Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.cer
File:                     C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.cer (raw, json)
Hash identifier:          L3cMyp5j+1gThyCjjw1q8GVTbARqavci7ToZAZqFn/c=
Subject key identifier:   C5:45:47:AC:B7:5B:BB:CF:83:A5:C4:E8:CE:FE:0C:8E:A3:CD:B0:17
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D14558D02B53BFAAA403FE33CCD456BFE1FC48C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Apr 2024 11:33:59 +0000
Certificate not after:    Thu 17 Apr 2025 11:38:59 +0000
Subordinate resources:    AS: 265983
                          IP: 164.163.232.0/22
                          IP: 2804:40d0::/32

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 09:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:14:55:8d:02:b5:3b:fa:aa:40:3f:e3:3c:cd:45:6b:fe:1f:c4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 18 11:33:59 2024 GMT
            Not After : Apr 17 11:38:59 2025 GMT
        Subject: CN=C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:5f:04:7f:e9:af:18:81:e5:5e:35:f8:a4:
                    ce:68:fc:2b:92:33:01:32:29:50:bb:30:bf:d0:6b:
                    e7:e0:9c:05:57:00:df:e8:5e:f8:88:4e:b1:bf:8c:
                    c6:42:7a:dd:2b:f2:57:17:fe:b6:e4:01:c8:68:c6:
                    93:cd:16:01:a7:bb:3f:9e:7d:36:47:b7:2f:ec:89:
                    20:52:dd:6c:65:16:36:a6:0b:b6:6f:fb:b3:4f:da:
                    36:03:f1:49:89:d5:f7:25:c2:89:59:dc:e1:29:64:
                    3d:00:e1:4a:41:1c:cd:08:cf:91:98:80:c9:53:1f:
                    65:44:9e:7c:aa:96:64:88:3a:a3:76:61:ad:a2:e3:
                    1c:31:89:44:f9:a3:d5:9b:f7:bd:cc:ad:6a:f2:77:
                    36:d8:42:1a:14:15:32:90:dd:94:06:a5:5d:a3:84:
                    34:a3:c0:43:9b:0c:f8:36:e7:7b:cf:36:21:39:b3:
                    d2:0a:36:0b:20:b5:f8:8b:41:dc:b2:dd:8f:77:2b:
                    15:f5:6e:0a:76:b9:b4:bc:b2:e6:84:2b:b1:db:72:
                    ae:7f:e4:6e:90:57:74:08:40:8e:6d:bd:ea:f9:ee:
                    5d:e4:ef:89:61:46:f8:ed:d9:b3:a6:c3:3e:a3:fe:
                    9e:5c:b9:0b:95:2a:43:2e:86:1f:2e:1b:b0:57:c7:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:45:47:AC:B7:5B:BB:CF:83:A5:C4:E8:CE:FE:0C:8E:A3:CD:B0:17
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.232.0/22
                IPv6:
                  2804:40d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265983

    Signature Algorithm: sha256WithRSAEncryption
         6c:3a:9e:96:2f:48:5d:41:f7:96:c1:a8:2b:90:27:b9:0b:19:
         13:0a:12:25:82:20:b5:b7:20:26:11:e3:23:56:eb:4f:31:d2:
         ac:02:bd:8a:7b:75:93:ea:16:15:e3:e3:ae:62:aa:96:04:04:
         7d:2e:25:f9:b3:be:81:3f:64:cb:8f:d5:3c:44:ab:e9:2a:f5:
         c3:46:44:d2:bd:dc:46:07:5e:d0:a5:ac:da:aa:35:2e:69:70:
         81:5c:59:f7:e6:f2:d6:f7:2b:93:16:39:46:e4:15:ca:52:c6:
         54:9f:80:ab:41:c0:f5:6b:c0:cb:a7:de:4f:e3:65:75:85:71:
         48:c2:e9:c7:16:cd:56:8d:d7:a2:b0:82:87:94:0d:cd:68:07:
         c4:c4:a4:d5:ef:1e:f1:d1:41:02:50:6b:df:99:f7:91:cb:33:
         34:77:78:2d:36:9c:2d:40:87:a6:4f:85:52:db:33:e8:4c:0d:
         0a:ee:d4:3a:e4:ce:ec:2d:7e:f4:b4:a5:14:e6:16:fe:a2:b2:
         89:43:5d:d8:93:1f:bb:fe:1e:d5:91:fe:d6:6b:cf:bd:7c:c8:
         82:01:63:56:21:ce:40:e2:0c:8b:68:51:3b:3c:1a:05:0b:98:
         8b:f0:14:43:35:b0:6a:26:de:ff:16:5b:0c:59:e4:2a:36:20:
         9d:88:b4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 10:42:06 2024 by rpki-client on console-ams.rpki-client.org