Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E53C7311CC2E0064A927B39E8466C27AB0B0907.cer
File:                     8E53C7311CC2E0064A927B39E8466C27AB0B0907.cer (raw, json)
Hash identifier:          /JJB0iFkn0OzdsE7PA5kFOaowlFJjz/B1WGiw0Kg/wE=
Subject key identifier:   8E:53:C7:31:1C:C2:E0:06:4A:92:7B:39:E8:46:6C:27:AB:0B:09:07
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A585A6A8B1F96D66A956F71B1A064AA830BC20E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/1/8E53C7311CC2E0064A927B39E8466C27AB0B0907.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Jun 2024 13:57:25 +0000
Certificate not after:    Mon 09 Jun 2025 14:02:25 +0000
Subordinate resources:    AS: 271631
                          IP: 201.218.188.0/23
                          IP: 2804:7e8c::/32

Validation:               Failed, certificate revoked on Mon 10 Jun 2024 20:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:58:5a:6a:8b:1f:96:d6:6a:95:6f:71:b1:a0:64:aa:83:0b:c2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 10 13:57:25 2024 GMT
            Not After : Jun  9 14:02:25 2025 GMT
        Subject: CN=8E53C7311CC2E0064A927B39E8466C27AB0B0907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ea:e3:46:c4:47:40:e3:67:16:b6:36:d0:c5:
                    05:b3:6b:dc:07:46:69:73:95:a6:88:7a:a5:52:f9:
                    d1:0f:56:ad:f7:80:67:a1:4a:d5:59:58:56:3a:ca:
                    e8:61:dc:c3:a5:d8:e8:b2:ae:8e:0b:b3:aa:18:a1:
                    f0:20:69:b6:14:ed:4f:4b:58:95:62:6b:2e:58:d9:
                    1b:1c:d9:05:cf:ad:61:19:e0:67:31:9f:95:8b:8c:
                    8f:2e:da:42:62:e0:68:ce:f7:31:28:31:08:d2:7d:
                    bb:54:1d:4b:51:9e:e2:b0:63:02:31:5c:15:d6:1e:
                    b1:e9:74:95:67:a0:37:ef:8a:bb:02:b8:a2:08:0d:
                    11:e2:1b:46:23:78:bc:c5:40:18:28:85:73:77:81:
                    73:2a:ee:5c:46:b6:be:53:35:b1:1b:0d:3b:f3:33:
                    2f:f7:96:95:3d:da:58:39:33:68:1b:e9:56:73:7d:
                    b9:da:18:d5:bc:49:32:11:f9:71:c0:c2:28:01:ca:
                    7e:05:57:3b:e0:06:a4:1b:9d:9d:ec:c9:ad:4e:1a:
                    cd:72:9b:38:0b:ad:13:68:e6:99:20:ef:f5:d6:98:
                    f4:ab:49:1a:5f:fa:0b:10:cd:4d:29:b8:43:5a:bf:
                    49:19:cf:77:a8:59:30:86:3a:82:72:b9:4f:4f:50:
                    e2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:53:C7:31:1C:C2:E0:06:4A:92:7B:39:E8:46:6C:27:AB:0B:09:07
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/1/8E53C7311CC2E0064A927B39E8466C27AB0B0907.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.188.0/23
                IPv6:
                  2804:7e8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271631

    Signature Algorithm: sha256WithRSAEncryption
         42:78:b0:a8:79:d2:56:f4:3e:c3:9b:72:b9:4e:56:b1:fa:f2:
         06:49:f9:41:07:38:42:2f:63:90:4c:12:6f:ab:07:ec:8c:be:
         e1:de:ff:62:8d:d5:53:97:f8:d0:dd:2f:34:fa:df:4d:2c:cf:
         32:7e:1f:b3:83:f2:93:77:6b:bc:52:f8:7b:af:1c:1d:26:41:
         80:f8:23:16:98:48:37:6c:aa:11:a0:bf:7f:80:f9:04:95:60:
         fe:73:10:10:b3:08:80:d4:c9:e6:0f:d3:af:d6:0f:cb:48:23:
         44:a3:aa:7e:f9:4b:24:d7:0c:60:c1:9f:01:9d:2a:c3:ce:a1:
         c0:57:eb:b8:a8:7b:75:56:c6:85:d4:70:91:ec:d5:50:c5:00:
         c6:18:20:9a:1b:80:78:04:32:5b:60:75:be:5e:d6:5d:03:fd:
         21:fb:b5:93:36:f6:63:fc:c4:90:75:41:77:b8:86:a6:97:37:
         9c:f8:e9:f4:e4:ea:85:f1:ea:d3:d0:eb:fe:fc:56:fb:e3:f5:
         37:d5:92:9f:df:5f:b8:0a:3c:17:09:ae:e4:9f:84:10:6d:b9:
         d7:51:fd:13:47:bf:d2:d4:e0:6f:36:4c:5e:63:f5:77:95:b2:
         14:c3:44:d2:ed:7d:8f:72:33:88:29:20:6f:84:e2:23:c6:89:
         21:09:d7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 22:19:47 2024 by rpki-client on console-fra.rpki-client.org