Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8311320D0A5E20E8EB6574376E3566EEBD30A4C2.cer
File:                     8311320D0A5E20E8EB6574376E3566EEBD30A4C2.cer (raw, json)
Hash identifier:          ONpsEIJpMFZXYoRxZCzyGqD9KGnY0TOXIyft7jUi7kU=
Subject key identifier:   83:11:32:0D:0A:5E:20:E8:EB:65:74:37:6E:35:66:EE:BD:30:A4:C2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FE51D97342079DBBB7C952EDA7684ADB6810677
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/1/8311320D0A5E20E8EB6574376E3566EEBD30A4C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 17:16:41 +0000
Certificate not after:    Thu 03 Apr 2025 17:21:41 +0000
Subordinate resources:    AS: 53097
                          IP: 187.63.208.0/20
                          IP: 2804:3190::/32

Validation:               Failed, certificate revoked on Mon 06 May 2024 18:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e5:1d:97:34:20:79:db:bb:7c:95:2e:da:76:84:ad:b6:81:06:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 17:16:41 2024 GMT
            Not After : Apr  3 17:21:41 2025 GMT
        Subject: CN=8311320D0A5E20E8EB6574376E3566EEBD30A4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:f2:0f:c6:70:6d:61:2c:11:3f:14:e6:f4:
                    30:eb:3e:66:cf:0b:80:92:fe:3f:29:38:e8:ea:2a:
                    51:f5:c7:5b:8e:3f:64:98:33:0d:0a:26:70:f1:76:
                    78:60:9c:32:07:ba:b1:b5:31:2c:22:a4:75:99:83:
                    60:bd:25:52:5e:c1:cf:08:c2:45:36:8a:21:fc:79:
                    89:a2:ea:d7:44:c0:ee:94:25:76:f5:15:79:81:5a:
                    15:27:8e:26:fc:0e:e4:fd:ec:4b:e8:55:0b:c2:0e:
                    62:4b:3c:c1:34:fe:84:44:a3:52:f8:3d:e9:7f:26:
                    a8:e1:d7:4a:7e:ce:9e:47:0e:0a:82:9d:49:33:31:
                    12:c5:5f:e0:b2:d9:0b:c1:b7:95:79:e2:37:e1:32:
                    4e:2e:db:cc:25:11:e1:34:a5:d8:b1:4b:0d:f3:ec:
                    12:cc:7c:b2:66:7d:0f:50:8b:aa:a6:e0:60:08:79:
                    18:6a:f1:78:c4:f9:b3:0e:8c:94:a3:12:a6:ca:20:
                    49:d9:b6:a5:83:db:3b:8b:f9:e6:39:40:b3:cc:20:
                    bc:ba:26:f7:ca:b3:5f:e6:c8:4e:0d:d1:90:b9:9d:
                    d1:3d:fc:52:26:90:e8:d3:7a:c2:ab:75:df:4a:82:
                    8c:16:88:1d:21:42:b0:45:b8:f4:38:16:c3:e4:49:
                    26:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:11:32:0D:0A:5E:20:E8:EB:65:74:37:6E:35:66:EE:BD:30:A4:C2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/1/8311320D0A5E20E8EB6574376E3566EEBD30A4C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.208.0/20
                IPv6:
                  2804:3190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53097

    Signature Algorithm: sha256WithRSAEncryption
         96:c3:e3:44:03:1e:d7:42:20:8f:31:ea:c1:4a:e1:31:fa:58:
         08:b8:ac:96:7f:21:fa:92:94:30:6e:71:29:0f:ba:c5:76:f3:
         c0:ba:ed:53:d1:fb:17:2f:bf:e5:35:c6:e2:f6:47:fa:7b:46:
         10:d3:72:b8:53:e8:db:86:d2:42:65:97:59:7c:ec:49:95:97:
         ce:1a:30:01:b2:6a:a2:03:96:58:fa:05:e6:54:7d:c3:8b:46:
         60:96:07:1a:10:15:3b:55:85:ad:cc:0b:27:a1:17:b8:3c:5d:
         84:a9:a1:e6:b3:78:e5:e4:83:56:e3:a0:23:ea:35:82:61:5b:
         e4:17:05:97:0c:d0:3f:61:24:8e:58:be:0a:bc:67:8c:d8:eb:
         03:0d:69:92:87:ba:18:ba:31:1d:1e:eb:47:06:43:c5:a8:90:
         a7:b3:f6:8f:c5:d5:45:13:9d:09:31:31:14:75:b2:84:c3:41:
         2e:85:74:96:d8:e5:74:0b:13:1e:cb:42:d7:77:7a:b3:7d:a8:
         27:e0:7d:22:aa:6e:b0:ba:85:e7:d6:e6:b3:df:bd:12:ac:e9:
         3a:04:3d:cf:2e:33:e8:74:86:12:9a:a3:b3:b5:20:0c:96:df:
         a0:10:5e:13:36:69:30:b2:e6:3e:5e:2f:92:f0:8b:0e:8e:17:
         75:c7:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org