Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C489597740A9E4C1603DE92C6C64FEAA487A010E.cer
File:                     C489597740A9E4C1603DE92C6C64FEAA487A010E.cer (raw, json)
Hash identifier:          8souwdaF2+gt0tuVPEpi8LtjoqfCufc7h5TJvyvMFwo=
Subject key identifier:   C4:89:59:77:40:A9:E4:C1:60:3D:E9:2C:6C:64:FE:AA:48:7A:01:0E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       70E041B71882EE0BE2145FE0A9E4EA3B29811E2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/C489597740A9E4C1603DE92C6C64FEAA487A010E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Aug 2024 12:55:41 +0000
Certificate not after:    Mon 18 Aug 2025 13:00:41 +0000
Subordinate resources:    AS: 269048
                          IP: 45.178.224.0/23
                          IP: 2804:5ea8::/32

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e0:41:b7:18:82:ee:0b:e2:14:5f:e0:a9:e4:ea:3b:29:81:1e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 19 12:55:41 2024 GMT
            Not After : Aug 18 13:00:41 2025 GMT
        Subject: CN=C489597740A9E4C1603DE92C6C64FEAA487A010E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:b7:59:2e:ae:d7:a5:a5:70:6b:16:94:7f:
                    b0:e1:03:f2:a3:2a:0e:54:08:12:5b:10:4d:18:f1:
                    14:23:db:5a:c6:34:17:39:ad:79:54:ae:48:e0:8e:
                    63:10:fc:61:ac:e5:cb:08:ea:63:c9:4d:62:22:a9:
                    04:9f:38:07:4c:78:01:ca:56:a4:51:74:6f:8c:c6:
                    21:02:99:6a:a2:c6:67:55:69:68:23:20:f5:72:5d:
                    e9:c3:80:b7:f3:bb:2e:5c:66:d0:c0:64:60:9b:b2:
                    fb:79:be:2c:ef:46:1b:cd:b0:f9:9f:05:74:76:03:
                    db:8a:66:c8:4f:58:b5:94:ec:d8:78:ad:2d:96:f2:
                    dc:00:6e:03:2d:cd:1a:88:63:ce:1e:5d:66:1d:bc:
                    d1:b9:88:ec:98:18:39:4d:9b:6c:74:a5:88:84:67:
                    c4:06:62:37:02:4b:5b:16:c4:b4:41:ba:42:0d:c9:
                    02:57:2f:92:63:02:95:8e:35:52:5a:7b:63:1a:3b:
                    a9:67:45:0b:8c:ae:f5:9d:24:67:28:95:ad:79:96:
                    94:54:f2:2b:3c:2d:52:0e:26:e2:8d:67:47:59:db:
                    ba:f7:8c:40:6b:fd:53:1c:54:fe:a1:55:5f:42:cd:
                    eb:90:cc:65:5b:8a:7d:f8:37:4f:f4:d1:b6:08:11:
                    77:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:89:59:77:40:A9:E4:C1:60:3D:E9:2C:6C:64:FE:AA:48:7A:01:0E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/C489597740A9E4C1603DE92C6C64FEAA487A010E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.224.0/23
                IPv6:
                  2804:5ea8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269048

    Signature Algorithm: sha256WithRSAEncryption
         30:35:45:78:1b:76:f5:f1:b3:71:b1:0a:17:aa:21:9a:1f:e3:
         46:56:41:82:ea:2e:4c:be:eb:d1:77:91:76:9c:5c:3a:c4:cc:
         d0:b2:11:0b:96:52:ba:2f:f9:42:f6:26:a3:88:d9:59:01:89:
         6d:60:3e:f0:6f:a8:30:7e:01:7e:4d:3f:5a:5d:bf:38:97:63:
         4a:d3:0f:52:d3:2a:06:60:1e:0f:14:e2:02:91:df:be:57:0b:
         3d:71:8d:96:18:9f:47:2e:cf:26:9d:ee:d8:7b:2a:bc:3f:f0:
         53:e8:7b:cd:b2:ec:53:09:23:aa:e4:07:6b:6b:66:60:e1:68:
         c2:88:60:6a:54:91:be:59:86:bc:3f:7f:c3:f1:bd:b5:a6:aa:
         14:52:98:d4:96:f5:f9:43:23:b6:f5:ad:82:f0:d3:48:8c:18:
         ed:fd:4b:e8:12:f9:ec:84:93:2e:42:5e:42:6a:36:b6:d9:f7:
         fa:c3:55:de:34:65:6f:ce:a2:ad:b5:97:a5:c4:03:20:bc:80:
         a5:4c:30:65:e8:bf:06:a7:a5:0d:8c:5a:0f:af:d5:ef:e8:ca:
         26:1c:c5:f3:70:a6:9d:20:31:15:7d:47:67:de:0b:b1:be:5b:
         9c:a6:e6:c9:94:90:25:72:9f:77:47:5f:82:c0:52:ce:81:95:
         c0:2f:19:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:31:46 2024 by rpki-client on console-ams.rpki-client.org