Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/08587D9125035CCB8778F8F224DB8976BD3757A5.cer
File:                     08587D9125035CCB8778F8F224DB8976BD3757A5.cer (raw, json)
Hash identifier:          kq4NP1wmlWEOED1wr7XTyjHnzZl6SxFaBKbBo9qXET4=
Subject key identifier:   08:58:7D:91:25:03:5C:CB:87:78:F8:F2:24:DB:89:76:BD:37:57:A5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       042AE8B0A3B01754FDA85430497CB97EDAD9063B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/08587D9125035CCB8778F8F224DB8976BD3757A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Jun 2024 11:53:17 +0000
Certificate not after:    Mon 16 Jun 2025 11:58:17 +0000
Subordinate resources:    AS: 271099
                          IP: 179.48.208.0/22
                          IP: 2804:7640::/32

Validation:               Failed, certificate revoked on Sun 23 Jun 2024 09:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2a:e8:b0:a3:b0:17:54:fd:a8:54:30:49:7c:b9:7e:da:d9:06:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 17 11:53:17 2024 GMT
            Not After : Jun 16 11:58:17 2025 GMT
        Subject: CN=08587D9125035CCB8778F8F224DB8976BD3757A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:af:04:bc:8f:9c:fa:53:5a:29:ed:31:2c:53:
                    b5:a6:4d:ac:06:69:47:03:e2:88:af:38:1d:6a:a5:
                    c6:9b:ff:1d:1e:99:7f:b3:3b:f7:a7:6a:fb:0c:fb:
                    9b:7f:8f:89:63:51:52:b7:f3:fc:a5:40:1b:40:36:
                    a5:27:fc:18:fd:2c:c1:d9:a4:d9:df:1c:a3:b1:63:
                    e6:93:55:03:8d:6f:01:9a:3f:4c:f2:bb:53:a7:68:
                    09:69:4a:fe:0c:c6:14:62:72:ac:22:da:5f:14:a9:
                    b8:bb:eb:dc:6e:7c:25:b5:bb:ca:d4:ef:c4:c8:64:
                    64:54:62:24:04:02:31:b2:7c:16:e8:b7:86:af:8e:
                    e9:5a:e1:74:4b:4d:61:8a:c8:ff:5d:9b:a8:e7:95:
                    32:91:f1:f1:72:2f:2b:0e:3c:ad:a1:b7:ea:6d:fe:
                    de:73:7f:16:e7:2f:ea:cc:c3:08:da:e0:23:10:77:
                    59:e1:de:1b:f9:24:3f:6a:8c:ee:60:7d:90:bb:f4:
                    85:8f:45:cf:7b:1c:38:ea:6d:6d:8b:03:90:10:fc:
                    10:c5:60:c1:78:27:07:ec:d2:5a:59:ab:1d:4b:9d:
                    6b:2f:a0:de:53:12:5a:0d:40:8f:95:a5:68:30:64:
                    2f:5e:fd:ab:65:11:7d:6d:3b:5d:2a:cb:35:17:a2:
                    4f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:58:7D:91:25:03:5C:CB:87:78:F8:F2:24:DB:89:76:BD:37:57:A5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/08587D9125035CCB8778F8F224DB8976BD3757A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.208.0/22
                IPv6:
                  2804:7640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271099

    Signature Algorithm: sha256WithRSAEncryption
         7d:25:54:b3:dc:22:9e:fa:ad:7c:fa:98:8b:3f:72:61:26:a4:
         5b:4b:6e:78:76:7d:19:e9:23:c8:a0:63:33:0a:f5:5c:a1:a9:
         73:27:a9:7b:73:d5:e9:a0:7c:8e:cf:18:6b:80:97:00:cd:5c:
         a1:08:ac:53:f4:62:2b:ac:d3:14:c2:61:d7:a0:0b:2e:e9:cc:
         56:cc:90:c5:85:a4:f4:6f:01:12:2c:ab:33:db:54:2c:ab:7f:
         69:fe:ec:ed:12:a6:9d:80:a9:3f:78:91:c5:76:b5:12:b9:14:
         37:2b:26:fe:92:c2:be:a9:a3:bc:e9:81:3a:a3:11:19:e9:ba:
         b9:b5:a7:7d:ec:8b:59:38:a4:1a:57:93:8d:6f:78:eb:e2:5a:
         b2:96:5a:8b:d0:6d:3f:2f:24:0d:91:8c:e9:b7:d4:80:bf:0e:
         17:69:4a:ce:a6:fd:22:15:4b:a3:42:80:e5:da:5d:c6:f7:83:
         c5:d4:64:65:61:3c:14:45:4e:c3:c1:ac:0c:e4:c7:51:a9:bd:
         3d:aa:07:61:cd:78:f1:6d:49:d5:29:6d:e8:cb:7c:3f:02:20:
         2d:c8:46:16:4c:f2:4d:12:f7:a1:87:c9:78:71:62:dd:4d:29:
         64:30:2b:fa:38:b7:4c:e8:26:73:d0:17:a1:94:4a:a7:16:e3:
         e3:38:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:32:46 2024 by rpki-client on console-ams.rpki-client.org