Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer
File:                     8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer (raw, json)
Hash identifier:          g0iowrabdk9VGuA8wUKqpVnCbQJyoxFRGkDXm3k88yM=
Subject key identifier:   8E:FC:66:9F:D8:1A:66:51:E6:EE:3A:3A:38:E7:B0:91:B9:1D:08:F0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E29A52A09B6353BB44837C04F420B3328378A31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jun 2024 17:55:12 +0000
Certificate not after:    Mon 23 Jun 2025 18:00:12 +0000
Subordinate resources:    AS: 52532
                          IP: 45.235.80.0/22
                          IP: 179.106.96.0/20
                          IP: 2804:2d8::/32
                          IP: 2804:df8::/32

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 17:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:29:a5:2a:09:b6:35:3b:b4:48:37:c0:4f:42:0b:33:28:37:8a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 24 17:55:12 2024 GMT
            Not After : Jun 23 18:00:12 2025 GMT
        Subject: CN=8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:1f:59:d2:ad:76:18:42:1b:8c:a8:ae:a4:
                    36:ce:5b:b7:c8:e8:ac:92:e4:9a:7d:6d:8a:67:2e:
                    4b:a7:1f:4f:30:87:4c:81:c7:11:a1:14:32:8e:9d:
                    da:42:49:1a:a1:1f:90:98:8d:12:73:f7:2d:69:e4:
                    91:69:05:a0:c1:86:22:cb:dd:25:40:5f:ab:bb:89:
                    6a:36:a8:af:83:3c:26:a9:ab:c0:cc:0b:82:eb:88:
                    0a:a2:1a:8a:d5:53:f2:b7:1a:54:35:10:83:fa:57:
                    29:c8:11:94:82:5b:e9:37:19:7a:15:6e:7f:fd:65:
                    69:f6:41:88:6b:65:80:3b:7a:d3:b4:af:c4:b2:ee:
                    38:e3:28:f5:f4:5d:ca:30:25:fc:28:b4:c9:97:e0:
                    78:ab:24:43:1a:26:47:8c:54:2b:de:78:de:48:7e:
                    a2:8e:4a:48:9a:25:30:ab:b3:89:42:45:45:b3:d6:
                    09:d4:27:bc:2b:e0:fd:05:11:25:e6:30:a5:04:4c:
                    7f:a7:42:5b:5a:36:5a:b8:bd:9c:0b:3a:18:2c:e6:
                    4d:95:b6:2e:84:7f:8f:08:22:ed:12:b2:07:eb:19:
                    81:24:2d:66:64:01:e5:2d:d4:27:cf:0d:b4:eb:ac:
                    5c:e3:4a:93:2b:93:bd:43:f1:00:ec:65:97:51:c7:
                    bc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:FC:66:9F:D8:1A:66:51:E6:EE:3A:3A:38:E7:B0:91:B9:1D:08:F0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.80.0/22
                  179.106.96.0/20
                IPv6:
                  2804:2d8::/32
                  2804:df8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52532

    Signature Algorithm: sha256WithRSAEncryption
         9e:aa:cb:f1:6f:df:82:61:80:9e:d6:48:a6:09:a9:2f:15:9d:
         a4:07:8f:fb:cb:70:dd:8e:5b:01:a5:9b:17:2f:71:98:b3:04:
         cb:ae:d3:b7:0c:b7:d6:13:e9:1b:eb:61:82:d9:be:16:da:e1:
         67:cd:02:90:65:04:af:a9:3f:f1:7f:cd:3a:ec:b2:c0:db:4b:
         eb:d8:e5:9d:2c:50:17:df:05:6b:e6:f5:fb:66:69:0a:7f:aa:
         5f:2f:d2:25:95:a8:7d:1c:29:a3:f7:b2:84:66:e1:0d:fc:28:
         65:b9:04:ad:99:de:d3:9d:94:6e:30:d9:f2:3d:10:54:9b:82:
         86:ae:b9:d8:7f:fc:23:d8:fb:b3:24:1e:2a:bb:ad:49:8a:d6:
         5a:56:41:70:17:1a:70:5a:78:25:1d:0d:a9:64:0d:17:a7:6f:
         9d:ef:a2:69:0a:e9:64:c5:05:e9:c6:83:91:57:f1:dc:f4:24:
         a9:02:17:bb:2b:82:52:b5:d0:a4:18:14:da:4e:b5:58:86:92:
         aa:be:91:58:24:26:a2:42:5a:39:6b:84:18:09:49:f8:c4:bd:
         8e:24:26:9d:d8:93:a1:21:c7:93:42:95:f4:8c:56:fa:fe:b3:
         ae:85:42:62:d5:ae:5c:c9:8e:ae:84:f0:a3:ae:45:04:d3:a1:
         2d:34:dd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 18:52:32 2024 by rpki-client on console-ams.rpki-client.org