Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.cer
File:                     AAF5B81D61057C224A29F86F6C466A2DE486BFFD.cer (raw, json)
Hash identifier:          GILN8E46lkUkKlqaXa/sCJiluC/Nt5NfYz9pkNmUsaM=
Subject key identifier:   AA:F5:B8:1D:61:05:7C:22:4A:29:F8:6F:6C:46:6A:2D:E4:86:BF:FD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4285DC2119BD9D2952F0B1335740BC2A98BF3A34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 06:25:14 +0000
Certificate not after:    Thu 03 Apr 2025 06:30:14 +0000
Subordinate resources:    AS: 267517
                          IP: 201.182.120.0/22
                          IP: 2804:42a8::/32

Validation:               Failed, certificate revoked on Tue 17 Sep 2024 15:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:85:dc:21:19:bd:9d:29:52:f0:b1:33:57:40:bc:2a:98:bf:3a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 06:25:14 2024 GMT
            Not After : Apr  3 06:30:14 2025 GMT
        Subject: CN=AAF5B81D61057C224A29F86F6C466A2DE486BFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:20:2c:d5:e3:25:4a:71:c4:63:f3:30:d1:0e:
                    ca:4d:9c:db:a2:17:45:7a:63:d0:24:14:30:61:61:
                    df:ed:d0:0b:df:7b:b4:a4:f2:f3:13:4d:e6:83:f3:
                    d9:b1:58:ee:d1:bb:1d:19:a5:93:02:1d:5b:4d:bc:
                    61:64:f3:ea:82:b8:f5:53:da:55:a9:a2:27:e5:8c:
                    79:6d:e3:44:46:4f:fb:57:4b:57:09:ee:f4:65:0a:
                    f7:73:6f:ec:13:6f:b8:a4:94:a7:5e:14:d7:d2:89:
                    91:f5:aa:dd:fe:51:7c:9b:dc:35:23:86:5a:69:60:
                    43:0e:ef:ab:81:93:a9:ce:d5:1b:af:7c:fe:24:33:
                    a1:1d:4f:22:76:ab:2d:76:ff:3f:3f:57:4f:4f:c0:
                    59:51:43:65:8d:42:5a:7a:3e:98:e5:90:6b:f7:34:
                    65:e8:19:46:56:a8:4a:63:9c:07:4c:ff:7d:0c:88:
                    5e:9c:77:b3:6e:1e:e4:64:06:38:95:bd:5e:67:3f:
                    0f:95:5a:4a:0f:7f:e3:2d:ca:b9:e3:5e:fa:76:c6:
                    f3:c6:8f:04:b1:ba:56:6a:8f:6a:3d:e1:6c:e9:e4:
                    cd:1d:a1:42:41:62:44:9b:c1:e2:2b:ac:6e:84:ec:
                    e7:b4:23:87:b0:41:c9:4d:35:31:ca:22:91:47:90:
                    07:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:F5:B8:1D:61:05:7C:22:4A:29:F8:6F:6C:46:6A:2D:E4:86:BF:FD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.120.0/22
                IPv6:
                  2804:42a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267517

    Signature Algorithm: sha256WithRSAEncryption
         09:d7:45:80:5d:21:c5:55:f6:07:58:f7:f2:83:34:93:5a:75:
         e2:db:4c:b4:30:4a:4f:6d:0e:fb:03:31:fe:6a:44:14:c1:b0:
         d5:ea:15:38:a6:ab:9d:bb:0e:38:40:8a:b0:16:30:06:b0:37:
         bd:a3:1f:fc:6f:a0:b3:20:d6:4c:54:d3:5c:94:98:07:fe:ca:
         6a:97:a0:7e:58:32:b2:1f:1a:7f:52:5a:6b:db:6e:a8:48:20:
         5a:ec:74:41:5d:6f:a8:14:a3:98:55:bb:49:25:12:18:06:f4:
         79:6a:bd:d4:f3:bc:c4:fb:32:0a:87:3e:90:49:f3:87:73:22:
         d4:c6:37:ce:e2:bd:5c:e4:77:30:a6:ab:f7:08:0c:c5:5d:70:
         7d:0e:c7:84:13:33:3d:47:cb:66:76:b0:79:23:48:08:9d:07:
         97:40:55:9f:20:74:dc:78:d2:89:37:98:67:cd:13:b2:96:d5:
         92:ff:8b:31:6d:e8:e5:11:4e:a3:51:5c:99:a2:36:70:9c:53:
         cd:53:b3:f6:ed:7f:60:fe:42:17:11:49:3d:ee:de:3c:69:56:
         5e:ad:49:0b:30:63:5e:ed:55:09:de:2e:8a:57:1e:6b:63:aa:
         3d:1d:70:9c:3a:4d:f3:8b:82:ab:11:9c:05:c7:27:a8:33:be:
         9f:f4:46:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 19:07:42 2024 by rpki-client on console-fra.rpki-client.org