Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/83AF5BC90452ABA4A9EE3EECC12F9F7DEA0F9918.cer
File:                     83AF5BC90452ABA4A9EE3EECC12F9F7DEA0F9918.cer (raw, json)
Hash identifier:          rgGIX9EzDdeZkb6i4kweFGzM7bBtgNRNcI5JOdOx1Fs=
Subject key identifier:   83:AF:5B:C9:04:52:AB:A4:A9:EE:3E:EC:C1:2F:9F:7D:EA:0F:99:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B45BC1BAF241681719248DF4CFD80441371CE15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/1/83AF5BC90452ABA4A9EE3EECC12F9F7DEA0F9918.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 21:32:16 +0000
Certificate not after:    Thu 03 Apr 2025 21:37:16 +0000
Subordinate resources:    AS: 269530
                          IP: 45.188.184.0/22
                          IP: 2804:660c::/32

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 09:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:45:bc:1b:af:24:16:81:71:92:48:df:4c:fd:80:44:13:71:ce:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 21:32:16 2024 GMT
            Not After : Apr  3 21:37:16 2025 GMT
        Subject: CN=83AF5BC90452ABA4A9EE3EECC12F9F7DEA0F9918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:f7:2c:90:b1:80:3c:2c:1b:ea:97:d1:2f:
                    60:95:c0:88:97:c0:be:8e:a4:04:48:47:14:01:d7:
                    23:32:ed:51:c6:4a:11:3b:bc:e4:9e:5e:b4:05:4b:
                    cb:ad:52:21:02:89:26:d4:e1:19:23:a4:c4:8d:2a:
                    31:60:0f:fb:dc:ea:8a:87:8c:9b:b6:bd:45:65:e6:
                    bc:38:77:33:6b:4e:db:d7:84:1a:53:2d:55:79:11:
                    bb:01:43:06:79:c7:e2:36:ba:2e:b0:bd:79:f4:90:
                    17:91:6f:6f:27:d0:41:a8:28:04:6b:9d:c5:79:51:
                    b4:db:1a:9f:f7:ed:f3:c7:d6:b2:bc:d2:9c:ff:6c:
                    82:b8:ea:20:78:9b:42:07:5b:ce:04:1b:7e:be:79:
                    39:5c:f0:b8:c3:3e:43:21:22:29:4e:86:97:95:fa:
                    b3:cf:d5:34:2e:04:c1:9d:ce:fd:b2:d6:44:c5:ad:
                    3e:32:1c:ca:58:f2:27:13:08:2b:8c:74:c6:41:3d:
                    92:c3:47:12:38:65:8e:ab:05:03:1f:55:29:b1:d9:
                    da:c9:6c:4e:64:e3:59:40:54:4a:60:ca:e4:aa:21:
                    0b:54:4a:00:bb:9e:e3:48:4c:90:8e:e4:a3:89:f5:
                    26:9a:57:c0:58:f5:67:4d:e3:19:87:c2:f0:40:72:
                    33:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:AF:5B:C9:04:52:AB:A4:A9:EE:3E:EC:C1:2F:9F:7D:EA:0F:99:18
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/1/83AF5BC90452ABA4A9EE3EECC12F9F7DEA0F9918.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.184.0/22
                IPv6:
                  2804:660c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269530

    Signature Algorithm: sha256WithRSAEncryption
         b5:a5:07:11:0f:62:d5:80:05:db:4f:8a:82:1f:49:17:13:5d:
         f0:c0:1d:73:fd:c6:06:39:d9:ea:34:a0:75:68:0b:b0:90:92:
         54:a5:db:03:d9:d0:fa:4d:21:74:aa:bd:65:d0:d4:f6:0c:41:
         41:b0:47:7c:eb:13:df:a8:4e:2a:47:3b:0e:0c:c3:ae:45:be:
         7a:28:77:9d:77:54:a1:53:0b:ca:3d:a1:9a:fd:60:6c:fe:63:
         3a:f1:8a:04:3e:61:8c:9b:1f:43:a2:80:60:36:16:fb:36:32:
         76:c0:6a:04:a7:e3:8d:51:f3:51:07:cd:f9:f1:9d:2f:7d:2e:
         a6:2a:7b:d5:9e:fe:a8:64:db:b7:cd:84:78:bc:f3:fb:ff:ba:
         97:4d:45:02:a8:7c:85:10:9e:05:ee:dd:17:47:04:a2:c7:6c:
         43:c5:bb:d7:a4:af:9a:80:54:26:31:ea:f2:b4:d1:a7:cd:4e:
         b0:66:c2:e7:08:d0:b1:70:8b:29:38:94:65:59:86:ec:bd:90:
         b4:21:6c:75:e9:53:05:19:8f:72:dc:82:72:b3:30:e2:17:1c:
         72:cd:17:08:5d:6f:9b:71:77:86:b9:63:bc:2f:56:54:fb:50:
         25:68:c1:47:53:2d:fc:f4:dc:cd:da:87:7c:ef:ac:64:94:e8:
         d0:e1:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 14:50:23 2024 by rpki-client on console-ams.rpki-client.org