Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DA21EA500A98E99F1E17CEB9A55A8F42A9345C62.cer
File:                     DA21EA500A98E99F1E17CEB9A55A8F42A9345C62.cer (raw, json)
Hash identifier:          V/QWk4A34H3gy6ugX97M7SjpttY21cmwbvZZNo/xMs4=
Subject key identifier:   DA:21:EA:50:0A:98:E9:9F:1E:17:CE:B9:A5:5A:8F:42:A9:34:5C:62
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       65E5D80666F40FC8E64082EEADABDCB159BB6019
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/1/DA21EA500A98E99F1E17CEB9A55A8F42A9345C62.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Aug 2024 15:00:19 +0000
Certificate not after:    Thu 31 Jul 2025 15:05:19 +0000
Subordinate resources:    AS: 265337
                          IP: 168.181.140.0/22
                          IP: 2804:2e4c::/32

Validation:               Failed, certificate revoked on Tue 06 Aug 2024 15:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e5:d8:06:66:f4:0f:c8:e6:40:82:ee:ad:ab:dc:b1:59:bb:60:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  1 15:00:19 2024 GMT
            Not After : Jul 31 15:05:19 2025 GMT
        Subject: CN=DA21EA500A98E99F1E17CEB9A55A8F42A9345C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:0b:9b:34:d4:6a:2c:a5:15:62:bf:dc:12:
                    81:d8:3d:47:d9:e7:de:f1:b7:23:26:d4:80:c3:65:
                    76:48:bd:03:c8:b1:7a:40:73:7f:82:2d:7f:a5:45:
                    27:3c:a2:87:d5:3e:bc:fd:af:fb:23:51:5f:aa:54:
                    a8:3a:88:93:52:09:7a:5b:b4:a7:3a:2a:42:68:c0:
                    a0:60:86:aa:b1:cb:46:b1:e3:7e:5f:b6:f0:ef:82:
                    94:b7:f4:fa:ae:6b:54:92:13:de:32:b9:ad:31:cd:
                    66:2b:99:4b:62:d4:73:40:ae:7d:93:fb:68:e9:c6:
                    7d:23:8b:bc:e5:2e:2e:f5:fd:e4:62:33:14:27:f5:
                    64:2c:85:58:02:53:ea:be:59:9d:69:5f:48:0d:aa:
                    ad:98:81:82:5a:f7:04:b8:35:25:34:cb:24:51:f3:
                    58:fd:09:31:21:2b:3c:5e:ec:36:a3:f2:61:90:fa:
                    a8:f8:31:15:65:e8:58:68:d4:72:71:a2:70:41:4e:
                    e7:a5:ee:36:b1:07:3b:ff:94:a4:48:4b:d1:c9:5f:
                    03:cd:62:a3:3e:1c:23:54:b4:69:4e:e0:ae:f8:57:
                    5c:78:b0:db:a5:2e:4b:dd:0d:b6:18:e8:4b:d6:71:
                    af:9b:50:fb:5a:68:19:35:09:38:56:59:50:c9:5c:
                    dd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:21:EA:50:0A:98:E9:9F:1E:17:CE:B9:A5:5A:8F:42:A9:34:5C:62
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/1/DA21EA500A98E99F1E17CEB9A55A8F42A9345C62.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.140.0/22
                IPv6:
                  2804:2e4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265337

    Signature Algorithm: sha256WithRSAEncryption
         5e:65:25:b1:70:3e:69:ce:01:70:d0:96:7d:a4:de:96:36:be:
         3e:2a:c5:70:16:ca:0b:0d:3a:3a:de:5c:d7:45:92:aa:0b:07:
         e6:dd:36:50:b3:8d:15:d2:ca:93:77:67:7f:0f:d1:84:ab:bf:
         ac:b8:5e:fb:9b:d7:4d:33:84:ec:41:e5:86:ed:32:46:78:22:
         8f:c4:24:70:50:28:25:8a:47:1b:2b:af:08:e9:e1:8c:97:3c:
         bc:8f:8c:3d:07:10:e9:2d:41:cd:39:8e:b1:d1:d0:a0:85:02:
         6e:08:be:76:7c:7d:b8:15:da:c5:c9:7a:95:f9:20:ec:cb:0d:
         55:c1:7a:57:fa:df:90:4c:94:cc:3f:10:cb:0f:a1:5c:5f:7b:
         68:36:2c:ef:32:06:9e:57:9c:0a:41:e5:6b:07:7e:83:c4:4f:
         61:2e:d8:07:5b:a3:67:a2:49:79:64:33:95:95:d7:a4:67:a9:
         12:d4:ae:9f:6e:bb:a4:fd:a9:9c:4d:2a:3a:04:dc:85:36:16:
         ce:e4:0c:f4:e8:14:7e:98:03:74:88:12:1e:15:92:4b:1f:ab:
         2d:81:16:05:16:2f:ab:a1:ea:b8:bc:36:a5:a9:f7:32:b6:9f:
         6d:cf:49:5a:12:aa:fe:6f:19:df:2d:2d:aa:bd:69:70:a1:e6:
         aa:55:3a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 18:22:43 2024 by rpki-client on console-ams.rpki-client.org