Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8C1835B5BC0BD04BA2C7F50FB18B4DDB79371929.cer
File:                     8C1835B5BC0BD04BA2C7F50FB18B4DDB79371929.cer (raw, json)
Hash identifier:          odx4NMj6bPXXMkp2n6gs/S/Xf9WH2y1oqNkqv1bewYQ=
Subject key identifier:   8C:18:35:B5:BC:0B:D0:4B:A2:C7:F5:0F:B1:8B:4D:DB:79:37:19:29
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       22041CD473BD0812B945B941AE1ED1CB15C4D066
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/8C1835B5BC0BD04BA2C7F50FB18B4DDB79371929.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jul 2024 23:04:58 +0000
Certificate not after:    Tue 15 Jul 2025 23:09:58 +0000
Subordinate resources:    AS: 270824
                          IP: 190.115.196.0/22
                          IP: 2804:71fc::/32

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 07:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:04:1c:d4:73:bd:08:12:b9:45:b9:41:ae:1e:d1:cb:15:c4:d0:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 16 23:04:58 2024 GMT
            Not After : Jul 15 23:09:58 2025 GMT
        Subject: CN=8C1835B5BC0BD04BA2C7F50FB18B4DDB79371929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9c:14:b0:70:68:bb:a0:43:d0:64:2d:1b:e7:
                    5f:3e:52:18:f4:c5:31:44:38:79:7b:40:f6:75:14:
                    52:1f:10:d8:05:67:20:b6:76:e7:db:88:bd:fb:7b:
                    7e:42:e3:76:38:6f:8f:4e:3b:14:d9:c7:c0:b1:f8:
                    d2:77:14:92:79:f0:7c:2f:e9:fc:51:7a:ba:1f:09:
                    ef:43:e3:18:04:7f:e4:cc:ca:6d:5a:3e:1c:c7:2f:
                    b1:53:28:b5:f2:40:1f:c5:68:ee:96:ee:48:5b:02:
                    83:92:f9:d3:a1:d0:32:3e:9d:6d:0c:53:7d:82:f1:
                    18:2b:ce:60:f5:fd:21:fb:f9:e3:70:5d:5d:bf:3a:
                    12:b5:bb:24:05:3d:e1:2b:d3:5c:d3:b1:bf:a4:54:
                    90:3d:c7:82:35:c6:46:bc:49:44:9d:74:38:7d:13:
                    8b:21:f7:a9:4e:22:74:ab:43:58:79:5c:c3:d3:95:
                    29:fd:34:fc:df:8e:ef:b4:8a:0b:5c:bc:8d:0f:91:
                    56:83:22:f5:86:95:66:c2:52:3f:b2:da:fc:91:1d:
                    21:c2:11:be:37:40:38:2e:c8:59:bd:83:8c:84:84:
                    ee:ca:6b:71:94:0a:69:89:0a:98:36:e0:fc:57:4f:
                    9e:4b:51:12:6b:28:59:f4:2f:5b:1a:79:b0:7b:f0:
                    de:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:18:35:B5:BC:0B:D0:4B:A2:C7:F5:0F:B1:8B:4D:DB:79:37:19:29
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/8C1835B5BC0BD04BA2C7F50FB18B4DDB79371929.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.196.0/22
                IPv6:
                  2804:71fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270824

    Signature Algorithm: sha256WithRSAEncryption
         33:8d:92:5d:05:e2:b3:52:2f:11:dd:d5:b9:8a:41:2d:17:bc:
         37:e8:f5:26:14:88:bb:11:0f:66:7d:26:f5:5b:ec:6d:ed:e0:
         8f:8d:06:1e:d4:f4:f1:22:a0:be:28:47:bc:c8:13:df:75:2a:
         4a:f9:b6:3a:48:ce:a1:d8:92:88:74:dc:db:aa:1d:d8:40:69:
         1a:5f:35:ef:f9:fa:96:80:42:c4:d6:6d:89:e7:6f:9f:72:b5:
         d1:7a:29:07:b6:61:6c:c2:b4:58:09:95:1e:53:30:b8:20:59:
         65:bb:ea:2f:6e:40:f6:97:42:15:c9:90:ab:34:7e:d9:43:ef:
         b9:e3:86:a6:dc:cb:17:ae:ea:1d:03:99:de:17:60:0b:91:46:
         3c:e1:52:b3:5c:72:28:8d:e9:22:e2:17:fe:4f:6f:86:3f:3e:
         69:44:99:0b:23:43:84:38:32:9f:8c:53:ab:79:f9:55:e8:44:
         41:f9:ef:6d:40:af:d7:4f:3a:2e:98:51:c0:94:7a:bf:8a:24:
         44:57:9f:27:63:70:8c:db:1e:24:10:7b:90:cc:de:48:4f:3b:
         ed:85:6f:71:f6:32:f0:da:ca:ea:10:69:87:18:89:98:fe:fc:
         c1:1a:f8:dd:24:16:d0:b5:32:3c:17:f1:c6:db:23:a6:9d:48:
         c9:01:08:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 09:22:29 2024 by rpki-client on console-ams.rpki-client.org