Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DE277BF4D8B6A3CC2AB0DA195A772F7ABAD465EE.cer
File:                     DE277BF4D8B6A3CC2AB0DA195A772F7ABAD465EE.cer (raw, json)
Hash identifier:          +Op3V5U87NQ32PhGsMnKUg4Apa/5w3Su2yOZ6gkxgVU=
Subject key identifier:   DE:27:7B:F4:D8:B6:A3:CC:2A:B0:DA:19:5A:77:2F:7A:BA:D4:65:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       514FD842B5C9C81E24E448C3F82931ACDB29D5B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2Qf4hkxM8wWVVKJvmT1oHCGXKUJo5hy5oHYMT7f3msoC/1/DE277BF4D8B6A3CC2AB0DA195A772F7ABAD465EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2Qf4hkxM8wWVVKJvmT1oHCGXKUJo5hy5oHYMT7f3msoC/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 05:23:00 +0000
Certificate not after:    Thu 03 Apr 2025 05:28:00 +0000
Subordinate resources:    AS: 266990
                          IP: 45.226.84.0/22
                          IP: 2804:4674::/32

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 03:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4f:d8:42:b5:c9:c8:1e:24:e4:48:c3:f8:29:31:ac:db:29:d5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 05:23:00 2024 GMT
            Not After : Apr  3 05:28:00 2025 GMT
        Subject: CN=DE277BF4D8B6A3CC2AB0DA195A772F7ABAD465EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:36:d1:12:47:2f:6c:91:d9:ac:67:7d:9d:
                    d3:30:f2:ac:a5:13:e4:3d:4b:05:02:26:30:c6:17:
                    43:1d:44:c1:36:ee:31:0a:5f:43:14:8d:f3:6f:9c:
                    cd:d2:84:b6:4d:ac:be:b2:12:13:49:df:2c:37:97:
                    85:7b:e5:12:48:e4:be:a6:d4:36:42:aa:d9:4c:9d:
                    82:07:0b:fe:24:05:58:0d:42:d2:2c:41:cf:f3:b3:
                    ee:b9:58:3b:94:b5:74:d7:78:9a:83:4b:24:74:68:
                    9f:b3:7b:f6:70:44:dd:ce:a0:3b:a4:a4:ca:1a:6c:
                    7c:fb:19:dc:fe:76:99:2f:2e:39:e3:22:ab:69:72:
                    4d:9d:32:c5:90:b9:b5:a0:2b:cb:22:d0:44:c3:03:
                    24:9f:2b:c9:c4:39:76:fd:2a:89:dd:7f:f6:d6:5c:
                    a7:c2:64:8c:db:a8:da:1e:4e:1e:74:2e:fc:81:c8:
                    df:5e:2a:93:c0:7d:ba:5b:d2:3e:fb:a7:33:e6:0f:
                    96:b4:da:78:c7:dc:f9:cb:1e:78:2b:00:44:7d:39:
                    4e:c8:2f:21:16:c9:cf:93:87:59:36:89:7d:ba:39:
                    5d:bf:60:3c:66:ec:fd:27:60:6d:5f:c1:0a:be:e9:
                    b9:ea:79:0a:aa:df:66:00:d1:1e:7d:7d:77:6d:47:
                    59:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:27:7B:F4:D8:B6:A3:CC:2A:B0:DA:19:5A:77:2F:7A:BA:D4:65:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Qf4hkxM8wWVVKJvmT1oHCGXKUJo5hy5oHYMT7f3msoC/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Qf4hkxM8wWVVKJvmT1oHCGXKUJo5hy5oHYMT7f3msoC/1/DE277BF4D8B6A3CC2AB0DA195A772F7ABAD465EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.84.0/22
                IPv6:
                  2804:4674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266990

    Signature Algorithm: sha256WithRSAEncryption
         8c:49:4b:ca:c8:2f:c3:0d:49:79:61:e2:f9:37:b3:f0:67:0b:
         5c:33:d9:29:e8:48:c9:13:8b:96:b5:f5:b2:f1:5d:c5:4c:b9:
         58:af:ed:ce:13:20:08:b8:46:c9:ac:a7:ad:61:37:65:70:5d:
         ee:d2:77:46:f6:9a:ee:14:77:34:68:43:a6:46:8f:a7:2f:39:
         e2:36:7c:16:1f:22:ce:aa:03:98:e9:31:e6:77:fd:66:b9:d1:
         5f:20:c4:fd:1d:54:33:0a:d9:ab:e7:86:59:ac:52:87:e9:85:
         71:58:31:8a:0c:ad:24:4d:eb:ce:3b:0c:5b:b8:1d:8a:5a:fe:
         82:78:c4:1e:6b:47:fc:d7:9f:24:3c:40:f4:a5:3c:20:11:93:
         f8:fa:5d:fe:a4:8f:d2:a0:88:b6:ae:d8:46:49:24:da:6d:46:
         e4:72:95:cd:33:fe:42:40:07:3e:9f:87:42:1d:52:7f:ed:1d:
         b8:30:13:c8:28:a5:83:b4:a3:13:1b:c8:e3:51:f8:ac:32:65:
         4c:f4:38:e6:9c:e2:77:4b:d4:45:bb:ac:be:bf:67:c4:ca:94:
         e4:3c:f2:3b:ea:20:f2:2d:d4:86:1d:ee:43:ec:1d:c9:25:f5:
         98:cb:a2:a8:b8:14:47:78:3e:3d:48:8e:42:ca:bc:bc:41:c8:
         d1:1a:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 07:36:07 2024 by rpki-client on console-ams.rpki-client.org