Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.cer
File:                     8F22D0F09007A0AB362AFC115EFAF686F131E2E3.cer (raw, json)
Hash identifier:          lZCmZEQBQLlIhQcfBnPfNDU6ZvO56WVwaJzcx9gcFZ4=
Subject key identifier:   8F:22:D0:F0:90:07:A0:AB:36:2A:FC:11:5E:FA:F6:86:F1:31:E2:E3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0A022A9DE9747FFFA8BD1D7F0929711A46976F61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:43:23 +0000
Certificate not after:    Thu 03 Apr 2025 01:48:23 +0000
Subordinate resources:    AS: 61594
                          IP: 45.160.216.0/22
                          IP: 2804:510c::/32

Validation:               Failed, certificate revoked on Tue 06 Aug 2024 16:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:02:2a:9d:e9:74:7f:ff:a8:bd:1d:7f:09:29:71:1a:46:97:6f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:43:23 2024 GMT
            Not After : Apr  3 01:48:23 2025 GMT
        Subject: CN=8F22D0F09007A0AB362AFC115EFAF686F131E2E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3d:14:cd:35:ef:5c:52:f8:16:ef:31:01:9f:
                    5b:e3:17:ec:f9:40:ad:54:89:da:cb:74:d8:27:d6:
                    59:57:d3:1b:8e:4f:e2:05:06:13:79:d3:31:5b:28:
                    50:a0:e0:66:91:4f:43:82:c1:4f:c7:c7:81:20:45:
                    75:5b:a8:17:e0:f2:cf:65:76:4a:53:ca:7b:4f:ae:
                    82:2d:45:32:d1:23:56:f5:54:1c:83:77:1b:6a:d3:
                    7d:1b:dd:d3:3c:3d:02:e6:58:29:43:80:d1:85:80:
                    3e:53:43:2c:3b:5b:c9:a7:a5:32:a9:3d:a0:32:39:
                    ae:39:b1:0f:bd:57:6f:db:f8:9d:0f:d2:0d:60:a0:
                    44:16:e6:80:31:ba:17:84:97:68:3e:82:b7:98:23:
                    c6:54:cd:64:8b:c6:4f:e1:47:98:9e:cc:75:55:0e:
                    5d:5a:48:66:3c:29:eb:4b:17:54:a9:0b:a7:cb:8c:
                    75:4a:e9:d6:99:c1:b6:84:04:62:75:c4:85:cf:a6:
                    13:08:85:6c:0e:9c:78:43:f3:16:96:a2:ac:23:03:
                    90:7d:0c:19:85:b4:d3:de:4f:29:5d:aa:08:37:d7:
                    88:45:50:b7:fa:98:4d:96:c2:b1:10:a2:ae:82:a0:
                    26:f3:af:23:0f:19:86:84:84:93:bb:12:d5:de:b7:
                    14:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:22:D0:F0:90:07:A0:AB:36:2A:FC:11:5E:FA:F6:86:F1:31:E2:E3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.216.0/22
                IPv6:
                  2804:510c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61594

    Signature Algorithm: sha256WithRSAEncryption
         23:4f:40:7d:fb:48:0e:e0:08:35:fb:70:37:59:5c:b4:b1:37:
         5b:fd:3e:80:7c:79:b2:0e:b7:50:cb:34:df:6b:75:0c:34:82:
         1f:5a:0c:7a:a9:17:9b:91:ac:81:84:20:47:36:b8:a2:55:03:
         05:ff:57:a7:e2:c7:4a:10:f3:2a:d7:0c:f6:b1:85:b2:12:ba:
         4d:be:8d:47:ed:52:cc:8c:3f:ff:34:48:83:9a:81:f0:76:ef:
         b6:39:e4:59:12:d0:bd:98:0d:2e:52:c1:b7:10:08:c8:bb:8c:
         5f:89:68:91:12:d1:e7:56:fd:45:02:b4:5d:f2:68:0b:26:b8:
         ec:b8:9a:e6:c5:07:d8:e4:f2:2b:f8:c5:ca:a7:d7:56:46:6d:
         a7:39:b8:8f:75:ba:c5:34:41:0e:d6:ea:ca:bb:51:cb:56:b0:
         94:01:23:e6:8b:65:ea:bf:4c:29:d2:8e:50:af:51:bd:e8:c0:
         ce:91:1c:79:2a:ad:e8:75:c3:91:9b:e4:06:e4:da:58:19:a7:
         a3:68:81:2e:37:00:6f:20:a6:29:3f:1d:9f:2f:0b:13:65:f3:
         bd:b2:77:eb:9b:f6:3f:0c:02:4b:99:4d:4b:98:cd:43:1c:9c:
         bb:13:af:9a:ea:60:0d:38:b1:0a:71:fa:98:87:7a:60:06:89:
         96:a7:e0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 21:38:01 2024 by rpki-client on console-ams.rpki-client.org