Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer
File:                     8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer (raw, json)
Hash identifier:          xfXf1jlkn9M3baZGS8yWWueUBOtF8cFp+M8bGDIJrVE=
Subject key identifier:   80:93:B4:BD:8F:E0:7A:F6:9B:F3:09:FB:C4:AA:60:71:DE:9B:95:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11DA96E7CF923AD812888C6FA4869717CEF7312F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:42:19 +0000
Certificate not after:    Thu 03 Apr 2025 16:47:19 +0000
Subordinate resources:    AS: 61820
                          IP: 201.131.176.0/22
                          IP: 2804:19d0::/32

Validation:               Failed, certificate revoked on Sun 15 Sep 2024 00:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:da:96:e7:cf:92:3a:d8:12:88:8c:6f:a4:86:97:17:ce:f7:31:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:42:19 2024 GMT
            Not After : Apr  3 16:47:19 2025 GMT
        Subject: CN=8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:78:d9:27:b5:f1:c8:90:84:b7:74:46:a8:0d:
                    13:d8:72:d6:7c:23:17:f5:e2:fe:70:ef:9b:d3:9d:
                    c6:63:f8:b0:df:ef:76:f9:86:cc:d1:06:90:ef:b1:
                    63:6b:aa:65:b0:7c:33:d5:58:b8:b2:f9:f1:1c:5a:
                    b5:23:41:ba:8e:21:cc:61:52:52:d1:fc:9c:64:33:
                    ec:08:df:1b:e0:e0:c0:e7:36:0a:b3:73:d6:2a:8c:
                    48:a4:28:f1:d2:7a:5d:5e:db:d3:5f:f4:45:57:30:
                    d5:f9:56:fa:64:10:d5:2c:ae:6b:ce:41:8d:c3:0a:
                    33:de:a9:16:17:02:27:46:48:5f:e4:72:3f:68:cf:
                    03:48:9d:a0:93:05:e5:fd:e9:6f:ab:b1:b3:ed:1a:
                    0a:17:cc:d6:23:89:57:34:33:27:60:64:0b:5b:aa:
                    82:cf:0b:5f:62:43:d5:ee:48:08:3d:30:a6:3f:81:
                    48:82:47:bb:c2:a2:e9:7e:99:15:30:57:82:bb:59:
                    aa:44:8a:d9:bf:e5:fb:be:5d:e4:fa:ea:d8:ba:fb:
                    8c:9d:b3:1c:bf:f0:f3:6c:ec:e1:42:15:87:ad:40:
                    29:b5:c9:50:9e:14:2b:0e:39:59:34:ce:8d:8f:a5:
                    f5:44:86:09:a5:57:c3:b6:49:ca:04:a8:b8:ef:f1:
                    a3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:93:B4:BD:8F:E0:7A:F6:9B:F3:09:FB:C4:AA:60:71:DE:9B:95:CC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.176.0/22
                IPv6:
                  2804:19d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61820

    Signature Algorithm: sha256WithRSAEncryption
         67:ed:55:2c:ab:b5:13:33:b2:bb:6e:a3:eb:04:ef:3e:49:e2:
         e9:21:16:74:fe:d7:5d:db:f6:0a:46:50:60:6e:1b:32:26:43:
         11:df:05:cb:8e:2b:9e:c7:cb:08:1b:b5:d7:85:00:8d:b4:87:
         02:8e:66:f3:8a:f8:66:8e:3e:78:56:a0:ba:cc:dd:1c:d8:10:
         d0:3c:52:b5:82:80:02:5c:e7:2f:30:ea:41:2e:bd:15:01:3b:
         a1:c3:4f:a7:e5:8a:67:37:93:34:69:79:be:9b:9c:74:d5:e6:
         b8:6d:c1:2c:fc:79:ba:a4:85:b0:c3:1d:57:c1:cc:ba:de:40:
         84:a4:49:d7:e7:67:40:09:b0:07:90:a8:34:ff:4a:9e:e8:d0:
         c2:b5:60:4c:20:d0:25:a2:6c:4b:f2:c3:66:25:42:77:bd:5c:
         e7:32:17:e3:97:c9:ae:6d:f6:d5:bf:e8:40:bc:3e:2f:de:99:
         db:b2:dd:c5:de:ca:fd:69:c7:89:55:74:bd:e3:e3:19:10:a6:
         69:74:21:1f:f5:37:18:07:c3:5c:f4:14:d3:37:41:ef:4d:48:
         ea:09:19:d2:f8:73:ea:6b:61:7e:7d:19:fc:fd:2a:4e:0a:14:
         d2:b6:58:7d:6d:63:e2:f7:a1:49:c1:b7:d3:b7:ac:cb:46:b0:
         75:03:e5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 05:51:51 2024 by rpki-client on console-ams.rpki-client.org