Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.cer
File:                     EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.cer (raw, json)
Hash identifier:          1dC+0+sLKx8PR7g49ygZhJ6145v3hfV757E+DxZzTQE=
Subject key identifier:   ED:D5:16:BF:C1:83:DF:33:AB:0F:5D:56:D9:A5:1F:9E:B4:AE:45:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1E9E58F742EF762AF1E73047B130A292C30EC94C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.mft
caRepository:             rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Aug 2024 21:54:52 +0000
Certificate not after:    Mon 18 Aug 2025 21:59:52 +0000
Subordinate resources:    AS: 266978
                          IP: 45.226.196.0/22
                          IP: 2804:4640::/32

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 21:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9e:58:f7:42:ef:76:2a:f1:e7:30:47:b1:30:a2:92:c3:0e:c9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 19 21:54:52 2024 GMT
            Not After : Aug 18 21:59:52 2025 GMT
        Subject: CN=EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:5b:ff:dc:46:0d:8e:58:fa:4a:05:c6:13:
                    59:d4:e2:5e:ad:d6:ef:cf:c5:63:1a:2c:b1:a3:d5:
                    c1:3d:d2:ff:4a:f2:32:e6:ee:18:52:d7:92:54:e2:
                    c0:a4:03:ab:fe:f5:c5:5f:05:d0:d2:ed:5d:74:ac:
                    2d:a7:2d:5e:d9:8e:42:34:bf:48:86:2d:7d:eb:98:
                    9a:5b:28:39:ae:cd:f4:aa:7f:04:23:16:53:3c:26:
                    85:e3:3a:72:0b:dc:3f:57:39:84:d2:87:b1:cd:d1:
                    25:92:ee:f5:5e:4a:35:f5:cc:ac:35:fe:32:10:e3:
                    82:3a:1f:d5:f0:cc:cb:af:18:52:d9:74:93:e7:3e:
                    06:10:5e:e5:3d:a5:d8:bf:d3:9f:36:b5:68:80:96:
                    7b:27:23:4e:47:78:82:1f:ad:1e:74:82:ff:ee:85:
                    a0:4e:67:34:af:1e:f2:b1:f3:0f:0b:c4:d4:6e:81:
                    dd:ce:b0:a1:9f:77:fe:0e:38:2e:ee:3d:45:63:0c:
                    e0:4d:37:2c:c0:03:4c:3d:6d:2d:cf:e9:71:2b:96:
                    9e:79:0b:24:2e:d7:aa:df:5a:2e:fc:73:00:af:58:
                    ae:5a:81:c6:d6:ad:79:d1:26:1b:70:7a:9c:08:40:
                    9c:90:89:b4:7c:48:a6:71:20:26:fe:b8:9f:f2:c6:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:D5:16:BF:C1:83:DF:33:AB:0F:5D:56:D9:A5:1F:9E:B4:AE:45:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.196.0/22
                IPv6:
                  2804:4640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266978

    Signature Algorithm: sha256WithRSAEncryption
         31:0a:fb:b2:94:39:f8:75:6f:63:b0:a5:a3:5d:57:48:7c:ca:
         5d:78:32:0a:9b:f9:28:50:11:71:fe:23:0e:0d:3d:45:a8:8e:
         95:b8:a2:b0:ab:29:a5:ef:82:3d:fc:b2:60:af:01:1a:65:5e:
         ef:44:00:a3:96:2d:c1:54:59:15:09:c9:db:9d:1f:de:06:32:
         77:c1:df:06:1f:e0:f7:18:a2:e1:66:a5:b0:61:7d:31:a7:b9:
         5d:b4:7a:8d:b1:8e:5d:75:3f:92:1f:6c:5e:11:c5:de:0b:17:
         79:b2:43:c5:06:94:26:e2:21:e7:11:16:7c:bb:ac:d8:b4:e6:
         12:bf:f1:05:96:d8:20:3b:bd:46:4d:50:fb:aa:70:16:66:e5:
         0c:15:a4:af:30:37:20:fb:13:4d:91:fa:78:f9:2d:b5:55:79:
         c8:80:67:c4:c8:d7:2a:e2:bc:e8:be:2d:84:e1:9a:90:5c:42:
         c9:77:c8:5d:d6:fd:a3:a7:81:f2:6a:bb:f8:eb:6e:1e:16:21:
         11:1b:74:d6:e0:6b:ad:1d:11:d7:d2:c7:a5:06:d2:21:70:0a:
         ee:92:fa:cb:fa:d0:41:62:29:e4:8b:65:91:2b:b6:16:d0:4e:
         73:5c:73:42:fe:68:4a:15:82:84:f1:d8:80:21:9d:b4:4b:3e:
         21:2d:a4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 00:08:32 2024 by rpki-client on console-ams.rpki-client.org