Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/08009882BCEB89729EAAF17F47C01E6AE508E3A0.cer
File:                     08009882BCEB89729EAAF17F47C01E6AE508E3A0.cer (raw, json)
Hash identifier:          szJO9G4A/kwRx4Lq+pnIBk8Hmgr18RO1M5REZFMh2Ug=
Subject key identifier:   08:00:98:82:BC:EB:89:72:9E:AA:F1:7F:47:C0:1E:6A:E5:08:E3:A0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3DE62D8C30EA9B7EEC4DEF5B582E169CB226956C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/08009882BCEB89729EAAF17F47C01E6AE508E3A0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jun 2024 19:24:23 +0000
Certificate not after:    Thu 19 Jun 2025 19:29:23 +0000
Subordinate resources:    AS: 52596
                          IP: 179.191.48.0/21
                          IP: 2804:d14::/32

Validation:               Failed, certificate revoked on Fri 05 Jul 2024 15:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e6:2d:8c:30:ea:9b:7e:ec:4d:ef:5b:58:2e:16:9c:b2:26:95:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 20 19:24:23 2024 GMT
            Not After : Jun 19 19:29:23 2025 GMT
        Subject: CN=08009882BCEB89729EAAF17F47C01E6AE508E3A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:6d:8e:3d:60:f5:99:f0:71:6d:4f:cb:f0:
                    81:e5:08:94:60:ed:f2:c5:56:2c:a9:7c:c4:d6:2d:
                    e0:7c:45:3f:7f:5e:60:c4:5e:b9:33:47:68:a9:86:
                    03:2f:d3:18:3c:64:ef:a6:2c:c4:77:6e:6c:60:96:
                    1b:a4:f9:3b:f6:a0:51:39:8d:e2:64:8a:4f:af:f6:
                    77:37:48:22:b6:f3:38:c8:e9:96:31:b5:cf:35:46:
                    fc:b4:14:f8:45:0b:5a:a9:8a:b4:3b:e4:33:68:d7:
                    ff:d2:fa:03:5a:dd:76:66:62:88:52:d5:fa:ba:13:
                    b4:44:05:b9:a3:a9:3b:46:d1:bc:95:b9:cf:9b:3a:
                    37:80:95:59:16:ab:9c:80:8b:b4:a9:f0:a0:4d:8a:
                    1c:c6:fe:69:f0:af:9a:d1:81:d7:d6:a4:82:44:58:
                    e0:a4:6c:77:99:f4:72:5f:7f:8e:7d:92:57:08:ce:
                    85:97:eb:c9:db:13:7e:86:16:75:9f:a5:5e:b0:d8:
                    cf:de:89:d5:c8:d2:c5:bc:38:32:b4:8f:76:90:62:
                    0f:fb:51:4f:da:a7:0e:a9:c3:5d:a8:71:7e:57:c3:
                    aa:d4:bd:c4:06:33:5b:f9:dd:31:73:7a:65:a0:d2:
                    d2:61:36:88:80:0d:44:eb:1c:62:51:2f:ac:f9:01:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:00:98:82:BC:EB:89:72:9E:AA:F1:7F:47:C0:1E:6A:E5:08:E3:A0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/08009882BCEB89729EAAF17F47C01E6AE508E3A0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/21
                IPv6:
                  2804:d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52596

    Signature Algorithm: sha256WithRSAEncryption
         9b:6a:74:a6:fb:35:f8:e4:d1:40:d3:91:84:88:17:7e:4e:9e:
         4b:4c:56:c6:e5:74:05:06:86:5e:8a:e2:76:84:de:bd:d7:c7:
         da:6d:41:7e:ff:41:e4:58:34:7b:c2:9e:a6:28:7a:63:c6:ce:
         50:c7:01:0a:77:22:90:a2:55:d6:74:42:96:0e:ef:4c:21:31:
         9f:34:a6:e2:b2:7f:7d:70:9e:71:b2:fb:80:c5:b9:9b:12:a0:
         a9:9f:08:44:6b:4e:cf:43:92:e7:de:4f:ec:a1:76:7c:34:69:
         5c:80:d1:95:b4:18:11:77:a1:c5:b7:99:ba:5b:80:05:7f:f1:
         10:a1:aa:ec:d9:0d:22:64:58:16:b8:22:43:2c:de:16:3b:5f:
         15:41:0e:b4:b6:d7:0c:61:e2:45:e9:6d:ab:cb:7b:76:59:a9:
         fc:62:86:c6:ed:e8:2d:18:8e:5e:14:1b:aa:4d:07:e6:75:af:
         30:a9:da:7c:0c:12:db:19:3a:93:ba:f5:89:f3:7d:ba:1e:55:
         60:a2:bb:a3:c2:af:58:3a:b8:c3:f0:8f:a2:8a:00:49:b4:25:
         aa:f6:95:ec:36:a2:d0:f5:4e:31:b6:af:da:03:58:55:d8:a1:
         61:e8:f1:d7:aa:6e:63:59:7a:12:1d:47:f4:4f:62:c4:fb:0f:
         5e:23:f8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 17:06:19 2024 by rpki-client on console-ams.rpki-client.org