Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer
File:                     8F131A9124F4505661427DA97FDEE05C46117F4A.cer (raw, json)
Hash identifier:          xZt49GwPzKXgS8cE7ahcNo5mtr1s5Z3yHmL56+5m7LE=
Subject key identifier:   8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2EF61C3B5E26FA43626EBBAECE4FA6E431318B52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:03:29 +0000
Certificate not after:    Thu 03 Apr 2025 08:08:29 +0000
Subordinate resources:    AS: 52861
                          IP: 177.93.144.0/21
                          IP: 177.124.32.0/21
                          IP: 2804:7bc::/32

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 18:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f6:1c:3b:5e:26:fa:43:62:6e:bb:ae:ce:4f:a6:e4:31:31:8b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:03:29 2024 GMT
            Not After : Apr  3 08:08:29 2025 GMT
        Subject: CN=8F131A9124F4505661427DA97FDEE05C46117F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:a4:82:c9:2c:02:da:4d:99:aa:90:62:f5:
                    2b:59:7b:15:06:70:0d:ed:68:80:4d:68:b6:b1:69:
                    70:ab:bd:4b:50:4a:84:3e:55:56:54:8b:48:67:df:
                    0c:74:94:3e:ba:7a:08:0b:b9:81:3f:4d:c4:da:1e:
                    79:05:b4:06:0e:9d:89:72:50:fd:48:79:e5:1e:18:
                    85:f8:c8:39:44:39:19:a0:27:10:3b:f9:66:50:a7:
                    ab:3c:55:82:66:52:97:e2:6b:40:8d:d3:f4:41:96:
                    85:8f:47:99:ba:03:b3:cf:22:df:fa:0b:bc:2c:44:
                    93:c5:5e:b1:1d:8c:61:57:8e:7c:5e:41:2f:3e:d6:
                    87:86:6e:52:e8:cb:9c:bb:7f:20:cc:17:bb:cb:f8:
                    dd:c0:99:c9:25:9d:69:b4:f5:7b:28:dc:b1:32:f2:
                    c2:46:a7:4e:7b:05:33:75:9c:a8:c4:dc:36:a8:a6:
                    6b:6c:bf:38:a7:99:bf:a7:27:3b:2c:62:4f:25:06:
                    6b:fe:59:8a:74:fb:0d:5e:de:2a:6c:79:2e:fe:3b:
                    1b:49:ed:d9:c2:a9:0f:06:06:ee:59:d0:ce:13:58:
                    18:c3:1e:bc:b7:f1:18:90:cc:32:c8:e1:c8:82:40:
                    96:8a:78:8a:03:d6:4e:98:53:e3:ac:c1:1d:12:8b:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.144.0/21
                  177.124.32.0/21
                IPv6:
                  2804:7bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52861

    Signature Algorithm: sha256WithRSAEncryption
         18:e8:43:97:15:01:a3:78:4e:92:54:0d:b3:94:7b:d3:e9:37:
         f2:96:45:15:a8:88:03:59:47:a4:f7:7f:c7:a3:e0:1a:32:98:
         e8:91:73:0f:0e:71:ea:13:31:db:4f:68:aa:d3:59:69:43:6b:
         58:0a:78:59:73:bd:8f:6a:8a:99:52:11:1a:36:2d:3c:bb:38:
         a2:d7:ad:59:c4:38:89:31:20:cd:51:c9:4d:06:f5:12:38:ef:
         b7:ab:85:f2:65:be:ea:18:47:17:59:63:6b:87:56:f4:6d:2e:
         4e:68:f1:24:05:21:96:7f:ed:43:06:8b:60:15:38:3a:e6:3f:
         d5:34:f1:c6:8a:0c:2d:bc:52:24:a5:43:46:29:4f:39:75:66:
         90:85:1b:76:07:f6:41:fe:68:88:a7:90:93:08:25:65:30:b3:
         01:db:53:70:0a:6e:79:50:e5:02:2a:bf:a5:e4:55:82:b2:45:
         96:d9:c9:08:91:c9:fa:db:3a:dc:fa:10:c3:54:cc:4f:58:f0:
         30:38:ac:c8:73:55:51:46:e6:2a:16:0e:fb:19:f3:12:2d:a2:
         6a:5e:b0:58:61:81:4e:36:a9:ca:43:fe:10:fb:3b:1a:69:2b:
         2f:1a:e1:ef:f8:15:c1:a6:a2:b8:78:55:f7:a4:8e:b0:c1:8c:
         6e:3f:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 19:40:48 2024 by rpki-client on console-ams.rpki-client.org