Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ACC640880752C6C701BBAD7E1B2D0C3270F5E083.cer
File:                     ACC640880752C6C701BBAD7E1B2D0C3270F5E083.cer (raw, json)
Hash identifier:          gWo1EjGJb9ohtTqqM8qKnudAZqfgibl9JyFtBmt50AE=
Subject key identifier:   AC:C6:40:88:07:52:C6:C7:01:BB:AD:7E:1B:2D:0C:32:70:F5:E0:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4BCA749F6BA132A39C01B39AE5E883086C4836E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/ACC640880752C6C701BBAD7E1B2D0C3270F5E083.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Sep 2024 20:07:26 +0000
Certificate not after:    Thu 18 Sep 2025 20:12:26 +0000
Subordinate resources:    AS: 269638
                          IP: 45.190.132.0/22
                          IP: 2804:6798::/32

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 22:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ca:74:9f:6b:a1:32:a3:9c:01:b3:9a:e5:e8:83:08:6c:48:36:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 19 20:07:26 2024 GMT
            Not After : Sep 18 20:12:26 2025 GMT
        Subject: CN=ACC640880752C6C701BBAD7E1B2D0C3270F5E083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:db:76:62:67:42:a6:21:60:6d:f3:71:0f:16:
                    1a:ff:59:ff:43:14:62:da:25:f3:da:5f:14:87:91:
                    f3:c3:c2:c4:b4:f6:99:c2:0b:e3:a7:ad:58:5d:d2:
                    6c:53:9d:28:81:d7:e0:e4:19:43:f8:ff:65:74:8c:
                    16:e2:ca:6a:85:97:47:67:f3:84:94:71:9d:76:a5:
                    d9:22:fc:ec:c4:bf:16:3b:36:66:a4:5f:4d:e5:76:
                    c2:cd:90:61:79:da:2a:56:b0:67:80:ef:af:fc:e6:
                    d1:e4:cc:b3:0e:d3:88:4c:4c:97:3f:c4:7d:69:fb:
                    b6:19:0e:6f:8b:ae:28:d6:ed:d2:6e:0b:62:ad:b0:
                    b0:13:05:b0:09:a8:1b:f1:07:09:c7:e1:a4:70:02:
                    aa:db:31:55:5e:f7:92:8c:fe:26:0d:c2:72:4d:55:
                    15:53:67:51:ae:ea:33:26:68:50:3d:e2:19:e5:4e:
                    10:c3:f6:43:30:2a:77:e1:cb:75:4f:5a:84:65:bc:
                    56:7d:67:a0:b7:b5:29:6b:e5:4a:ac:06:71:96:d0:
                    cb:f7:13:44:76:dd:dd:96:38:ad:19:53:47:19:f2:
                    5b:9a:5d:a7:f2:90:7a:0d:1e:59:0e:6a:29:17:c1:
                    ce:ec:3c:ab:da:39:8f:63:8f:33:1f:ef:de:01:52:
                    72:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:C6:40:88:07:52:C6:C7:01:BB:AD:7E:1B:2D:0C:32:70:F5:E0:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/ACC640880752C6C701BBAD7E1B2D0C3270F5E083.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.132.0/22
                IPv6:
                  2804:6798::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269638

    Signature Algorithm: sha256WithRSAEncryption
         02:aa:69:44:82:ee:fa:7f:f3:68:6d:53:59:b6:48:83:b8:2c:
         98:fb:0e:44:02:69:cb:d3:c2:8a:c9:92:2c:f9:80:c4:4b:03:
         c9:68:71:4d:0f:3d:fc:1d:cf:3e:b4:dc:74:df:cc:1c:b0:05:
         f0:28:1e:e3:e1:33:0e:52:04:0e:c2:cd:4c:12:df:93:bb:46:
         91:6c:1a:d7:03:e9:e3:c5:f8:ca:19:03:63:00:22:90:b0:8f:
         f3:26:40:ec:74:95:80:1d:28:a8:19:29:73:fe:57:1b:6f:cc:
         06:06:b7:7c:f2:71:b6:ce:59:92:5a:e0:ed:b6:88:3b:28:aa:
         ee:47:9d:fe:91:15:b0:80:f4:d5:46:f8:56:43:c0:11:63:73:
         cb:0d:61:ea:19:b7:60:7c:5c:8a:7d:94:cf:d8:5a:06:b0:03:
         93:10:db:e7:3a:91:fc:31:76:ea:d0:47:77:ba:7c:e8:d3:90:
         60:55:01:32:0a:d2:e8:78:1e:70:66:f1:7e:51:07:6d:a3:91:
         91:93:ef:b4:8c:7c:12:af:24:c1:cd:60:38:3e:87:f5:e3:2b:
         cc:16:5a:44:9e:1f:47:59:2b:de:f0:fd:64:29:23:5a:9c:d2:
         35:36:23:79:d4:cf:ff:c8:de:c1:c8:67:24:58:7e:da:ec:89:
         d8:d8:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 02:31:55 2024 by rpki-client on console-ams.rpki-client.org