Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8FE80FE05562599EF604A23C6D77710BED889A51.cer
File:                     8FE80FE05562599EF604A23C6D77710BED889A51.cer (raw, json)
Hash identifier:          OIP+lfSBfWaVUa3W5ZJDU7h9bT3WegRFO14NxJzMmGk=
Subject key identifier:   8F:E8:0F:E0:55:62:59:9E:F6:04:A2:3C:6D:77:71:0B:ED:88:9A:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3BAA36A87FC0A20335914AF6AA36DA59B6F9E6DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/8FE80FE05562599EF604A23C6D77710BED889A51.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Nov 2024 22:55:14 +0000
Certificate not after:    Sat 08 Nov 2025 23:00:14 +0000
Subordinate resources:    AS: 267556
                          IP: 45.70.0.0/22
                          IP: 2804:4338::/32

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 14:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:aa:36:a8:7f:c0:a2:03:35:91:4a:f6:aa:36:da:59:b6:f9:e6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  9 22:55:14 2024 GMT
            Not After : Nov  8 23:00:14 2025 GMT
        Subject: CN=8FE80FE05562599EF604A23C6D77710BED889A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:3e:18:f2:ad:44:b9:23:f3:03:94:e3:e1:
                    e3:6f:62:85:c0:a1:b5:a9:04:dd:32:d5:8c:bd:e0:
                    62:3d:6f:88:18:e2:f8:ca:8a:fe:88:4c:af:3e:86:
                    2c:d8:39:11:c8:0f:2f:f3:bb:2d:ec:21:fc:8f:c4:
                    3d:9c:c8:bf:99:bd:f3:18:f6:9b:35:43:0c:cb:fd:
                    27:68:0f:13:ae:63:18:a6:76:38:7b:ea:9a:7e:3d:
                    b8:20:7a:0d:97:92:81:c2:4e:e7:78:fc:16:44:1a:
                    55:ab:19:f7:df:15:98:6f:f3:ba:96:21:a4:d9:26:
                    ed:d7:65:bc:2e:98:e6:07:5a:08:fd:76:cd:20:65:
                    5b:42:57:23:f7:17:c3:56:89:3e:ba:31:da:f6:b2:
                    39:05:a6:ae:0e:d2:98:0d:9d:6f:35:2f:07:6e:d1:
                    19:db:5b:7c:56:95:e4:b5:8c:ea:6a:6d:0c:a8:22:
                    45:c6:63:d5:b1:aa:b2:9c:0f:e9:58:c4:34:36:d6:
                    7f:d4:84:99:bf:1b:26:23:20:ab:b1:81:79:7d:3a:
                    7d:55:aa:07:35:9c:8f:dc:a0:08:69:4e:aa:29:b5:
                    34:44:9c:a6:4a:7e:e5:9d:3e:73:53:38:74:8c:96:
                    b6:29:a2:36:17:b2:2a:da:59:1e:1b:71:ae:89:f1:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:E8:0F:E0:55:62:59:9E:F6:04:A2:3C:6D:77:71:0B:ED:88:9A:51
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/8FE80FE05562599EF604A23C6D77710BED889A51.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.0.0/22
                IPv6:
                  2804:4338::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267556

    Signature Algorithm: sha256WithRSAEncryption
         65:c1:76:c4:1d:bd:26:3c:bb:4a:d2:1b:a7:09:7e:ff:50:d2:
         ea:2e:b4:8b:b5:2c:5b:5b:00:d2:19:87:51:a7:32:45:e0:15:
         9f:8c:5f:7e:ca:5b:44:b5:cb:a7:23:22:f6:2c:20:59:63:49:
         97:af:c7:aa:82:29:e3:54:10:1e:83:ee:ba:5c:bf:c8:63:ad:
         07:5d:d4:32:38:8c:65:7b:d2:25:94:18:67:4d:14:8b:91:b0:
         1d:46:88:3c:2e:01:c2:d3:62:ca:18:5b:38:f4:99:69:65:55:
         40:5b:95:41:b6:11:e0:9d:e0:3c:a6:cd:5f:17:fd:ae:21:35:
         58:f6:19:16:a6:23:3f:de:73:b8:1c:9a:d0:29:23:9b:47:a5:
         d2:c4:b7:6a:5e:f1:d4:fb:4d:a4:ba:79:ca:db:89:61:35:42:
         93:c9:76:a4:d3:f5:f1:ec:3a:f8:f9:fe:28:06:b8:51:24:12:
         1b:34:e7:fc:40:23:e2:24:4a:f0:70:ac:c8:5a:8c:48:f7:4c:
         90:5b:d8:0b:d1:fe:9c:43:0f:6a:d9:ae:a6:71:3c:b7:82:01:
         34:6a:d8:6d:79:6f:b5:a8:95:1d:e1:91:cd:6e:ae:f4:b4:3e:
         8f:71:e4:1a:e1:43:28:e6:34:8f:05:a1:8b:01:5d:2e:6b:5b:
         93:69:61:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 19:04:10 2024 by rpki-client on console-ams.rpki-client.org