Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8C28A7AC0D89A401162A5E8AD448E9D7640B8C02.cer
File:                     8C28A7AC0D89A401162A5E8AD448E9D7640B8C02.cer (raw, json)
Hash identifier:          7Wrp4mW4We53Y1PMq6F8neH63N1LaIldJnDP/rXuWH4=
Subject key identifier:   8C:28:A7:AC:0D:89:A4:01:16:2A:5E:8A:D4:48:E9:D7:64:0B:8C:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       05065C09016BFB49FD63A23B3EE3430231DB749E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/8C28A7AC0D89A401162A5E8AD448E9D7640B8C02.mft
caRepository:             rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 06 Jul 2024 15:30:51 +0000
Certificate not after:    Sat 05 Jul 2025 15:35:51 +0000
Subordinate resources:    AS: 269206
                          IP: 45.181.252.0/22
                          IP: 2804:6104::/32

Validation:               Failed, certificate revoked on Sat 13 Jul 2024 07:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:06:5c:09:01:6b:fb:49:fd:63:a2:3b:3e:e3:43:02:31:db:74:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  6 15:30:51 2024 GMT
            Not After : Jul  5 15:35:51 2025 GMT
        Subject: CN=8C28A7AC0D89A401162A5E8AD448E9D7640B8C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:de:5b:1c:b6:7e:5d:51:72:bc:28:71:fc:
                    a5:b1:be:2a:c0:7e:c9:fc:54:1e:33:7d:fb:5c:d0:
                    8c:c2:ae:c1:be:e7:2e:8d:18:7b:71:c1:d9:2e:fa:
                    ef:3f:1d:34:81:61:e0:2c:09:bb:89:0f:0e:c8:f4:
                    d6:13:1a:4c:11:13:00:a5:fb:b4:45:de:05:6d:e8:
                    63:d2:74:1c:2a:6a:3a:8b:18:f9:88:01:70:eb:6b:
                    36:93:e7:30:b6:a6:4d:79:0b:86:c8:03:e7:2b:da:
                    b1:87:98:08:17:05:7b:f0:ea:64:7b:ed:6a:d3:84:
                    4c:1d:91:07:07:1e:6a:30:e5:f5:59:7f:2a:fd:4d:
                    32:64:f7:13:b2:c2:96:68:a6:92:86:dc:77:90:8f:
                    39:63:f6:42:6b:3f:7a:1a:00:98:ce:44:89:6d:d5:
                    8d:69:9e:33:fc:ed:83:9e:44:54:80:68:8b:f1:66:
                    88:4e:2e:e2:a8:80:6b:68:6c:cf:f8:6f:30:3e:3e:
                    3f:14:c1:9f:57:f1:2f:ef:91:55:b2:97:27:d6:c9:
                    9f:8f:e7:f2:d4:d2:95:8b:fe:2d:ee:c2:fd:90:cb:
                    68:7e:69:9c:be:cc:70:38:8d:d9:10:17:12:88:68:
                    13:4e:15:f1:d2:de:8a:da:98:dc:00:f6:84:5c:ec:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:28:A7:AC:0D:89:A4:01:16:2A:5E:8A:D4:48:E9:D7:64:0B:8C:02
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/8C28A7AC0D89A401162A5E8AD448E9D7640B8C02.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.252.0/22
                IPv6:
                  2804:6104::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269206

    Signature Algorithm: sha256WithRSAEncryption
         40:ca:4d:b7:26:e6:a3:bb:98:15:a8:ba:3b:76:4c:e4:a0:e3:
         f6:2f:df:43:3e:26:e2:ff:55:df:80:0a:89:3e:4a:7f:d9:50:
         4d:c9:37:bc:c5:9b:a7:3f:6b:96:b7:d7:8c:eb:aa:62:e5:3b:
         30:aa:86:c7:7f:b9:b4:e4:12:d9:13:06:02:28:4d:23:b2:ab:
         90:a8:56:21:23:53:ea:6c:9a:13:53:4c:da:f8:d1:1d:bb:50:
         1f:25:7f:c9:20:73:11:bc:1e:b5:e3:74:62:b4:b7:cf:98:7e:
         57:23:81:55:23:1a:40:89:9d:3d:d6:fb:8b:12:a6:54:33:f6:
         fa:4e:46:38:3e:1f:35:99:99:fd:a7:dc:90:95:73:a7:e7:ce:
         51:57:24:35:1e:6b:19:58:a7:18:f2:e6:8e:77:ef:ef:56:73:
         dd:6d:e6:b1:dd:01:82:fd:10:1c:53:db:38:7e:25:c1:dc:5a:
         41:f7:22:30:5d:7c:98:2b:fc:91:e4:63:61:5c:73:04:1e:d0:
         fe:99:7c:c0:57:7b:cb:90:c7:4f:8e:4b:69:f6:7b:ec:f1:da:
         de:af:38:fb:dd:c4:03:4f:96:ce:4e:65:f5:2e:60:73:42:42:
         3b:10:0b:7c:d7:78:97:51:7f:46:7c:48:48:86:1c:33:36:00:
         13:73:f6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 08:46:16 2024 by rpki-client on console-fra.rpki-client.org