Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/69934CD3CBA6EFA38C459706B6985393C720F414.cer
File:                     69934CD3CBA6EFA38C459706B6985393C720F414.cer (raw, json)
Hash identifier:          oOgGFKcoIv730HpTOrJTO8CjbcolGzryd9Csc9ZviL0=
Subject key identifier:   69:93:4C:D3:CB:A6:EF:A3:8C:45:97:06:B6:98:53:93:C7:20:F4:14
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       04C896D3C33D2A6694A0DE880C6FA4B6003828D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/69934CD3CBA6EFA38C459706B6985393C720F414.mft
caRepository:             rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Sep 2024 00:09:08 +0000
Certificate not after:    Wed 10 Sep 2025 00:14:08 +0000
Subordinate resources:    AS: 268063
                          IP: 45.168.124.0/22
                          IP: 2804:5768::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 12:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c8:96:d3:c3:3d:2a:66:94:a0:de:88:0c:6f:a4:b6:00:38:28:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 11 00:09:08 2024 GMT
            Not After : Sep 10 00:14:08 2025 GMT
        Subject: CN=69934CD3CBA6EFA38C459706B6985393C720F414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:eb:ac:02:4a:a9:a7:8b:9c:16:12:f9:12:
                    35:01:df:56:81:26:95:5a:4b:af:e6:c8:40:e5:e4:
                    26:9e:7b:47:a1:b5:76:c6:d2:1c:89:b1:7b:44:98:
                    e1:da:ea:1f:f4:ac:d0:33:d8:14:e1:70:1d:83:af:
                    87:c2:19:e9:2b:6e:60:41:44:8b:bf:33:ad:17:cf:
                    00:eb:48:74:2b:0c:63:1c:cd:b2:e1:75:85:f2:61:
                    dd:44:c5:fd:aa:da:53:59:9d:ef:42:a2:b8:c3:f1:
                    da:e7:fa:60:fc:b6:64:29:67:f5:f7:87:b2:14:05:
                    08:cc:9d:68:28:7d:8f:e4:3b:83:2d:77:c5:d2:6a:
                    a9:41:2d:4d:80:6e:1c:d9:9c:d9:48:a6:11:60:8a:
                    a9:70:20:95:e5:b8:79:7d:ff:4a:81:76:b6:b7:e9:
                    f8:a3:8e:5f:bd:71:86:cd:81:8d:e7:f1:93:8e:38:
                    61:c8:ec:e7:6b:d6:6c:3a:84:6b:6b:e9:69:bc:6c:
                    88:89:42:36:e7:04:bd:d3:d1:6e:f8:33:4d:a7:48:
                    6f:b2:98:31:91:7f:d1:ba:ed:ff:30:56:f9:7a:d4:
                    6d:bb:d8:ab:01:5e:c0:d6:cb:e9:75:e0:31:18:c5:
                    1a:28:43:50:30:38:4f:fd:e6:72:13:70:42:61:26:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:93:4C:D3:CB:A6:EF:A3:8C:45:97:06:B6:98:53:93:C7:20:F4:14
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/69934CD3CBA6EFA38C459706B6985393C720F414.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.124.0/22
                IPv6:
                  2804:5768::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268063

    Signature Algorithm: sha256WithRSAEncryption
         05:9f:79:f7:74:49:6e:85:e0:98:c5:ee:c1:b2:e8:f4:5c:62:
         ae:5a:b5:70:df:9c:0b:2c:be:e7:dd:95:c7:65:a1:57:2d:b3:
         1e:c9:cf:df:c0:e2:38:81:a5:60:5d:84:20:27:f8:e7:8e:d9:
         dd:33:00:1b:2c:1b:88:74:d3:61:38:63:fb:48:81:46:69:b0:
         25:64:0c:10:88:07:a8:ba:73:5d:d6:e2:15:16:60:c1:10:40:
         e1:3f:d2:fc:b3:2a:0d:9f:3d:05:26:0f:db:c9:6b:ce:72:a2:
         da:2f:55:8b:15:90:8e:8b:21:d1:32:44:98:94:fc:de:c5:c9:
         7f:21:a2:30:ba:11:44:05:ea:3e:95:55:b9:25:20:11:02:3e:
         15:f1:eb:bf:29:0b:25:58:4b:f7:70:ea:7f:75:44:71:ef:09:
         c3:e6:f5:db:c7:57:5c:2c:be:84:f5:54:41:4d:7b:2a:f9:45:
         32:dc:9e:ac:6d:30:38:d1:22:1b:0c:48:7c:04:1a:71:35:f0:
         7e:ae:4e:a0:b7:56:8c:50:58:82:cc:ca:be:45:87:d5:08:40:
         9a:dc:d1:ee:d8:d4:66:59:1c:fb:87:95:d2:fd:c3:04:a7:1f:
         e3:7c:64:bd:57:a2:95:85:3b:72:02:bb:62:8b:a7:55:98:dd:
         bb:70:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----