Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8A06D83850FBF1E5B4D567F59587362D8D24F4B9.cer
File:                     8A06D83850FBF1E5B4D567F59587362D8D24F4B9.cer (raw, json)
Hash identifier:          UAukJF6ExWG0+oWVb9yXP/zeO0Vtg38B7fIJsUOO+JY=
Subject key identifier:   8A:06:D8:38:50:FB:F1:E5:B4:D5:67:F5:95:87:36:2D:8D:24:F4:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6ABE26020055F9DD76ECA88CD28679B192C265C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/8A06D83850FBF1E5B4D567F59587362D8D24F4B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 May 2024 20:50:46 +0000
Certificate not after:    Fri 02 May 2025 20:55:46 +0000
Subordinate resources:    AS: 22706
                          IP: 200.152.80.0/20

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 16:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:be:26:02:00:55:f9:dd:76:ec:a8:8c:d2:86:79:b1:92:c2:65:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  3 20:50:46 2024 GMT
            Not After : May  2 20:55:46 2025 GMT
        Subject: CN=8A06D83850FBF1E5B4D567F59587362D8D24F4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9e:cd:4f:4b:53:38:16:2f:09:dd:c9:9e:bc:
                    93:a7:ec:32:ed:bc:bf:3c:55:e1:9e:4a:6d:d4:b5:
                    55:5f:88:4e:4a:42:6f:1d:1d:72:98:53:ce:13:2f:
                    35:a3:bc:b1:fe:a3:e6:46:42:1d:0a:a3:ee:22:77:
                    94:dd:cb:ab:f5:2b:a7:ab:87:28:9a:38:12:24:b4:
                    5d:a1:24:2e:09:78:fe:12:41:10:59:45:82:05:38:
                    4e:4e:f9:c2:43:fa:a9:2b:95:d2:90:3b:7a:65:45:
                    fc:25:9b:42:32:a8:66:69:8e:c8:2a:b5:41:df:0b:
                    59:71:df:c0:cc:83:1a:1e:61:fc:e4:bd:4e:b2:a6:
                    3b:5b:e1:da:e5:88:d8:59:71:cd:5c:1e:17:c6:d4:
                    7c:c9:7d:71:b3:4c:f0:35:29:40:1e:74:8d:a9:5f:
                    fd:e0:4a:3c:e4:74:f8:b1:97:3b:20:47:31:c7:ad:
                    ff:01:00:dd:13:ce:72:cb:2c:7f:e3:82:9f:64:68:
                    07:2d:a1:67:33:0c:ef:f4:eb:16:89:7c:a7:89:98:
                    c1:b1:df:f3:92:ad:74:4b:0b:78:83:8b:55:e7:34:
                    95:49:c6:93:39:4c:21:d1:a8:9d:6c:04:c2:47:a5:
                    9a:34:fd:7a:69:60:40:1a:8d:d9:17:1b:94:34:55:
                    7e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:06:D8:38:50:FB:F1:E5:B4:D5:67:F5:95:87:36:2D:8D:24:F4:B9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/8A06D83850FBF1E5B4D567F59587362D8D24F4B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.80.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22706

    Signature Algorithm: sha256WithRSAEncryption
         bd:7e:b6:f7:65:1c:0d:77:b0:f0:1a:59:06:8e:78:87:d0:7b:
         db:17:62:79:36:7f:41:c2:9c:eb:a4:95:29:9d:ee:86:a9:a5:
         de:68:df:57:3b:88:13:ef:02:0b:1f:5e:bc:21:36:18:c7:a9:
         1a:48:19:ed:b6:6e:07:99:8f:e1:6a:b5:0b:27:50:36:c9:03:
         0e:58:68:de:1c:07:47:3f:34:28:a0:12:3e:0a:6b:ab:e0:a8:
         fc:c9:3c:4f:a2:ce:bc:6c:ff:0f:74:9a:5e:db:89:84:75:70:
         f0:88:e2:f4:0b:b9:ed:77:ce:84:01:84:f7:d1:51:9d:75:cb:
         7f:96:f8:cb:15:cc:cf:11:ab:80:a2:06:04:3e:9a:ba:11:11:
         f7:dc:96:af:8d:41:23:8c:c9:ac:70:f0:e0:b4:50:48:14:b2:
         db:28:36:17:a4:54:ad:79:55:33:8c:9e:e0:2a:52:91:dc:e7:
         b7:5b:b2:bb:cd:d5:0a:7a:b1:77:3f:86:ab:eb:0e:49:ac:43:
         eb:11:5d:e3:47:b4:83:c6:9a:49:c4:52:3c:ac:02:53:dd:55:
         d1:d6:d3:eb:3d:66:aa:19:d2:bd:f2:a6:61:bd:aa:e0:1d:27:
         e7:0d:4c:16:bd:e7:e3:0c:33:4a:ad:c4:25:13:22:52:8c:97:
         89:ba:36:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org