Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer
File:                     C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer (raw, json)
Hash identifier:          zdkSlyHwKTuwepaAqvU1XwnIfARYTu8V4B5erBoZUCU=
Subject key identifier:   C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       518EBF9E1E69146C2CF68EA08A525F3FCFA05E0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Oct 2024 20:08:08 +0000
Certificate not after:    Thu 16 Oct 2025 20:13:08 +0000
Subordinate resources:    AS: 271668
                          IP: 187.111.120.0/22
                          IP: 2804:7f20::/32

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 20:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8e:bf:9e:1e:69:14:6c:2c:f6:8e:a0:8a:52:5f:3f:cf:a0:5e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 17 20:08:08 2024 GMT
            Not After : Oct 16 20:13:08 2025 GMT
        Subject: CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b0:b9:6a:50:d5:16:46:6e:4f:16:53:9f:19:
                    a7:d0:df:7c:af:53:5a:30:b5:26:8e:bb:da:0a:96:
                    0a:a4:bf:e8:ad:b9:13:1b:88:c7:79:19:43:c2:5d:
                    b8:20:c7:4c:4d:22:4e:46:52:5d:96:07:81:29:8b:
                    a1:28:17:28:5e:5c:80:18:75:3b:df:b7:00:cd:47:
                    e6:53:f5:e3:5f:b5:c7:ec:d1:56:b3:e3:99:a7:3f:
                    11:ba:5c:b1:e5:2a:89:bd:66:0e:06:85:cc:a8:73:
                    b6:93:d5:28:53:c4:29:9e:b6:ff:7d:b8:4b:5e:84:
                    41:3f:0a:38:e7:ae:f8:ae:fd:81:55:bb:05:15:99:
                    7c:24:da:06:be:a9:b6:ba:b1:35:f5:3e:bc:73:ed:
                    e9:f4:8f:f7:73:00:da:56:6f:48:ee:0a:45:d8:a8:
                    63:49:0e:a2:28:a5:95:95:29:1d:ef:e8:72:7c:a8:
                    b1:f3:e4:81:cf:8b:df:17:dc:ff:13:96:ab:65:41:
                    10:49:c1:8a:d0:27:5d:26:b3:72:2c:e6:64:e9:56:
                    d4:e4:c6:8a:ed:09:46:0b:a6:21:cb:5a:78:a3:2d:
                    fa:3c:b6:5d:66:f2:69:c9:a4:84:b2:7e:68:ab:43:
                    83:71:29:6a:38:e2:d9:6c:7d:66:ad:7e:fe:fb:11:
                    02:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.120.0/22
                IPv6:
                  2804:7f20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271668

    Signature Algorithm: sha256WithRSAEncryption
         bd:25:93:fe:8a:2b:43:62:47:f5:8a:c6:82:d9:e6:73:d9:18:
         3e:a7:e9:cd:6f:c8:42:8d:4d:cd:b3:17:1f:71:cb:e8:44:73:
         60:40:82:c2:79:b8:9d:e3:3c:f3:cf:88:cf:8c:4d:23:b7:52:
         a4:00:79:7f:34:67:f4:9e:24:c8:f2:7d:9c:91:28:fb:d8:e7:
         d7:84:c0:54:95:46:97:59:ed:7a:4a:39:ea:1d:73:0f:33:3a:
         7a:be:f1:ed:35:57:c7:ea:42:62:4b:7d:5e:8f:eb:5f:99:ce:
         c4:68:da:1e:b5:68:c2:7a:1e:ce:e5:ba:e3:55:4d:d6:c3:62:
         5b:8a:ee:11:95:db:6a:7f:68:2d:0a:e3:aa:4d:84:8b:62:0a:
         ff:e1:2d:bd:04:9e:96:33:5c:4d:29:8a:99:27:4a:f9:26:29:
         e9:40:f1:13:11:6b:f5:92:bb:65:cc:dc:a5:83:92:77:24:eb:
         d4:91:9d:ce:40:74:7d:a2:a4:51:b8:05:b0:9a:c3:7b:e5:eb:
         48:f1:3f:4d:74:c9:bd:ba:83:fb:51:75:53:e8:9d:9f:27:4c:
         22:a9:35:40:76:13:7e:5f:e4:02:ff:4d:eb:e1:68:5f:d9:fa:
         ee:50:f6:87:f4:38:e5:8f:a5:46:c5:13:e7:67:2a:b3:fa:f9:
         73:a7:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 23:22:28 2024 by rpki-client on console-ams.rpki-client.org