Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C9AC44E82605C0D3C3383877074774E2849AC537.cer
File:                     C9AC44E82605C0D3C3383877074774E2849AC537.cer (raw, json)
Hash identifier:          LXZCbYKy7B9n8EQEbVctKqEYFvO9GERzmkELnh0W+H8=
Subject key identifier:   C9:AC:44:E8:26:05:C0:D3:C3:38:38:77:07:47:74:E2:84:9A:C5:37
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       56E5C436F1A07FE656162441CE3529ED8D1DF923
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/C9AC44E82605C0D3C3383877074774E2849AC537.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:26:32 +0000
Certificate not after:    Thu 03 Apr 2025 09:31:32 +0000
Subordinate resources:    AS: 266314
                          IP: 170.238.52.0/22
                          IP: 2804:35e8::/32

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 05:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e5:c4:36:f1:a0:7f:e6:56:16:24:41:ce:35:29:ed:8d:1d:f9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:26:32 2024 GMT
            Not After : Apr  3 09:31:32 2025 GMT
        Subject: CN=C9AC44E82605C0D3C3383877074774E2849AC537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:1c:a4:d7:e0:e7:ae:ad:be:b6:85:bd:16:
                    fe:0d:cd:52:9d:14:f2:99:e5:7d:13:68:50:00:b1:
                    50:68:2b:69:4a:2e:39:94:37:4f:ed:6c:07:07:d3:
                    7a:25:e1:e5:7c:a1:03:24:af:46:15:6b:ee:2e:83:
                    ec:04:11:e8:e2:0e:91:dc:82:3a:64:a2:a9:e7:8c:
                    82:8c:87:7b:79:1b:e2:6b:c3:ea:44:de:23:9b:69:
                    44:3e:b5:4b:a6:d3:aa:e4:c4:b2:15:c7:47:c8:1c:
                    96:b6:c0:44:bd:8f:d8:d8:ab:f4:6c:5c:24:b9:8b:
                    a0:4d:07:5c:9e:ae:f5:bb:e8:c6:ab:f2:b9:4c:c7:
                    22:c8:a7:5d:73:3d:73:eb:3c:11:3f:25:4f:3d:b9:
                    c6:f4:49:ef:89:bf:31:20:c2:bd:a5:d6:c4:47:30:
                    6c:e4:95:4d:2f:32:7f:78:9d:f1:c1:9e:e9:f1:83:
                    e4:28:24:25:17:a4:a8:11:f4:2b:e5:c7:37:64:45:
                    d9:aa:a2:bb:26:51:ff:0e:15:84:54:ce:49:65:ee:
                    69:58:e0:a4:d5:f9:bf:aa:ba:4c:b1:f7:1f:a6:06:
                    6b:9b:a1:6c:9b:8c:86:54:e9:38:7d:2a:ec:b7:00:
                    01:73:35:ca:f0:76:07:1b:d6:be:d8:48:97:f4:32:
                    79:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:AC:44:E8:26:05:C0:D3:C3:38:38:77:07:47:74:E2:84:9A:C5:37
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/C9AC44E82605C0D3C3383877074774E2849AC537.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.52.0/22
                IPv6:
                  2804:35e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266314

    Signature Algorithm: sha256WithRSAEncryption
         a1:13:6b:09:be:a4:90:24:ec:8e:4b:f7:44:9b:97:2b:ea:b7:
         bd:fd:6b:88:56:46:21:6e:a5:7b:52:65:de:ae:f9:73:61:25:
         dd:02:77:a7:64:43:82:95:de:9d:d5:b5:6d:ca:19:3f:ae:63:
         d2:b9:86:ea:20:1b:cb:82:dd:ff:02:92:d5:88:ec:53:f4:9a:
         8b:92:31:4f:c1:c3:b0:97:0b:4b:26:bf:4a:6b:a6:ec:bf:c4:
         da:5e:2e:9c:7a:43:89:01:04:ed:6a:e1:b2:a0:e8:39:a9:75:
         9b:da:c7:b0:96:b4:24:43:51:5b:31:4b:52:d5:d9:05:d4:39:
         32:ab:97:9b:cf:92:20:cb:76:e5:da:71:fb:98:03:b8:b8:ca:
         1f:13:e9:1f:c2:a3:11:8a:5b:b7:52:00:6f:55:57:69:74:e9:
         ad:e5:bc:b3:2f:e5:5e:5b:29:6f:b6:53:4f:90:77:41:83:0f:
         ce:e9:94:c3:1d:0f:f5:a3:f3:1a:fc:fe:64:5a:19:eb:4f:93:
         48:1f:b7:5d:d7:19:36:66:ed:0a:f2:bc:b9:f9:5d:0d:47:34:
         1b:c2:9f:b4:08:9b:bf:a5:2f:88:0b:80:82:df:6a:11:f6:32:
         33:36:49:f0:ce:c9:21:91:60:04:23:db:79:0d:3a:00:f9:06:
         9b:49:2a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 07:22:21 2024 by rpki-client on console-ams.rpki-client.org