Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer
File:                     88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer (raw, json)
Hash identifier:          mz7EXPcwQtbjpOizPxL8wlNPPebB7/ejFGV5k/hwvj0=
Subject key identifier:   88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       35F4BAF1311443C27F22EA09B3EBCD1AD7814BFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Sep 2024 21:39:39 +0000
Certificate not after:    Tue 23 Sep 2025 21:44:39 +0000
Subordinate resources:    AS: 270716
                          IP: 189.127.188.0/22
                          IP: 2804:7044::/32

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 00:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f4:ba:f1:31:14:43:c2:7f:22:ea:09:b3:eb:cd:1a:d7:81:4b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 24 21:39:39 2024 GMT
            Not After : Sep 23 21:44:39 2025 GMT
        Subject: CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:4c:e6:39:bb:9f:de:bf:16:aa:cd:6b:3b:
                    08:12:5f:52:30:a6:c2:60:a2:5b:44:4b:e9:df:5f:
                    4a:f3:b2:4d:3c:32:48:34:50:80:e2:31:71:c6:63:
                    3a:27:9a:14:44:8f:2d:b4:25:16:22:8b:5e:f4:ad:
                    c0:00:ca:de:69:28:cd:d8:cb:b3:5c:c3:13:b9:11:
                    31:64:ee:c0:ac:9f:60:39:40:13:1f:08:d4:57:7f:
                    6c:97:c6:c3:68:31:ab:70:75:36:9d:2d:63:ee:b2:
                    cd:1e:c2:a9:52:51:75:81:86:7c:fb:08:71:cf:6a:
                    0c:c3:0a:45:33:eb:8a:3e:e9:13:6e:98:7a:be:14:
                    d4:d5:fd:45:f4:f3:fa:32:28:39:c8:b1:f7:a6:09:
                    51:d9:b2:6d:81:d6:ac:7f:d9:73:9a:c7:bc:ab:01:
                    9a:80:8f:f5:83:50:49:ce:48:4a:20:c1:06:97:44:
                    8f:98:18:49:de:ed:ed:c6:e5:9d:0f:9d:43:a6:a2:
                    ce:69:1d:7d:a1:bf:f2:b8:7d:31:9e:4c:14:0b:e3:
                    00:bb:03:14:0e:60:af:1b:f2:42:f8:43:1f:f9:0d:
                    fa:6d:12:eb:15:1e:d0:38:f1:26:de:cb:da:1c:68:
                    60:27:42:74:47:85:be:e9:4d:30:63:d9:19:b4:4e:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.188.0/22
                IPv6:
                  2804:7044::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270716

    Signature Algorithm: sha256WithRSAEncryption
         94:b1:35:6a:b6:19:69:2b:17:52:73:94:2f:02:8a:0f:2b:fa:
         d6:13:4e:57:9e:96:e4:fc:f2:72:66:cb:2d:0d:dd:18:22:a3:
         2d:ea:fd:5e:91:5f:c5:67:79:41:5b:78:b4:35:f2:b3:db:42:
         eb:71:6c:21:77:0d:d0:f5:bb:75:30:a6:94:03:83:b2:76:63:
         9a:c1:12:d2:ad:79:da:8c:c4:2a:7c:ec:1d:0a:f5:67:eb:73:
         6b:0f:1a:77:50:27:95:93:90:cd:b2:eb:eb:43:a7:f5:6d:e4:
         f6:15:8f:5b:5f:98:27:79:95:ba:b6:3a:a2:1a:6f:7c:58:82:
         8f:3f:f0:0c:7b:f4:62:9b:9c:d0:32:6a:f8:fa:21:ca:f1:5e:
         31:74:ad:7f:4f:77:03:a5:59:bc:aa:c8:0d:80:42:73:29:a3:
         96:55:77:cf:cf:ba:f8:95:03:1c:5e:87:1b:21:ff:94:a6:96:
         b3:73:cf:4c:2e:0a:f2:fc:0e:d3:46:55:8c:e3:dd:5f:50:24:
         b5:14:1c:67:06:64:1f:02:86:33:e7:e6:d1:ef:c9:4c:29:33:
         eb:bb:d5:3d:89:14:95:71:b2:8f:07:3b:82:9b:64:2a:35:84:
         41:88:c8:49:aa:86:74:3f:f8:d9:4b:8b:ad:65:02:a5:73:9f:
         ac:27:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 04:47:35 2024 by rpki-client on console-ams.rpki-client.org