Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.cer
File:                     C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.cer (raw, json)
Hash identifier:          tATyPbLulkccF5Vb8PQR4Ke0bRqb2ED74/NdGKZBEaM=
Subject key identifier:   C5:4D:E3:30:22:CD:4D:3A:53:CE:C7:0A:D2:6E:F7:C0:CA:09:12:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       33EE38C7D88B4B060F862111D6DD25835F2215E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 13 Jul 2024 22:14:30 +0000
Certificate not after:    Sat 12 Jul 2025 22:19:30 +0000
Subordinate resources:    AS: 267578
                          IP: 45.70.164.0/22
                          IP: 2804:4398::/32

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 09:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ee:38:c7:d8:8b:4b:06:0f:86:21:11:d6:dd:25:83:5f:22:15:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 13 22:14:30 2024 GMT
            Not After : Jul 12 22:19:30 2025 GMT
        Subject: CN=C54DE33022CD4D3A53CEC70AD26EF7C0CA091205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:e3:1b:a2:98:c0:28:22:4a:9d:1f:8e:b8:
                    0c:01:03:50:86:33:1a:64:08:08:70:dc:94:07:a0:
                    77:99:9d:d7:b0:36:e4:23:51:45:a4:0b:6b:b5:cb:
                    58:c9:ee:c4:f5:bc:96:26:ec:db:90:05:c6:69:89:
                    57:7b:2e:86:8b:85:fa:9f:7f:0b:51:26:93:09:e1:
                    de:cb:1d:98:b9:a3:d0:ce:0f:f1:d7:3d:cc:db:ea:
                    c4:16:68:d0:54:c2:9f:4c:57:70:05:9d:e2:db:84:
                    1f:b3:34:31:ef:ca:80:a2:a1:da:36:b5:a4:89:61:
                    ce:04:ef:f7:c0:bc:46:6b:ff:70:61:8a:29:f8:37:
                    37:27:e5:f7:d6:18:8a:98:d1:68:d1:fd:7e:c9:1b:
                    3d:00:7b:d5:71:7d:a4:f7:7c:d4:71:07:c8:94:60:
                    d1:d7:66:b0:75:4d:ee:c4:81:a5:2e:7c:7b:72:2b:
                    0f:e8:6a:05:75:68:50:45:62:a7:07:da:96:73:eb:
                    82:17:d8:7d:86:4b:24:a2:01:b0:69:30:30:33:35:
                    f7:c5:4a:f1:74:9e:a5:5a:a9:f3:2e:70:64:06:65:
                    4e:29:30:2e:6f:ab:e2:27:70:be:1b:08:6a:87:9d:
                    21:b9:60:c4:5f:c4:06:45:2a:5f:66:20:95:88:53:
                    3f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:4D:E3:30:22:CD:4D:3A:53:CE:C7:0A:D2:6E:F7:C0:CA:09:12:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.164.0/22
                IPv6:
                  2804:4398::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267578

    Signature Algorithm: sha256WithRSAEncryption
         06:f8:19:33:13:de:76:84:53:6f:98:50:2c:eb:2c:d8:83:33:
         8e:69:52:33:e5:a8:5a:ec:a6:75:e0:b1:08:c7:1c:cd:19:53:
         7e:39:1f:d7:d2:e2:58:27:b9:63:79:86:7f:97:f0:65:86:7e:
         b0:97:bd:0c:b2:e6:8b:f4:3d:6c:d4:f2:c2:2c:25:d6:e9:e5:
         e4:e9:ff:7c:f8:9a:1d:4c:eb:2d:50:15:63:91:a1:b3:4d:f0:
         29:e7:95:51:7e:57:81:4d:e1:78:80:f8:f6:4b:db:09:06:8c:
         17:d9:47:cb:f1:0c:ab:16:2d:a0:30:ee:a1:bf:4c:8e:49:cd:
         1b:93:b9:b0:e1:b9:58:61:e7:89:72:24:42:ff:51:1a:90:47:
         32:bb:ee:85:e2:d8:c7:a3:1a:8a:85:f8:0c:ee:82:14:56:88:
         9b:b5:fb:3c:3e:40:6f:cb:31:49:d5:7e:95:15:83:e2:22:8e:
         04:91:91:3e:18:4d:d8:d1:a9:ab:f6:6f:76:4a:61:33:f2:1f:
         2c:33:de:61:7b:8f:e6:b3:cc:30:fc:ef:d7:5c:9f:28:86:52:
         8a:73:3e:59:de:51:7c:d1:b1:b5:c9:10:b9:57:da:d5:c3:d3:
         4d:dd:3e:42:6f:0d:b2:1c:37:38:4a:f1:ea:a4:80:a6:f2:ee:
         d8:f2:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 11:00:24 2024 by rpki-client on console-fra.rpki-client.org