Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8C116A6EBF1801092052F063332CB171BCDEBFA2.cer
File:                     8C116A6EBF1801092052F063332CB171BCDEBFA2.cer (raw, json)
Hash identifier:          UheHjsuxYhzVzhwZu33ez4sMbAr132m+StPcmSnXGcc=
Subject key identifier:   8C:11:6A:6E:BF:18:01:09:20:52:F0:63:33:2C:B1:71:BC:DE:BF:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11308F2AC8D6BCFF830C04F608449AD4A9488D80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/8C116A6EBF1801092052F063332CB171BCDEBFA2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Apr 2024 23:28:59 +0000
Certificate not after:    Mon 28 Apr 2025 23:33:59 +0000
Subordinate resources:    AS: 273467
                          IP: 168.194.179.0/24
                          IP: 170.245.172.0/22
                          IP: 2804:8f18::/32

Validation:               Failed, certificate revoked on Fri 24 May 2024 13:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:30:8f:2a:c8:d6:bc:ff:83:0c:04:f6:08:44:9a:d4:a9:48:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 29 23:28:59 2024 GMT
            Not After : Apr 28 23:33:59 2025 GMT
        Subject: CN=8C116A6EBF1801092052F063332CB171BCDEBFA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:4c:ce:e5:2f:c5:8f:df:53:bc:3d:c4:91:
                    8f:af:28:2d:bb:31:59:e4:dc:a9:67:ff:a3:78:7b:
                    0b:77:0b:06:30:58:fc:d8:4a:3f:d3:a8:38:1a:36:
                    ed:fe:d2:1b:ab:ec:9c:28:e4:6d:40:ed:4a:a9:a5:
                    3b:1f:b8:33:3a:1f:1b:a2:4a:13:b1:d4:ac:6e:80:
                    c7:0e:a6:a3:02:d5:35:93:fe:24:0d:e5:b2:b5:ce:
                    ef:27:08:b7:32:4c:fc:42:24:cf:82:e0:55:05:c7:
                    31:a3:0d:47:cd:a5:99:8d:e9:53:0d:e6:a6:74:a8:
                    74:71:cd:7e:82:ce:59:e9:7d:02:c9:ab:2d:ce:03:
                    bd:ae:41:d8:1c:e9:76:5f:15:83:e5:a1:2c:46:47:
                    c0:a8:d5:6a:47:ac:c3:37:f6:35:ae:90:6f:98:c8:
                    9f:e2:32:7e:71:38:a5:d6:27:c9:07:80:87:e8:91:
                    32:f3:e2:fe:33:09:6e:65:77:17:12:65:76:56:98:
                    1c:93:f1:bd:86:77:95:5e:20:ed:a2:eb:ed:39:73:
                    5e:b0:31:37:64:f2:17:f2:3f:4c:c0:f3:40:bf:c7:
                    d9:1d:86:08:24:f9:14:39:56:db:77:df:94:01:9c:
                    62:62:2b:3a:bb:9e:8f:5d:ca:7e:40:96:64:e4:40:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:11:6A:6E:BF:18:01:09:20:52:F0:63:33:2C:B1:71:BC:DE:BF:A2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/8C116A6EBF1801092052F063332CB171BCDEBFA2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.179.0/24
                  170.245.172.0/22
                IPv6:
                  2804:8f18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273467

    Signature Algorithm: sha256WithRSAEncryption
         87:49:87:6c:5f:88:0a:0b:78:36:51:04:f2:e8:09:0c:fe:11:
         57:cf:1f:44:10:dc:1d:8b:60:f1:e1:05:60:b1:b7:1b:dc:aa:
         80:d3:08:ca:77:43:c3:55:44:1d:de:1a:42:ef:b6:f5:60:25:
         05:13:d5:d1:86:a9:84:b4:9d:f1:f2:aa:a2:ab:68:7d:25:7c:
         b0:1d:1f:f2:51:1e:53:ed:67:e3:20:57:ea:2d:73:47:97:06:
         bc:96:5b:66:92:df:a9:08:6f:39:82:ee:ce:7b:40:c6:72:81:
         59:99:a3:b1:a7:e8:1e:08:bf:1b:98:65:61:4b:b0:70:d6:91:
         95:40:29:f7:33:0c:8d:9e:bc:9f:12:97:5a:a0:22:29:81:b1:
         23:3c:3f:0e:48:29:98:5d:63:c7:4f:9b:f9:59:e9:de:f6:a3:
         d0:1f:4c:ee:96:a3:c3:5b:cd:c1:0a:29:cd:37:ac:8f:c8:80:
         4e:9b:0b:1c:48:3b:5a:a5:53:ea:6d:cc:a5:be:c0:ca:cf:4c:
         8c:be:e0:87:1b:8b:5f:65:03:2a:8a:40:8c:fc:99:d6:62:d3:
         f7:f2:b8:9c:d5:15:66:4f:78:5b:b0:49:10:d3:0d:06:a7:30:
         36:f2:73:12:74:a8:4b:78:7f:dc:55:2e:ba:1f:fd:91:b3:5e:
         7c:4d:76:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org