Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8117E06ADD38D45F0F656C1EDF6A16C02C8434DF.cer
File:                     8117E06ADD38D45F0F656C1EDF6A16C02C8434DF.cer (raw, json)
Hash identifier:          DwzsmDtNFIL4fKtOYMPAC8dpa3ubD1Svy/qx1xZQUOM=
Subject key identifier:   81:17:E0:6A:DD:38:D4:5F:0F:65:6C:1E:DF:6A:16:C0:2C:84:34:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       09C1ECE5705BA18158A9FE267B9C30EAA0C480C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/8117E06ADD38D45F0F656C1EDF6A16C02C8434DF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Jul 2024 16:17:49 +0000
Certificate not after:    Thu 24 Jul 2025 16:22:49 +0000
Subordinate resources:    AS: 267628
                          IP: 45.71.188.0/22
                          IP: 2804:445c::/32

Validation:               Failed, certificate revoked on Sat 12 Oct 2024 15:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c1:ec:e5:70:5b:a1:81:58:a9:fe:26:7b:9c:30:ea:a0:c4:80:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 25 16:17:49 2024 GMT
            Not After : Jul 24 16:22:49 2025 GMT
        Subject: CN=8117E06ADD38D45F0F656C1EDF6A16C02C8434DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:86:a4:7f:b2:20:01:13:37:99:9b:a2:b5:
                    62:39:01:ed:70:07:5a:96:99:17:30:2c:19:60:21:
                    98:b0:e1:77:4d:01:d8:b5:fa:2f:a2:c2:3d:f7:79:
                    dc:73:2a:ac:cd:b4:0c:54:04:11:7d:15:99:3c:20:
                    d5:69:0f:32:2f:06:e6:51:a6:b5:af:08:79:32:53:
                    86:b7:85:a8:74:a6:c0:d0:fc:68:a8:30:1d:99:b9:
                    a4:41:67:c2:db:aa:ab:26:b0:de:b8:d6:8e:11:76:
                    e5:b1:bc:8c:f2:c3:00:47:31:91:0e:7d:da:74:67:
                    4d:1e:6a:2c:c1:b4:fc:77:28:77:f5:f4:e9:c6:b4:
                    2e:7f:41:fc:17:b3:2a:14:d2:e6:9c:5d:bf:14:a6:
                    a0:17:55:11:71:97:f5:75:00:8c:14:00:96:6a:aa:
                    aa:27:80:5b:60:14:a2:ba:ee:db:cc:3e:62:33:24:
                    24:a1:02:5f:e9:ec:5c:f6:fc:84:8a:6c:22:ef:1e:
                    df:07:4c:f9:1a:fe:13:e6:8c:c3:5c:f3:80:78:48:
                    29:b0:d3:3e:18:c5:50:bc:a2:b1:c4:30:fb:6a:73:
                    8a:7f:c9:95:c6:df:fa:10:d9:10:d8:19:2f:3d:43:
                    48:1f:e4:85:23:15:e3:7f:c9:cb:90:3a:28:ba:20:
                    d9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:17:E0:6A:DD:38:D4:5F:0F:65:6C:1E:DF:6A:16:C0:2C:84:34:DF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/8117E06ADD38D45F0F656C1EDF6A16C02C8434DF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.188.0/22
                IPv6:
                  2804:445c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267628

    Signature Algorithm: sha256WithRSAEncryption
         58:97:e3:0c:f7:d2:ac:59:77:20:ba:09:02:54:ce:d2:dd:df:
         ac:43:e9:07:e5:bf:46:1e:6b:8e:a5:86:cc:34:52:ab:58:db:
         0c:b9:e0:14:09:2c:ef:69:32:e7:f5:8b:83:5d:72:f5:e1:b2:
         bd:c0:ed:47:59:ee:40:8a:69:28:c8:50:c1:32:e1:74:a7:50:
         b8:59:75:df:ec:3b:89:7d:f8:94:ac:f5:4a:32:0a:45:a2:2c:
         b9:49:91:ba:dd:e4:79:6c:24:18:a3:e0:57:c6:81:f5:34:42:
         9f:7a:62:90:22:db:4b:64:65:22:d4:ba:2c:3f:de:62:83:2a:
         63:56:17:67:84:a9:63:96:10:c2:bf:cf:2e:30:43:d7:ad:3f:
         0e:8f:bf:06:ae:b1:89:2e:f1:a7:c6:93:83:bc:8e:43:35:29:
         d4:bf:63:94:ea:a4:15:91:38:c4:34:6b:91:dd:57:c9:47:d0:
         43:43:11:d4:52:03:5d:8d:df:32:97:21:4a:ca:22:e5:66:c8:
         ce:07:ff:8a:72:08:42:e0:9d:7f:83:de:d2:72:1e:45:2d:37:
         b2:74:a9:53:98:a2:58:4a:cf:45:0b:a3:ac:d9:16:b2:d0:3c:
         a0:3e:8e:2a:60:a0:5f:e9:9a:64:27:a1:b8:d2:33:61:14:3b:
         a8:d9:c8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 21:07:17 2024 by rpki-client on console-ams.rpki-client.org