Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.cer
File:                     8A6E605ED2BDD660443C6C16905FB728C0170E49.cer (raw, json)
Hash identifier:          tSlxLQukISZBUEE2Nv+uMLPr3QA3UVTbWjHcuaczh4k=
Subject key identifier:   8A:6E:60:5E:D2:BD:D6:60:44:3C:6C:16:90:5F:B7:28:C0:17:0E:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       14229AE358F7082D07CFD2A0E37182DEACAAFC55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:11:18 +0000
Certificate not after:    Thu 03 Apr 2025 11:16:18 +0000
Subordinate resources:    AS: 272228
                          IP: 189.126.128.0/22
                          IP: 2804:83e8::/32

Validation:               Failed, certificate revoked on Tue 07 May 2024 15:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:22:9a:e3:58:f7:08:2d:07:cf:d2:a0:e3:71:82:de:ac:aa:fc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 11:11:18 2024 GMT
            Not After : Apr  3 11:16:18 2025 GMT
        Subject: CN=8A6E605ED2BDD660443C6C16905FB728C0170E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:92:97:74:2a:19:52:d5:e3:b4:29:cb:42:
                    0c:f6:84:c3:36:e8:7f:be:e2:80:b1:b3:3c:b3:65:
                    f6:ff:59:46:93:56:ea:41:36:62:34:db:1d:a1:36:
                    59:ab:bb:89:9d:ef:72:08:eb:5f:cb:2b:ac:fe:0e:
                    21:62:0a:ab:8a:61:4f:a9:22:4e:23:4d:65:d9:ea:
                    ed:45:dc:4f:91:23:53:9f:65:52:9b:39:a4:6f:c3:
                    e6:20:18:dd:80:90:12:7c:00:bf:15:57:55:f2:4b:
                    1a:03:8b:cc:9f:30:bc:43:8b:f0:aa:23:b8:67:de:
                    5e:da:19:72:cf:a2:9d:45:c1:7e:aa:b0:b3:df:86:
                    02:ac:d6:40:44:04:5f:9e:b9:aa:ab:cd:51:5b:70:
                    ae:89:57:2b:15:3d:dc:1c:06:db:29:77:08:71:7e:
                    72:9b:6a:be:20:8f:3b:c2:5e:4c:97:b3:c2:c2:63:
                    93:7e:dc:5a:8d:d7:97:b3:95:55:97:56:f8:16:1d:
                    1a:41:bb:37:80:db:24:f8:9b:f8:1a:bb:c8:32:3d:
                    6b:75:d3:90:da:3c:3e:a7:2d:e8:6e:01:e7:e1:eb:
                    b6:ea:9a:60:75:e0:bc:ec:35:86:4e:68:8a:f8:38:
                    ab:40:af:13:f3:ec:ad:ee:55:ea:1e:1e:80:2e:86:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:6E:60:5E:D2:BD:D6:60:44:3C:6C:16:90:5F:B7:28:C0:17:0E:49
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.128.0/22
                IPv6:
                  2804:83e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272228

    Signature Algorithm: sha256WithRSAEncryption
         97:55:bb:9e:37:d5:d8:90:ad:89:c4:9b:0a:38:98:41:1d:15:
         04:a6:45:51:e5:3b:ea:5d:ce:7c:6f:14:ed:00:7d:cd:08:aa:
         4d:24:ef:a8:fc:16:7c:85:d4:79:f0:9a:b9:c5:62:8e:87:37:
         23:30:88:0b:5c:d6:22:34:1f:a5:4a:96:ac:b8:ee:8f:93:b4:
         33:5a:93:24:f8:9b:4e:43:2b:90:d0:5a:f0:c5:d9:d7:39:69:
         2e:f0:a0:4a:a3:90:ad:8d:af:97:50:b8:7f:af:f5:52:31:8e:
         e7:cf:9a:c2:d7:37:97:83:1d:68:11:01:4c:62:41:48:f5:dc:
         8a:e3:0a:de:b1:8d:18:98:60:ca:9f:34:4a:f5:d3:55:b6:43:
         9f:fb:2b:75:94:a0:f5:4f:9f:35:98:79:69:6a:b1:b6:55:00:
         a3:cd:22:cd:b3:35:d0:df:68:64:75:e3:06:e3:35:1c:d3:e1:
         04:8a:14:d8:ad:29:41:af:5d:8d:f1:bc:e3:c9:e7:22:ed:fc:
         26:48:a9:59:a1:22:b9:8a:35:5d:61:bb:f5:d5:73:15:6c:6d:
         fd:3a:a8:b5:c8:b2:50:f5:2d:d2:40:f1:3f:ff:f1:b8:e7:67:
         ec:d9:7a:ea:16:77:9d:0f:92:f6:80:f1:13:55:cc:d9:4e:07:
         bc:12:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org