Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CBE574C1ECF9DA517C6FCD57457C402DE79E150.cer
File:                     8CBE574C1ECF9DA517C6FCD57457C402DE79E150.cer (raw, json)
Hash identifier:          Hdw50qRvLCarug2i0m9TrUxRaQXb6mHYm0OEVyIce6E=
Subject key identifier:   8C:BE:57:4C:1E:CF:9D:A5:17:C6:FC:D5:74:57:C4:02:DE:79:E1:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1328771F61F7BE3FAF8D0CF205D2CE97F08D1E46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/1/8CBE574C1ECF9DA517C6FCD57457C402DE79E150.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:14:07 +0000
Certificate not after:    Thu 03 Apr 2025 11:19:07 +0000
Subordinate resources:    AS: 266005
                          IP: 181.191.120.0/22
                          IP: 2804:4120::/32

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 11:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:28:77:1f:61:f7:be:3f:af:8d:0c:f2:05:d2:ce:97:f0:8d:1e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 11:14:07 2024 GMT
            Not After : Apr  3 11:19:07 2025 GMT
        Subject: CN=8CBE574C1ECF9DA517C6FCD57457C402DE79E150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:78:f6:db:0b:33:05:64:79:66:d4:53:31:
                    34:03:25:15:2e:9a:74:f4:52:7f:28:0b:38:2c:7f:
                    96:ff:90:3a:79:67:cc:d3:b8:16:0a:17:d4:85:7e:
                    93:3c:a0:dc:18:2b:e2:3b:82:bc:4f:89:90:f1:1b:
                    a1:54:f7:9d:b5:3e:77:d7:06:69:7d:f0:b3:a7:8e:
                    40:27:6d:61:a0:87:8b:6f:58:0b:64:e2:72:40:fe:
                    2d:12:a7:ef:3b:fe:07:a1:33:22:91:65:19:fd:29:
                    62:99:3d:36:61:57:53:2b:fc:d5:56:f0:e5:18:22:
                    09:b3:08:84:b4:1c:c9:4d:6d:d9:09:94:b8:09:a8:
                    75:1f:0f:9e:ef:fd:5a:80:e3:14:1f:87:c9:c1:fc:
                    3b:51:3d:6a:b2:69:6d:35:c9:6c:de:71:31:90:4d:
                    28:17:b7:5b:5e:47:7a:6d:46:28:e6:b2:03:7c:06:
                    2c:e1:d5:f0:43:44:64:eb:37:58:1a:3a:5e:39:c3:
                    81:7e:d5:e5:fd:03:28:b4:93:6a:fb:8b:3e:bb:b5:
                    36:6f:8c:9b:9f:1c:6b:62:fe:5e:ec:9f:ab:15:38:
                    f8:b4:f6:f9:34:ed:d7:0c:93:3c:f1:fb:61:db:3a:
                    87:c6:91:ae:0a:bb:9f:a9:8e:14:42:f0:69:f7:be:
                    a1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:BE:57:4C:1E:CF:9D:A5:17:C6:FC:D5:74:57:C4:02:DE:79:E1:50
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/1/8CBE574C1ECF9DA517C6FCD57457C402DE79E150.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.120.0/22
                IPv6:
                  2804:4120::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266005

    Signature Algorithm: sha256WithRSAEncryption
         16:59:f0:fe:27:6e:b3:c7:4f:27:7a:cd:0f:89:f8:4d:c4:e2:
         ef:83:7a:95:62:bd:0d:62:81:c2:43:a6:84:b9:f0:7e:86:77:
         e1:88:78:6c:89:ef:d0:ad:a8:15:95:75:b4:fd:3f:8d:45:d1:
         61:c3:d9:84:44:f0:91:77:35:02:3d:b0:d4:65:8f:9a:64:aa:
         bf:de:2f:3d:e2:e2:2a:39:66:5b:70:29:fc:83:96:34:a0:13:
         e5:6c:22:38:01:6e:12:2f:4c:4d:08:e5:0a:92:63:e2:e9:2f:
         83:96:8c:66:a5:0f:6a:68:04:a1:f9:e1:12:fe:07:2b:f1:37:
         db:d9:14:9d:0d:82:51:0a:59:2a:e5:a5:06:ea:eb:55:d9:32:
         fa:e5:3f:b2:6b:a2:79:c2:a7:3d:7a:37:7b:33:9d:02:87:5b:
         bc:5a:c4:14:d4:26:51:d9:a5:d2:94:40:43:9c:ce:e2:54:54:
         f0:62:c7:d6:0d:51:32:5f:d3:c4:e9:45:21:95:81:1e:65:aa:
         2e:ee:72:04:14:c8:5b:cb:87:96:14:33:36:a8:5f:1b:e0:21:
         a0:b9:5e:e1:d5:b6:5b:63:53:a1:fe:02:87:8e:43:ae:14:a2:
         ae:5d:64:89:0f:27:40:82:39:bd:74:b8:72:ac:9b:d7:75:5c:
         23:47:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 12:50:37 2024 by rpki-client on console-fra.rpki-client.org