Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/00128F95DB8A5B29D029F4525401E18331575DBD.cer
File:                     00128F95DB8A5B29D029F4525401E18331575DBD.cer (raw, json)
Hash identifier:          3yBZD+WiA4B/ZBaxAmul5vurRWxyQuhP9GkYVgbWwyg=
Subject key identifier:   00:12:8F:95:DB:8A:5B:29:D0:29:F4:52:54:01:E1:83:31:57:5D:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       55B3E7BF9B4643F3274B61E6AAA4F9393CE32DF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/00128F95DB8A5B29D029F4525401E18331575DBD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:28:58 +0000
Certificate not after:    Thu 03 Apr 2025 07:33:58 +0000
Subordinate resources:    AS: 266445
                          AS: 268230
                          IP: 45.235.220.0/22
                          IP: 170.82.180.0/22
                          IP: 2804:37f0::/32
                          IP: 2804:4df4::/32

Validation:               Failed, certificate revoked on Thu 12 Sep 2024 04:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b3:e7:bf:9b:46:43:f3:27:4b:61:e6:aa:a4:f9:39:3c:e3:2d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:28:58 2024 GMT
            Not After : Apr  3 07:33:58 2025 GMT
        Subject: CN=00128F95DB8A5B29D029F4525401E18331575DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:1c:3f:17:75:29:c4:58:69:cc:c3:06:df:
                    8a:5f:91:59:3e:75:44:d0:0f:25:82:8e:ba:02:9f:
                    a9:b0:9c:f1:bf:8f:fe:dd:10:59:2b:54:80:63:36:
                    6a:2a:68:22:9f:06:75:25:56:9f:2b:03:c3:10:c9:
                    37:22:e5:91:43:a9:c9:1d:5a:c3:fa:f5:b3:86:2e:
                    37:6f:36:c3:c7:7f:1e:40:1e:aa:97:c5:18:be:fe:
                    bb:d9:5d:5a:b3:ba:74:83:4b:58:df:f5:b5:e4:b4:
                    90:4f:4d:c2:6e:87:1c:eb:6b:b1:96:81:e9:2b:1d:
                    ff:e7:56:32:fa:cc:12:d2:ce:33:1f:c3:43:c2:8c:
                    97:0e:70:61:36:1b:8a:52:9d:99:b7:ac:0b:82:89:
                    f6:d1:d3:7f:c5:19:26:46:2e:7f:fa:bc:63:71:71:
                    1b:f5:cd:8b:7a:b0:6d:58:fb:b6:fa:e1:a2:eb:8f:
                    32:f9:de:7d:88:89:e3:b5:74:cb:1e:55:3e:02:7a:
                    d8:8f:3c:cc:cd:2a:9b:03:59:d5:75:59:d6:d9:b8:
                    82:fd:f3:e1:12:81:96:40:1e:3a:a7:e0:38:8f:a0:
                    3c:cf:bd:05:0e:c9:6f:a3:a7:22:ed:ee:0c:61:d8:
                    a8:7d:d5:ae:66:89:8a:40:49:63:27:10:0f:c0:91:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:12:8F:95:DB:8A:5B:29:D0:29:F4:52:54:01:E1:83:31:57:5D:BD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/00128F95DB8A5B29D029F4525401E18331575DBD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.220.0/22
                  170.82.180.0/22
                IPv6:
                  2804:37f0::/32
                  2804:4df4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266445
                  268230

    Signature Algorithm: sha256WithRSAEncryption
         0b:91:a8:4e:5e:92:6a:61:51:b0:02:9d:14:b7:96:b9:cf:4d:
         fd:30:3e:fd:df:54:a4:f3:88:b4:76:00:ba:51:ae:41:71:c2:
         45:44:f6:b2:6b:59:a4:8f:02:10:28:ea:7c:27:c4:c5:18:86:
         d4:ad:95:8e:7a:8a:9a:73:89:39:6c:1b:a3:c6:bf:d3:f6:4d:
         6d:55:81:27:28:51:75:0a:ba:ae:dd:68:77:0b:1b:a3:26:0d:
         ad:ce:b0:4f:99:1f:fa:1b:7a:77:b0:6f:cf:d6:b7:0d:77:62:
         83:0c:cf:f1:6d:21:5d:8f:86:92:27:2c:16:f5:65:2d:74:19:
         79:8e:ff:96:76:34:a6:86:19:c0:1e:65:f2:c0:cf:34:5c:64:
         14:d6:1f:8f:87:75:5c:b2:6f:4d:68:95:e0:77:55:bf:4c:83:
         5f:29:5f:15:09:7e:ec:7c:67:88:76:17:5d:0d:0a:6b:c4:4a:
         c2:ac:f6:d3:11:b4:15:28:11:98:4f:ca:9a:6e:88:5e:01:da:
         22:11:c4:8f:d0:ed:e1:12:30:91:3a:7a:0f:08:22:a3:44:5e:
         bf:8d:ae:70:10:79:05:21:51:b3:29:f1:eb:52:af:e6:bf:cf:
         60:32:68:36:b7:46:4e:41:8e:53:3a:ee:fb:b2:c3:cf:4d:96:
         3f:5a:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 07:27:13 2024 by rpki-client on console-ams.rpki-client.org