Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89245D9B035AC8A394E173B578087A9053DBDBBB.cer
File:                     89245D9B035AC8A394E173B578087A9053DBDBBB.cer (raw, json)
Hash identifier:          odFBaHzEtpoXEOE9oYVCAgamZt3zPLSpEQEHdVySL/g=
Subject key identifier:   89:24:5D:9B:03:5A:C8:A3:94:E1:73:B5:78:08:7A:90:53:DB:DB:BB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       32CDEDC879D0C7812C49170F458CA666B24EDC9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/89245D9B035AC8A394E173B578087A9053DBDBBB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Aug 2024 21:20:32 +0000
Certificate not after:    Wed 06 Aug 2025 21:25:32 +0000
Subordinate resources:    AS: 273436
                          IP: 2804:8e98::/32

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 17:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cd:ed:c8:79:d0:c7:81:2c:49:17:0f:45:8c:a6:66:b2:4e:dc:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  7 21:20:32 2024 GMT
            Not After : Aug  6 21:25:32 2025 GMT
        Subject: CN=89245D9B035AC8A394E173B578087A9053DBDBBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d5:47:cc:d4:18:37:0d:dd:b6:71:d5:4f:d5:
                    b9:c2:ad:90:cd:b7:46:cf:0c:5c:55:5c:81:98:2c:
                    f7:b2:79:d3:72:45:7d:93:fa:8d:25:b8:49:32:fe:
                    86:c0:95:57:05:e9:e8:78:cd:2e:4a:b2:c2:a0:43:
                    58:b6:5e:26:a2:78:08:da:94:32:ac:d4:3b:71:3c:
                    47:5e:2a:62:ac:bf:ad:ea:04:f0:fe:08:39:53:ee:
                    68:fd:4a:52:c1:fc:e5:20:05:89:1a:a9:c7:e6:c1:
                    32:cf:8a:eb:7c:b9:f0:60:3b:21:aa:13:8b:3e:4c:
                    5a:fe:fc:be:27:a3:7f:df:6d:4d:f7:27:17:c1:bc:
                    4c:cb:aa:b6:6c:38:82:9b:cf:78:76:37:cc:24:d4:
                    9a:68:13:47:2f:0d:dc:55:5d:6c:01:65:3b:82:83:
                    a5:dc:96:02:9c:40:85:2b:71:26:34:93:40:3c:da:
                    36:de:9a:22:1f:69:a4:e6:ff:58:5a:f2:69:a5:28:
                    3d:f2:15:6b:01:bd:ec:04:cb:79:49:c8:ff:dc:ae:
                    29:c2:63:26:c1:6e:bb:ec:2a:bb:45:9c:6d:2b:79:
                    18:5d:d0:7b:d5:a2:8f:76:88:60:c8:42:b6:db:26:
                    f2:4d:9e:bb:14:1b:ad:be:ba:82:dd:47:38:3e:3a:
                    e0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:24:5D:9B:03:5A:C8:A3:94:E1:73:B5:78:08:7A:90:53:DB:DB:BB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/89245D9B035AC8A394E173B578087A9053DBDBBB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273436

    Signature Algorithm: sha256WithRSAEncryption
         1c:9e:02:1b:29:08:ea:f5:47:de:ba:7f:9a:0b:fd:dc:dc:b0:
         9d:1d:7a:9f:18:15:18:62:a1:a2:9a:a1:0a:d1:3c:12:de:d6:
         b0:c6:06:09:65:b5:c6:58:01:87:c5:a7:43:9a:e9:f1:58:60:
         5e:d9:6c:4c:23:43:55:a4:64:34:8f:d1:ec:b4:ec:fe:bf:66:
         5e:0a:4b:ec:6f:e9:d4:63:9a:ba:73:f5:70:43:f9:76:fa:7c:
         1c:b3:af:a5:d9:a5:0c:08:56:75:ad:b5:b2:cc:cb:6c:e2:83:
         e2:fa:09:30:3b:25:01:ba:c6:29:83:c4:9c:fc:53:e5:02:76:
         30:be:44:76:4d:97:80:10:c8:ec:0d:90:71:08:a3:5f:d9:39:
         8b:fd:aa:39:2f:8c:c4:db:57:55:09:ac:35:2c:c1:fe:8f:de:
         0b:66:e9:c5:df:ec:31:aa:6a:20:be:6d:0f:c7:20:17:1d:54:
         91:f3:c0:e8:54:a9:2d:9d:19:4d:d0:16:e2:af:c1:04:fa:87:
         b6:af:bd:0d:4a:85:c9:44:c7:8a:23:2c:61:36:76:a9:fe:7e:
         f8:70:ab:73:37:05:78:bf:81:9f:ee:65:75:45:b9:c8:53:61:
         e0:59:59:3d:ff:b9:ab:37:89:3f:3c:6a:d1:e6:98:ac:5f:e4:
         24:42:44:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:42:08 2024 by rpki-client on console-fra.rpki-client.org