Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CA3A7365B156022A19D3103A9AC15C16D55CD75.cer
File:                     8CA3A7365B156022A19D3103A9AC15C16D55CD75.cer (raw, json)
Hash identifier:          7c1hp69IkxPnv4P43KNDGWWK4lx91jUX5+jgs8zNxtc=
Subject key identifier:   8C:A3:A7:36:5B:15:60:22:A1:9D:31:03:A9:AC:15:C1:6D:55:CD:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FF9DC56B6DDF7CA54802BD8E6D5F5A2E04BEC9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/8CA3A7365B156022A19D3103A9AC15C16D55CD75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jul 2024 21:22:14 +0000
Certificate not after:    Wed 16 Jul 2025 21:27:14 +0000
Subordinate resources:    AS: 262644
                          IP: 167.249.12.0/22
                          IP: 177.86.248.0/22
                          IP: 187.17.208.0/20
                          IP: 2804:2a64::/32

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 12:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f9:dc:56:b6:dd:f7:ca:54:80:2b:d8:e6:d5:f5:a2:e0:4b:ec:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 17 21:22:14 2024 GMT
            Not After : Jul 16 21:27:14 2025 GMT
        Subject: CN=8CA3A7365B156022A19D3103A9AC15C16D55CD75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7d:5f:97:87:4c:50:b5:c2:83:7b:6e:9c:27:
                    10:7d:c6:97:53:9a:c4:f4:9f:ab:a1:22:fc:9c:18:
                    37:1f:3f:03:3e:03:b0:79:48:14:3a:bd:67:a1:9c:
                    c1:2c:b3:5d:3d:00:a3:95:64:c0:eb:24:1c:c7:97:
                    f4:92:20:46:98:46:62:91:02:b8:9f:34:4c:a0:e7:
                    d2:a4:54:2a:bf:c9:d3:e7:a9:42:1f:52:32:2a:af:
                    1b:ac:7c:b8:4b:2d:29:3e:0e:2f:a3:11:93:84:9c:
                    6b:76:07:8c:ad:02:8e:60:c6:ce:7f:b2:ba:8f:22:
                    1d:68:65:1f:07:85:ba:85:73:58:92:f5:24:85:fc:
                    fd:72:f1:d8:5b:a1:3f:53:0e:ef:f6:2f:37:17:e0:
                    0b:26:04:a3:6c:84:40:62:a9:69:08:c5:a4:cc:92:
                    eb:bb:af:64:50:de:97:b2:00:ea:82:95:a1:07:51:
                    4f:de:35:21:aa:73:ce:47:28:b9:a5:ee:4b:18:9a:
                    f7:60:f9:c3:5c:e0:63:c1:24:81:b1:7d:48:64:a3:
                    80:cc:71:1a:fa:37:80:76:3c:a9:34:e1:34:6b:ff:
                    cb:aa:2e:a6:f7:29:70:a8:27:6d:8d:0d:90:dc:a5:
                    61:5e:66:35:d3:91:09:f9:54:56:38:0d:ef:bb:92:
                    94:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:A3:A7:36:5B:15:60:22:A1:9D:31:03:A9:AC:15:C1:6D:55:CD:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/8CA3A7365B156022A19D3103A9AC15C16D55CD75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.12.0/22
                  177.86.248.0/22
                  187.17.208.0/20
                IPv6:
                  2804:2a64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262644

    Signature Algorithm: sha256WithRSAEncryption
         5c:de:1d:8d:e7:4d:87:8c:84:07:8c:e1:b1:8a:a5:e1:ba:73:
         ae:e4:18:fa:9b:6a:c6:ef:b0:f9:0f:6c:05:b4:7c:aa:22:45:
         68:24:0b:2a:fd:e7:16:d2:26:ff:08:96:01:ae:35:c6:c0:76:
         45:91:34:e7:68:e1:06:0d:ac:4f:07:56:1f:7f:0d:9e:d9:1c:
         ed:e4:be:9b:4e:26:e1:3d:58:b4:2f:1a:d9:bf:8e:08:5f:5a:
         4c:64:5a:01:76:25:1f:38:8d:ed:e6:d8:18:86:12:24:ac:98:
         5a:8c:c9:31:89:22:b7:85:8a:24:83:0a:24:eb:73:bc:e9:10:
         42:3d:6f:db:54:66:df:b6:2a:e3:ee:07:7c:a0:d3:75:fd:54:
         80:a9:b8:8f:4f:8f:79:59:bf:f8:9b:47:02:2a:4b:4f:65:33:
         fd:cd:41:96:8c:ee:1d:bf:2c:27:0f:7c:a2:fd:1b:c1:b4:39:
         09:9e:26:f0:19:ba:35:ad:9b:5e:07:dc:5c:7d:66:d9:a5:04:
         38:ec:ca:b9:d8:4a:b3:74:2f:62:2a:2a:bb:fa:e5:49:4d:b0:
         20:10:ec:9d:67:ca:2e:3e:6d:24:bc:a1:4f:f6:72:71:0d:2d:
         2b:9f:7f:57:53:33:7e:da:6c:0a:b3:1a:31:f6:b3:8a:f4:b9:
         fd:0f:b9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 16:39:16 2024 by rpki-client on console-ams.rpki-client.org