Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CB460E2365040598EFBCA2885EBA996AE5111964.cer
File:                     CB460E2365040598EFBCA2885EBA996AE5111964.cer (raw, json)
Hash identifier:          f7VsM89sX3SVXfQEoTV0EqUMaAscUsN2QHeiteaHngU=
Subject key identifier:   CB:46:0E:23:65:04:05:98:EF:BC:A2:88:5E:BA:99:6A:E5:11:19:64
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2AB5EDEF9FF448271CE74CA0C03F46A844B11763
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/CB460E2365040598EFBCA2885EBA996AE5111964.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Nov 2024 13:05:42 +0000
Certificate not after:    Fri 07 Nov 2025 13:10:42 +0000
Subordinate resources:    AS: 269102
                          IP: 45.178.236.0/22
                          IP: 2804:5f78::/32

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 06:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b5:ed:ef:9f:f4:48:27:1c:e7:4c:a0:c0:3f:46:a8:44:b1:17:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  8 13:05:42 2024 GMT
            Not After : Nov  7 13:10:42 2025 GMT
        Subject: CN=CB460E2365040598EFBCA2885EBA996AE5111964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:86:a0:34:c4:cc:90:98:9f:58:cc:b1:87:
                    07:ad:46:d9:56:e7:ca:ae:f2:e7:90:83:9f:8c:75:
                    1b:d4:38:c8:75:28:25:22:bb:b9:05:96:d2:64:e1:
                    6c:bf:e7:7d:e5:8b:93:04:32:f1:25:b2:d7:91:9b:
                    b4:c4:d0:aa:91:74:fe:aa:3b:ff:ad:44:f8:e1:1c:
                    4b:3b:27:82:d5:4c:21:33:e9:aa:26:ca:b6:54:a8:
                    0e:ab:70:22:cf:a1:09:f0:6d:12:78:6c:01:d9:94:
                    8c:23:c7:71:31:37:30:2f:b2:99:08:1d:c7:4c:d1:
                    2e:20:03:54:e3:e4:b6:86:a7:6d:69:0e:74:eb:fb:
                    78:98:77:32:ed:86:a3:eb:c1:0e:a1:8c:79:92:49:
                    a3:eb:34:ee:e5:33:4b:e2:a0:2d:b0:c0:c2:e2:36:
                    11:da:80:40:ef:9c:2d:70:2e:50:fb:07:c4:dc:33:
                    45:89:cc:19:7d:1f:25:4c:44:59:ab:91:92:00:dd:
                    2b:6a:fb:8a:ae:a4:25:88:00:c2:e2:be:fc:e5:b1:
                    b3:17:79:02:99:cf:fd:60:7b:53:cc:1d:29:1a:1a:
                    d6:1f:fd:00:d4:2d:58:c3:34:5b:61:85:24:e7:c1:
                    4c:7c:78:34:0e:0b:f3:0f:78:b3:0a:7b:89:b5:04:
                    2c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:46:0E:23:65:04:05:98:EF:BC:A2:88:5E:BA:99:6A:E5:11:19:64
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/CB460E2365040598EFBCA2885EBA996AE5111964.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.236.0/22
                IPv6:
                  2804:5f78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269102

    Signature Algorithm: sha256WithRSAEncryption
         55:f7:13:0b:8a:91:e2:9d:a1:4b:1c:04:f9:3e:c8:5d:3b:82:
         cf:bd:ed:0e:48:c7:0e:9b:30:24:ff:16:a0:b7:0a:26:17:0c:
         2f:72:4f:44:c4:28:8f:aa:68:bf:bf:f3:3b:ba:0c:0e:19:de:
         83:9c:76:71:f5:1e:cf:d7:03:41:1b:d9:bb:b2:36:bf:1f:05:
         f0:be:22:0f:ed:f9:49:b2:59:43:ba:ca:92:71:00:73:5a:fb:
         34:90:af:a3:1e:77:5b:c8:55:77:21:21:54:39:4f:e6:ad:c7:
         fb:ff:22:ec:28:16:44:7a:a1:4a:5c:25:42:9c:85:fa:a0:7f:
         ae:bf:89:22:54:70:eb:a0:e1:c7:9c:c0:6d:f1:67:bb:03:69:
         07:ca:c6:ea:5f:d6:23:d1:ee:bf:1c:3e:36:5e:00:b8:8a:07:
         d8:b4:93:f3:27:f6:64:e7:f5:a2:e4:39:17:c3:a9:77:dc:a3:
         0e:54:57:dd:a7:82:d3:f8:75:5c:e3:44:3a:d7:2d:9b:26:4b:
         87:28:da:33:37:9a:59:bf:c6:60:df:e7:29:85:4a:a4:7c:b6:
         1b:cd:b4:fa:21:0b:6c:f9:d5:d4:df:9f:27:73:0b:0a:c1:be:
         9c:24:d9:9b:96:50:0e:36:6a:7c:a4:39:81:81:71:7d:27:98:
         b1:63:76:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 08:42:06 2024 by rpki-client on console-ams.rpki-client.org