Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.cer
File:                     C4DAA6BCF09F41036B316EE76161BD3834E13C9E.cer (raw, json)
Hash identifier:          HF6cqTy+9kBMvx9gpDB3N0hAmTalHkzn//VgXE0phLU=
Subject key identifier:   C4:DA:A6:BC:F0:9F:41:03:6B:31:6E:E7:61:61:BD:38:34:E1:3C:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       51CBBE47F2E5955E589DCDA272F94088A9A3C6AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Aug 2024 18:25:36 +0000
Certificate not after:    Sat 09 Aug 2025 18:30:36 +0000
Subordinate resources:    AS: 268659
                          IP: 45.165.64.0/22
                          IP: 45.165.88.0/23
                          IP: 2804:5494::/32

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 18:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cb:be:47:f2:e5:95:5e:58:9d:cd:a2:72:f9:40:88:a9:a3:c6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 10 18:25:36 2024 GMT
            Not After : Aug  9 18:30:36 2025 GMT
        Subject: CN=C4DAA6BCF09F41036B316EE76161BD3834E13C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a7:58:3f:a8:42:1f:4b:4e:c9:ef:10:d3:9c:
                    62:ef:41:ef:c4:b4:7b:f2:b3:b2:70:87:44:2b:f1:
                    4b:37:22:e1:ef:aa:3f:f3:cc:3f:a8:69:8e:e4:8b:
                    89:95:e9:41:30:58:66:aa:76:3d:e2:64:e8:0a:bb:
                    70:84:84:50:6e:58:8a:0c:df:d8:fd:cd:5d:7b:b4:
                    ca:72:41:49:85:d0:2d:3d:2e:1c:b9:b0:ce:33:a4:
                    a3:d0:75:d2:a1:e9:30:93:fc:91:a6:5d:10:fa:9c:
                    43:16:88:8b:55:80:48:74:2b:e4:9c:18:a7:37:33:
                    05:3e:74:f3:fc:f8:a8:96:6d:5f:94:63:60:52:3e:
                    9d:09:79:52:91:f9:07:40:a8:3d:0e:b1:97:2b:10:
                    3a:49:8f:29:ad:e7:c5:4a:20:3b:ed:7d:f6:d0:69:
                    4f:ca:9c:0b:fa:7a:12:d5:96:ff:32:ac:a4:39:4a:
                    b1:6d:5b:da:7e:5a:69:9f:ee:0e:3e:1d:16:b0:e3:
                    fc:47:72:4b:25:ae:da:00:2d:83:0c:69:2c:c7:f7:
                    ec:5d:fe:22:f9:ca:30:f8:1e:75:95:0a:db:da:d8:
                    b0:ea:4b:bb:56:6c:ff:43:6f:02:3a:39:4d:84:16:
                    41:32:2c:43:a2:ca:fa:98:43:f4:fe:81:6c:e5:77:
                    2a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:DA:A6:BC:F0:9F:41:03:6B:31:6E:E7:61:61:BD:38:34:E1:3C:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.64.0/22
                  45.165.88.0/23
                IPv6:
                  2804:5494::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268659

    Signature Algorithm: sha256WithRSAEncryption
         7b:55:48:08:44:a6:98:6f:b3:86:2d:c1:48:fd:7a:a5:44:bc:
         62:42:f4:3d:97:9a:cb:82:05:4e:2d:f7:71:30:20:fa:b8:fd:
         21:d3:77:f7:9c:a7:22:80:d5:61:5a:f3:1d:05:8f:c4:b5:e1:
         f3:30:53:03:91:b4:8e:12:1b:37:a0:5d:7b:3c:6f:2b:d8:e9:
         7e:96:9a:7e:eb:d0:2c:49:3b:2c:a2:bc:97:8b:4a:de:90:3d:
         19:3d:f2:23:dd:b2:02:5c:a9:3a:48:15:e9:02:36:04:2d:91:
         8e:61:2c:1d:fd:b3:2f:4a:3f:b8:fd:c7:94:df:77:5c:5c:91:
         60:0b:d6:41:61:c9:eb:27:64:c1:9b:a3:19:dc:01:d2:2a:4d:
         5e:bc:17:31:34:9b:1e:04:b8:c3:f3:da:f2:61:d4:5b:f3:d4:
         5d:2a:2f:2c:2c:0e:f7:e2:70:e2:8c:4e:84:c8:40:e4:87:ca:
         d6:96:9d:17:cf:7d:35:4b:5a:a7:49:4e:19:48:80:37:50:45:
         97:62:c4:13:8b:0a:8b:c2:58:e2:84:e0:8a:19:d8:4b:e0:e2:
         3d:8e:b5:24:68:09:e0:84:e3:63:d2:70:b7:8f:70:f3:06:eb:
         b8:9a:29:52:8b:5f:00:44:42:f8:11:20:e0:f2:f0:01:f5:d3:
         46:15:f7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 21:14:48 2024 by rpki-client on console-fra.rpki-client.org