Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer
File:                     ACCC0F5DCF06D085FDFED520EB02F87054728167.cer (raw, json)
Hash identifier:          ISKXvgXnLbNGbwXs984AeKB99gv68pjN4/k/5/clHo0=
Subject key identifier:   AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       659B0047B5EA3116FF050FDD0FF200007AEEB101
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/ACCC0F5DCF06D085FDFED520EB02F87054728167.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Jul 2024 20:59:45 +0000
Certificate not after:    Thu 24 Jul 2025 21:04:45 +0000
Subordinate resources:    AS: 28587
                          IP: 177.128.184.0/21
                          IP: 2804:da0::/32

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 22:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9b:00:47:b5:ea:31:16:ff:05:0f:dd:0f:f2:00:00:7a:ee:b1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 25 20:59:45 2024 GMT
            Not After : Jul 24 21:04:45 2025 GMT
        Subject: CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:f2:93:dc:0e:c1:b8:17:19:6b:46:24:51:
                    71:f7:1b:4d:dd:ba:bd:4c:62:7b:61:5c:0a:79:44:
                    f2:8b:04:ec:01:ad:1d:da:87:30:1c:b3:0f:cd:d9:
                    3f:87:59:18:d7:4b:39:b1:95:36:a0:b8:47:4d:e2:
                    17:96:a8:f3:3a:5d:a5:0e:ef:fc:f7:e2:11:f9:88:
                    a8:63:6e:99:a3:a6:d9:6e:48:92:98:af:8c:af:bd:
                    bc:6d:68:2e:28:26:cd:73:28:35:66:f4:a8:53:74:
                    cf:7e:2a:05:b5:38:63:06:31:e4:a6:1d:92:fe:51:
                    70:19:f4:83:0a:42:1a:51:88:53:e2:60:05:37:33:
                    c8:29:1e:fd:7e:3e:89:c5:bd:20:13:35:c9:39:b0:
                    9a:1c:5c:5f:eb:e3:8f:93:3e:cf:4b:3b:3c:2e:2f:
                    19:a7:47:60:ab:4d:2a:86:95:34:14:0d:3c:d2:36:
                    c8:fa:98:4f:5c:c9:0a:8b:47:2d:a7:b8:c4:c2:f0:
                    44:0c:82:09:8c:55:e0:26:16:e0:02:76:0f:28:e0:
                    9a:86:e4:04:63:87:52:79:3c:4e:38:32:79:8f:f6:
                    58:9b:91:9e:ae:a6:e2:2e:c6:f0:10:c3:2b:f8:ea:
                    20:31:59:cc:4f:41:a3:04:f7:98:fa:b0:48:75:b1:
                    fe:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/ACCC0F5DCF06D085FDFED520EB02F87054728167.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.184.0/21
                IPv6:
                  2804:da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28587

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:c0:8d:21:23:4f:a9:51:9e:cc:ad:41:52:d8:e5:e4:b0:
         a3:46:cf:51:2d:f6:1b:2f:b6:61:31:d4:dc:a4:71:db:13:f5:
         1b:33:3d:e4:bf:4c:36:00:87:da:e1:4a:d5:06:e0:57:01:1e:
         d4:75:2b:db:a8:b8:4d:0b:57:66:cf:2e:43:a1:f8:ef:fd:cd:
         4a:ca:b5:de:60:21:d7:55:f0:3d:99:7c:1e:f3:c0:ec:5c:13:
         51:a6:94:07:11:c0:8f:6c:dd:0b:25:b1:8e:02:59:3b:3d:77:
         a6:47:8f:c8:1c:02:2e:55:5d:69:3d:b9:76:ca:10:ee:9e:ea:
         eb:ff:a6:db:ea:8e:c9:95:b8:9d:e1:ec:4a:14:63:ef:82:66:
         77:14:65:e0:1e:c9:4f:87:31:f4:65:64:2c:c9:1c:86:09:7c:
         0e:a1:2d:1a:ad:c1:50:17:4c:7d:7d:a4:3e:54:e1:6f:71:40:
         03:20:58:46:a9:a4:3d:10:f9:ad:79:2e:94:7f:8b:fb:dc:3d:
         64:66:46:d3:1b:82:dd:f1:a2:43:cc:95:e7:0a:cf:ba:89:8e:
         42:c7:1d:5c:a7:28:38:ad:bb:24:cf:61:e1:f9:1f:00:62:bf:
         d9:10:00:01:4f:93:2f:c2:26:d4:98:33:59:36:c3:a8:c5:98:
         b0:46:ac:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 00:24:17 2024 by rpki-client on console-ams.rpki-client.org