Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/127E09B94CDE13ACD52E14BFA817F58367E299E8.cer
File:                     127E09B94CDE13ACD52E14BFA817F58367E299E8.cer (raw, json)
Hash identifier:          VOGR8XT88w80Kb1hXIXvqnrRCyYtaRzp6bt6ieAJLWw=
Subject key identifier:   12:7E:09:B9:4C:DE:13:AC:D5:2E:14:BF:A8:17:F5:83:67:E2:99:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D5615E50A9509B56467179211B9C8E019478F66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/127E09B94CDE13ACD52E14BFA817F58367E299E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Jun 2024 16:20:38 +0000
Certificate not after:    Tue 03 Jun 2025 16:25:38 +0000
Subordinate resources:    AS: 267188
                          IP: 45.231.28.0/22
                          IP: 2804:4984::/32

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 12:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:56:15:e5:0a:95:09:b5:64:67:17:92:11:b9:c8:e0:19:47:8f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 16:20:38 2024 GMT
            Not After : Jun  3 16:25:38 2025 GMT
        Subject: CN=127E09B94CDE13ACD52E14BFA817F58367E299E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:45:88:7b:d8:d3:e1:98:15:1c:6c:99:27:
                    14:a5:0b:83:a3:fd:6c:d0:9f:e2:90:8e:19:6d:83:
                    7c:4d:4c:4e:9d:df:92:ce:02:8d:01:f1:d1:3d:ca:
                    81:4f:07:05:32:cc:2a:5f:b7:cc:77:91:b3:78:6b:
                    4b:cf:57:04:56:bf:09:f7:3b:26:2d:3e:f5:0a:21:
                    d0:4a:02:25:39:b2:4e:ca:2c:6e:c1:18:94:9c:b5:
                    46:30:bb:d1:33:f5:ff:1a:89:3c:9c:61:29:5a:d9:
                    94:3f:a2:94:ca:6e:d7:19:ce:e0:c2:1f:5d:48:a7:
                    10:d2:bd:1e:38:cc:72:44:fd:4f:4c:bf:9a:5b:31:
                    bc:dd:9d:67:1f:f5:b7:49:69:b8:99:c8:4a:50:01:
                    a2:81:a7:8a:72:14:0d:db:a7:88:93:a3:17:42:af:
                    29:4c:82:13:5c:95:96:09:7d:46:69:4d:fc:db:06:
                    94:d0:d3:18:94:bb:71:f4:41:fc:6b:ba:a1:00:7f:
                    35:86:62:e7:0f:d6:10:ee:ba:f7:26:71:0d:dd:e6:
                    9d:6e:fa:c1:e9:4a:41:b3:19:c8:a3:46:7c:a8:6e:
                    74:ad:45:8a:bc:7e:24:47:62:53:5b:b7:55:20:1d:
                    ce:e8:93:a3:4b:0c:d1:28:5b:33:e8:09:8e:ae:66:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:7E:09:B9:4C:DE:13:AC:D5:2E:14:BF:A8:17:F5:83:67:E2:99:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/127E09B94CDE13ACD52E14BFA817F58367E299E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.28.0/22
                IPv6:
                  2804:4984::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267188

    Signature Algorithm: sha256WithRSAEncryption
         78:64:d4:01:79:5c:10:de:f7:01:ba:32:c1:5b:69:92:b1:f9:
         df:1d:43:34:6c:8b:d0:50:49:5f:d8:82:c1:75:4c:ff:e5:e1:
         49:d6:1d:96:fd:0d:67:aa:be:fb:03:ea:bf:3a:68:27:db:30:
         6f:91:93:0d:68:5d:88:cf:bb:ac:4a:07:94:eb:5a:b2:6d:ae:
         e9:9b:37:57:f6:80:98:b8:47:48:9a:21:58:cb:f1:5f:ec:2d:
         f2:c5:f7:fc:c8:dc:8a:06:32:46:2a:5a:0c:eb:85:7f:75:dd:
         01:ba:ea:42:59:43:51:03:57:d9:1d:3b:a4:05:8a:e9:2e:8c:
         01:fb:8a:21:77:42:7d:ec:01:69:46:df:44:a9:a0:98:3b:e8:
         bd:2f:b7:e2:bc:21:b3:fe:a2:c6:56:ef:4d:32:f6:9f:0c:e3:
         6a:a9:c2:0d:f1:2b:44:87:aa:67:a8:c8:78:22:4c:08:4f:6f:
         b2:04:36:ef:2b:61:45:ec:bf:17:3a:f4:51:41:77:3b:1b:09:
         bf:db:3c:9a:94:e1:3f:f2:7e:c1:cd:f7:44:8c:08:77:c8:51:
         af:f4:ac:04:63:89:f6:13:93:4f:26:d4:ca:35:76:e7:ca:e2:
         49:57:48:9b:64:2c:68:88:a0:7c:1e:ed:d6:86:ce:f3:d5:03:
         b9:26:6f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 14:04:15 2024 by rpki-client on console-ams.rpki-client.org