Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5.cer
File:                     DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5.cer (raw, json)
Hash identifier:          nEUrOyrdXdfat7NRkGxdFUtHpSUhyhKSlayE83Q7tF0=
Subject key identifier:   DE:FA:EE:EC:3A:F4:A8:5A:F4:5F:80:A9:72:D2:45:2B:90:7D:5D:F5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3AC8083FB1CDD5B6A2C19603D8DE86357B0A5CBC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/1/DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 04:00:06 +0000
Certificate not after:    Thu 03 Apr 2025 04:05:06 +0000
Subordinate resources:    AS: 266054
                          IP: 45.4.40.0/22
                          IP: 2804:39d8::/32

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 04:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c8:08:3f:b1:cd:d5:b6:a2:c1:96:03:d8:de:86:35:7b:0a:5c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 04:00:06 2024 GMT
            Not After : Apr  3 04:05:06 2025 GMT
        Subject: CN=DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:65:62:73:88:a8:7f:e7:3c:9a:7c:a0:f0:a9:
                    d8:0c:be:8b:77:53:6e:b7:76:36:b7:9c:52:cb:67:
                    ea:5a:c6:13:2e:6d:8f:17:66:33:73:60:ed:72:bc:
                    1c:09:d2:bd:3b:92:57:76:ef:ab:6c:f0:a9:37:24:
                    d9:8b:3b:74:5c:5e:5b:39:f0:ef:92:bd:77:02:4b:
                    73:29:aa:25:78:17:9e:c9:87:db:f9:0b:54:c8:77:
                    2b:13:d5:32:36:95:9b:60:22:9a:0b:84:42:e1:64:
                    7e:48:85:93:22:1f:41:ca:2c:61:88:f9:90:f9:2b:
                    15:a1:7c:0f:cf:01:fb:2d:98:65:ab:ac:64:d5:fd:
                    ad:cf:99:32:e9:e6:e8:f3:da:6b:5d:e8:11:f4:58:
                    9a:f5:43:84:89:ed:0b:fd:e4:f4:f2:90:09:32:97:
                    88:a2:99:b9:3c:aa:61:ed:6c:3f:49:b5:59:b6:46:
                    13:94:17:af:1e:6a:ba:5c:95:81:2f:46:80:57:9d:
                    4f:9b:fe:d2:8f:00:8e:b6:58:6d:95:07:3b:ee:d6:
                    10:24:56:51:9e:ce:e9:cf:e9:38:84:e0:47:33:b9:
                    2f:e0:72:43:56:3e:3c:7f:e8:81:65:cb:8e:e3:15:
                    56:9c:b7:6b:d9:84:51:ac:b7:6c:c5:56:92:2c:c9:
                    f2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:FA:EE:EC:3A:F4:A8:5A:F4:5F:80:A9:72:D2:45:2B:90:7D:5D:F5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/1/DEFAEEEC3AF4A85AF45F80A972D2452B907D5DF5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.40.0/22
                IPv6:
                  2804:39d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266054

    Signature Algorithm: sha256WithRSAEncryption
         8e:c6:79:12:0f:3b:78:45:d2:fb:f6:57:29:3b:38:60:27:35:
         f5:79:0b:78:f4:ec:0a:7c:87:68:1e:4c:2c:be:0a:63:d3:77:
         7a:1d:82:ed:1b:61:de:77:5c:98:bd:2a:1a:d8:42:7f:16:3a:
         08:95:cf:a5:32:21:06:26:bc:4f:8c:e1:9a:bd:23:81:a5:64:
         6d:ed:94:a3:6d:83:b6:7f:49:a6:c8:41:a5:d6:46:96:fc:c8:
         85:66:45:c5:0e:7e:68:70:c8:6f:0d:13:2e:c9:29:76:a5:c3:
         25:c9:36:e5:da:89:25:9c:72:1d:12:42:a8:46:86:b1:34:5a:
         ba:b3:70:6e:ba:a5:98:00:f1:e6:d5:01:b0:38:79:a6:c4:e6:
         dd:92:2a:67:d6:7d:ff:ad:27:a1:31:b7:de:d9:8a:7a:ff:2d:
         7c:cd:2e:ef:cf:bc:41:6e:9f:88:19:22:88:16:6d:e6:db:44:
         c8:2a:e6:c8:23:4c:91:86:23:4b:e6:4c:61:b0:73:d9:4f:63:
         21:60:28:0f:ee:b7:6d:19:e4:6b:b4:d2:17:ca:be:df:0f:67:
         ab:13:d7:57:47:23:b5:0a:78:4c:59:6f:ee:5f:42:54:d2:62:
         72:ae:ca:0b:fe:f3:8b:a4:72:8b:2f:09:d5:b4:21:1b:24:27:
         d7:e0:b8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 05:44:30 2024 by rpki-client on console-fra.rpki-client.org