6:08:
                    b5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:DC:23:E0:42:EF:69:A4:F4:00:C7:50:6C:FD:7D:21:5A:FA:2E:A5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/AADC23E042EF69A4F400C7506CFD7D215AFA2EA5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.252.0/22
                  168.228.40.0/22
                IPv6:
                  2804:1bcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61751

    Signature Algorithm: sha256WithRSAEncryption
         6a:0a:b2:85:c5:14:b0:9a:10:d6:3e:96:7c:91:c4:bf:82:f1:
         26:4c:af:88:f1:cc:36:54:7c:2c:3b:75:88:2d:3b:f7:fe:71:
         e8:55:10:0e:4a:3b:8f:d3:6e:28:81:1c:40:d7:df:4f:94:f3:
         71:a8:b7:98:cf:37:a7:a9:e7:1c:67:ed:10:42:64:00:d5:f8:
         80:9f:5b:ca:f3:33:d0:c9:f5:f0:08:c0:bd:4e:d0:51:b2:13:
         ca:87:81:31:e4:7b:43:5d:84:26:ba:74:31:9a:0f:0b:40:e8:
         38:2d:0c:14:84:8f:33:f8:f9:8d:78:99:09:8b:b3:bf:75:53:
         8e:16:3f:61:82:cb:11:e5:e6:6a:38:95:52:3f:10:1b:5c:d7:
         b9:33:aa:b0:90:f0:a6:02:2b:26:f1:97:cb:78:ca:26:1d:c6:
         df:05:c1:f9:31:38:97:ce:cc:20:6b:fd:31:4e:f1:70:75:f7:
         30:04:0d:0e:cf:31:c1:16:44:28:37:84:de:e7:55:cf:7e:5f:
         10:70:ba:1a:54:7a:ac:65:30:7e:a5:a7:b2:54:89:6f:5a:b2:
         53:29:ce:ca:41:1e:b8:04:03:47:aa:74:a2:d3:9f:22:1f:82:
         b2:de:b9:36:50:e0:b7:f4:84:93:b9:89:db:51:1f:b1:99:9b:
         64:fa:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 11:05:44 2024 by rpki-client on console-fra.rpki-client.org