Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.cer
File:                     089532F8915FBA77F2B07B59B91FADAD8FE95EB0.cer (raw, json)
Hash identifier:          +BIhn+lDHO8eryWis8NSUmANkgnguhagy3V0alri+pA=
Subject key identifier:   08:95:32:F8:91:5F:BA:77:F2:B0:7B:59:B9:1F:AD:AD:8F:E9:5E:B0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       355DA6E92E4E9143C9AD784742896BC1CF4C8DF3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 21:55:36 +0000
Certificate not after:    Wed 02 Apr 2025 22:00:36 +0000
Subordinate resources:    AS: 265487
                          IP: 168.197.144.0/22
                          IP: 2804:34e8::/32

Validation:               Failed, certificate revoked on Thu 09 May 2024 03:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5d:a6:e9:2e:4e:91:43:c9:ad:78:47:42:89:6b:c1:cf:4c:8d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 21:55:36 2024 GMT
            Not After : Apr  2 22:00:36 2025 GMT
        Subject: CN=089532F8915FBA77F2B07B59B91FADAD8FE95EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:7a:fc:c9:df:c3:c2:dd:c6:60:4d:82:63:
                    d9:fb:5a:cf:d6:0d:7b:f9:08:ea:98:bc:f3:56:5a:
                    84:c3:a0:3b:4c:01:e3:49:ae:59:d9:7d:83:d7:16:
                    fe:79:32:d3:41:bb:7f:2c:73:b4:e8:1e:ff:0f:ec:
                    26:00:a4:0a:85:dc:39:00:1c:bb:56:c4:2b:e5:58:
                    77:07:3b:a1:fe:03:f8:71:7e:91:8f:f5:c6:34:31:
                    50:00:7d:8c:9d:bc:70:94:ae:c7:92:5b:5e:9f:55:
                    8d:da:46:90:97:ec:a9:4c:f0:f3:fa:86:fe:85:2c:
                    b7:5c:58:3e:36:7b:f9:95:a3:78:42:f9:d2:36:9f:
                    b7:02:d8:a0:c7:47:6b:27:00:49:1b:9a:6f:a9:4d:
                    3e:dd:38:fd:13:37:b2:a7:b4:b8:81:0f:7a:84:8b:
                    c2:ae:14:bb:cd:9c:d3:20:35:ed:22:fc:96:e7:79:
                    98:0f:c9:c5:29:79:40:21:36:d7:c7:67:03:56:22:
                    70:49:28:ff:77:7b:f7:46:97:3c:7b:69:c4:3b:6d:
                    4a:66:1f:44:81:f4:85:a9:27:76:21:5f:61:07:43:
                    bb:86:9f:75:32:12:7f:5c:f0:fc:46:37:c0:e8:c3:
                    8c:56:b4:59:f1:5e:ab:f5:a9:22:3a:74:d7:6d:ca:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:95:32:F8:91:5F:BA:77:F2:B0:7B:59:B9:1F:AD:AD:8F:E9:5E:B0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.144.0/22
                IPv6:
                  2804:34e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265487

    Signature Algorithm: sha256WithRSAEncryption
         7f:a0:18:b2:ad:93:17:61:73:fe:9c:60:23:ca:5a:9f:a1:e7:
         1c:8d:2c:e8:69:90:84:85:d4:0d:c4:99:3c:7a:99:e5:23:cf:
         79:01:8e:3b:e8:c1:78:8e:9f:f8:7d:1e:15:05:be:84:77:b4:
         38:42:c1:95:25:bc:9f:8c:52:d1:2a:4f:61:01:2d:9a:23:ae:
         30:11:64:bd:c5:cd:23:08:cd:fc:ee:10:c0:06:1f:bf:91:80:
         d0:f3:7d:13:c7:f3:f2:fc:f9:51:21:16:6d:d7:28:da:f6:65:
         96:fc:04:f8:af:d9:63:50:8e:90:13:91:60:a7:d9:29:b1:3a:
         c9:40:5d:c7:58:bc:94:a1:76:2e:8b:56:0e:3b:1b:bc:5c:bb:
         13:50:31:91:c3:84:c5:12:fb:c5:ac:ba:a4:1c:af:0a:ff:60:
         24:45:9a:69:6a:95:15:38:30:d1:45:52:46:55:69:27:5d:e2:
         41:97:8f:a9:b5:51:db:62:84:d9:9f:9a:e9:a7:53:a3:70:19:
         d5:ea:5e:a9:34:3a:72:c2:44:d9:4e:6a:db:7b:de:5a:17:c4:
         08:5d:c2:d1:bc:35:d1:8d:c0:b9:53:46:ed:d8:bb:52:90:19:
         ea:30:77:38:16:52:69:e1:10:3c:25:cc:5b:fb:be:0f:75:c0:
         55:82:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org