Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23FF06DF1B1108721C3400360AFA788F0387915B.cer
File:                     23FF06DF1B1108721C3400360AFA788F0387915B.cer (raw, json)
Hash identifier:          dIbsoemQRyLKytpLa2RVMcG4kz6MHppijefEL/RYL/E=
Subject key identifier:   23:FF:06:DF:1B:11:08:72:1C:34:00:36:0A:FA:78:8F:03:87:91:5B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0130D3768ACB6B907FB89ADAD59D3FAA89A2C7F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/23FF06DF1B1108721C3400360AFA788F0387915B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 17 Aug 2024 15:31:55 +0000
Certificate not after:    Sat 16 Aug 2025 15:36:55 +0000
Subordinate resources:    AS: 272739
                          IP: 2804:87e8::/32

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 06:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:30:d3:76:8a:cb:6b:90:7f:b8:9a:da:d5:9d:3f:aa:89:a2:c7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 17 15:31:55 2024 GMT
            Not After : Aug 16 15:36:55 2025 GMT
        Subject: CN=23FF06DF1B1108721C3400360AFA788F0387915B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:95:43:14:43:14:53:8e:0a:70:a0:56:0b:71:
                    fa:ea:c5:b7:07:58:8a:f8:41:cf:fb:da:5f:16:b3:
                    11:38:93:94:d5:00:14:a4:07:bd:bf:35:1e:4e:10:
                    45:a2:91:7b:c2:58:2c:f8:c4:14:72:9e:f2:b4:17:
                    54:8f:fe:0c:a8:cd:cb:b7:fc:00:c6:e5:23:a2:7c:
                    29:20:12:7b:73:84:6d:94:3e:d0:7d:3b:d9:e1:1c:
                    2f:44:da:75:5b:ff:b6:4d:f4:0e:99:26:4e:d3:7a:
                    a6:01:3f:86:25:8a:d4:c1:f8:9e:7c:c4:35:2d:72:
                    fc:d9:0e:02:62:76:96:12:1a:b1:b1:d3:b0:b7:9e:
                    50:c4:1f:55:ae:d7:14:e3:8e:e8:ce:89:14:eb:d5:
                    03:a2:52:58:48:89:39:85:e0:e7:f5:f7:87:16:28:
                    65:51:80:3c:80:f8:ef:92:c3:31:53:5a:69:2d:70:
                    7d:b1:9d:d2:64:c8:0c:65:d4:80:97:42:06:fe:c4:
                    96:0e:80:50:de:6b:42:81:3a:1f:f9:a3:bc:9a:44:
                    27:48:fe:f4:54:6b:73:2a:ba:20:a5:eb:ba:8e:a0:
                    d4:6f:61:e7:55:7f:4b:bd:2b:49:29:9e:39:6c:75:
                    e4:24:5e:58:94:2c:16:09:75:e8:2c:dd:13:88:fd:
                    40:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:FF:06:DF:1B:11:08:72:1C:34:00:36:0A:FA:78:8F:03:87:91:5B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/23FF06DF1B1108721C3400360AFA788F0387915B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272739

    Signature Algorithm: sha256WithRSAEncryption
         3f:f7:f2:54:75:45:b9:36:30:43:ca:c4:d3:31:ef:73:31:c0:
         92:ea:45:11:83:a9:55:ff:da:b6:e4:0a:4d:71:10:7a:66:ae:
         13:97:62:a5:02:ad:bf:7d:b2:fa:4d:6c:52:37:c7:90:4e:3b:
         14:91:83:80:fa:09:37:cc:f1:12:19:0a:1b:ba:9b:b2:38:b4:
         08:ab:33:2d:a4:c2:6d:b2:28:dd:e7:db:ac:5c:56:b5:43:a5:
         37:62:20:2a:81:fc:49:be:48:f7:17:de:9e:39:4f:55:58:0c:
         e8:a4:7b:0e:6f:bd:0b:ed:ca:61:a6:93:a1:ba:f8:44:1e:8a:
         41:db:df:6e:8a:18:a4:a1:6d:b7:7b:c5:8d:97:b1:21:f4:62:
         06:73:2a:3e:e8:a0:8e:f3:61:fb:58:86:23:a8:2c:e2:ca:c5:
         a4:b9:df:0c:70:4e:ec:10:7a:87:5c:8b:60:60:98:95:5a:64:
         69:11:61:69:82:1c:9b:ff:2f:1d:e0:7c:93:67:1d:5a:eb:4b:
         28:07:9b:c0:f1:50:a1:31:66:66:f5:3a:83:bf:12:92:58:d1:
         c4:09:fd:40:b0:78:5f:6e:86:87:52:e8:1f:4f:3a:1c:d8:55:
         ac:ab:3b:7a:38:4a:08:6a:e6:03:b0:84:aa:ea:eb:db:cc:4b:
         9b:fa:10:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 08:10:30 2024 by rpki-client on console-fra.rpki-client.org