Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/08D6FBA1949F65B102112BD5A3D89E753338AB9D.cer
File:                     08D6FBA1949F65B102112BD5A3D89E753338AB9D.cer (raw, json)
Hash identifier:          XAf839S3JhU3wZm385ULtwbZf8y8+XN/R02Mfjq72iI=
Subject key identifier:   08:D6:FB:A1:94:9F:65:B1:02:11:2B:D5:A3:D8:9E:75:33:38:AB:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D26D353B2F6C1807F8D36BC64D8DD9C9FF52859
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/08D6FBA1949F65B102112BD5A3D89E753338AB9D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Apr 2024 16:00:33 +0000
Certificate not after:    Wed 16 Apr 2025 16:05:33 +0000
Subordinate resources:    AS: 269526
                          IP: 45.186.244.0/22
                          IP: 2804:65fc::/32

Validation:               Failed, certificate revoked on Thu 23 May 2024 12:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:26:d3:53:b2:f6:c1:80:7f:8d:36:bc:64:d8:dd:9c:9f:f5:28:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 17 16:00:33 2024 GMT
            Not After : Apr 16 16:05:33 2025 GMT
        Subject: CN=08D6FBA1949F65B102112BD5A3D89E753338AB9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:be:68:fe:68:f1:40:7d:e8:79:2d:fc:51:
                    b2:ae:3a:0a:2d:bf:0b:01:46:23:b0:57:01:ea:47:
                    2a:e3:3b:2c:0c:d4:97:7e:9d:c7:89:82:5e:f3:b7:
                    6c:06:20:14:38:16:11:87:4e:2e:79:70:47:37:ce:
                    49:12:9b:47:b8:7a:44:f5:03:b2:a7:c2:a0:f7:32:
                    70:2f:93:12:0e:53:37:fb:ad:23:b8:a2:b3:7f:3c:
                    9d:37:c7:1d:d4:8e:3c:d6:05:90:a6:8a:ef:70:0b:
                    f4:f7:cf:47:35:3d:83:d3:c5:d3:a3:7b:d5:43:f9:
                    85:e2:f8:3c:e1:50:67:09:11:1a:34:9c:00:42:de:
                    38:5b:d2:e0:59:49:31:8a:23:04:6c:13:5d:95:5a:
                    68:30:2c:c1:28:08:18:f7:56:a8:54:08:bf:1b:41:
                    82:51:1d:2f:80:bc:c6:d0:68:58:dc:21:b4:62:30:
                    c8:df:32:bb:a3:c0:5c:d9:48:e6:05:6f:aa:32:47:
                    a4:90:b9:4b:4e:91:c9:05:5a:c9:95:38:10:02:31:
                    e8:c5:4b:8b:33:39:11:91:80:04:3b:7e:f6:a8:9e:
                    54:a4:3f:65:d1:12:f4:e4:1f:e1:5c:e4:5a:1d:4c:
                    89:93:c0:04:4f:96:69:31:00:49:10:0e:ee:51:07:
                    09:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:D6:FB:A1:94:9F:65:B1:02:11:2B:D5:A3:D8:9E:75:33:38:AB:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/08D6FBA1949F65B102112BD5A3D89E753338AB9D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.244.0/22
                IPv6:
                  2804:65fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269526

    Signature Algorithm: sha256WithRSAEncryption
         12:c2:79:50:94:39:79:2f:83:9c:d6:8f:66:d1:14:ca:85:22:
         d8:61:f5:07:20:ee:09:d0:35:14:eb:e1:71:ec:7c:68:03:9e:
         15:72:fa:df:45:e0:ae:75:87:c2:5e:97:0e:0b:b5:d3:c4:e3:
         28:56:32:41:57:75:bd:3f:40:8d:fd:0a:8d:24:db:84:3f:43:
         54:9e:d9:04:ef:10:6e:b2:ea:aa:69:55:8a:67:b3:12:b1:0b:
         e7:46:e8:b5:ac:58:04:3e:c4:13:ca:f2:5a:51:e9:f2:c6:4e:
         3e:0d:13:e1:f7:0a:95:29:a2:54:9a:bb:3b:1c:36:65:9b:a4:
         17:5c:ea:2d:f3:a7:01:1b:97:d0:e9:cd:00:33:ae:67:27:1d:
         10:19:ca:e0:f9:bd:17:0b:9a:14:7b:2e:a6:e3:a8:53:2a:d7:
         8b:3f:c3:1e:16:6e:4c:47:b2:0c:ab:a8:73:06:c5:01:9a:82:
         cf:ac:c5:64:ee:8e:69:f0:d1:fb:ba:8b:98:a2:12:b2:12:0a:
         69:7c:ea:f9:9d:64:e0:67:77:df:d5:dc:d2:9e:27:f2:08:9f:
         b0:2e:09:28:3d:90:2e:f5:d5:ea:d3:46:e9:bd:36:a1:db:8f:
         bb:a8:e8:28:93:95:67:a7:d1:9e:b1:40:ac:59:68:14:ad:b7:
         82:b5:fe:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:38 2024 by rpki-client on console-fra.rpki-client.org