Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9063DE7D24C004E210E37701FFA866CEA6FD502E.cer
File:                     9063DE7D24C004E210E37701FFA866CEA6FD502E.cer (raw, json)
Hash identifier:          Vlr369RfP7sWoZSQtK4Zog+KspI6/5ZRtTHDZ6YOgV8=
Subject key identifier:   90:63:DE:7D:24:C0:04:E2:10:E3:77:01:FF:A8:66:CE:A6:FD:50:2E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6EB2C967ECA577A5846D531F148BBBFD709C2E9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/9063DE7D24C004E210E37701FFA866CEA6FD502E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Aug 2024 20:01:06 +0000
Certificate not after:    Fri 22 Aug 2025 20:06:06 +0000
Subordinate resources:    AS: 272163
                          IP: 2804:82e4::/32

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 16:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b2:c9:67:ec:a5:77:a5:84:6d:53:1f:14:8b:bb:fd:70:9c:2e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 23 20:01:06 2024 GMT
            Not After : Aug 22 20:06:06 2025 GMT
        Subject: CN=9063DE7D24C004E210E37701FFA866CEA6FD502E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:da:42:cf:d3:66:8c:2b:a7:10:f3:ed:06:
                    71:f2:c0:44:af:ba:7a:bb:7a:94:04:79:6c:e2:1a:
                    f7:ee:7d:69:36:19:5e:5b:4c:8f:83:9d:02:eb:a2:
                    42:41:9d:16:e3:c5:ad:85:04:e7:24:0e:1a:7d:29:
                    ea:c4:82:5c:7e:a8:22:3a:5f:84:41:cf:6f:9a:d5:
                    74:00:17:ab:ab:78:1c:6a:c9:f5:77:b9:67:91:ef:
                    d2:92:21:8d:c0:3a:71:67:20:e5:e8:f7:f2:8f:ac:
                    28:fa:19:0a:14:30:1c:04:ee:af:6c:94:2e:ff:03:
                    3a:e9:bc:fa:f9:04:eb:4e:38:f5:e4:1a:18:d2:6d:
                    b5:5d:66:0f:60:54:79:12:67:1d:64:88:d1:6a:ba:
                    67:29:ed:56:e5:ad:bd:be:9d:cf:53:4e:cb:cf:3c:
                    57:9a:1b:95:8d:01:ea:19:b6:59:b1:4d:fb:e4:8d:
                    67:5e:b6:3d:5b:95:c0:46:66:1c:80:1e:93:0c:df:
                    35:6b:e8:ac:be:58:72:7b:83:9d:30:e7:ed:7b:20:
                    1f:a1:ac:b8:89:1e:f8:a7:db:4d:20:a3:07:81:da:
                    63:a2:48:00:86:2d:a1:1c:ec:51:5e:4b:25:9a:5a:
                    b5:4a:fe:41:25:0a:73:bd:71:43:38:19:5e:d8:40:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:63:DE:7D:24:C0:04:E2:10:E3:77:01:FF:A8:66:CE:A6:FD:50:2E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/9063DE7D24C004E210E37701FFA866CEA6FD502E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272163

    Signature Algorithm: sha256WithRSAEncryption
         94:45:a6:27:4c:28:23:00:f9:5b:b1:30:35:88:c5:0b:3c:7f:
         a6:7e:b5:0b:e5:4b:88:e5:e4:2f:f9:a9:de:f9:ee:0a:0c:0f:
         ad:7b:1d:c1:7d:d2:30:f7:59:79:01:6b:93:f5:45:1e:2e:60:
         10:e5:a0:c8:69:3b:c3:5d:60:59:d4:78:67:9d:52:54:a3:98:
         27:4a:b9:bb:5e:5c:c1:5b:3f:d4:ec:f2:f3:80:69:1b:33:49:
         b3:3e:2f:40:d9:dc:a4:70:25:f6:99:4d:ec:68:0a:f5:5c:63:
         26:83:f0:b0:76:5f:27:9c:be:ad:42:75:8f:e4:da:ff:da:48:
         63:32:3e:f7:f5:53:a3:83:9d:af:14:03:ca:1e:86:af:86:32:
         b6:0b:03:fe:39:c2:c1:97:61:97:90:1a:b1:9c:90:2a:37:62:
         30:4e:3e:67:22:cb:33:08:5c:c4:3d:95:b3:18:39:f4:00:70:
         39:be:3b:65:1c:4e:4c:36:cd:1d:6a:09:fa:4b:37:05:6f:f9:
         5e:b1:78:31:93:da:84:29:e2:06:40:78:06:34:88:cc:a2:55:
         ef:92:13:20:f2:1d:41:6a:56:4f:11:c5:c5:de:94:a5:d3:f5:
         ff:5f:78:bf:76:65:0b:a4:55:e1:69:27:8d:70:12:79:a4:e5:
         81:1f:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 18:17:53 2024 by rpki-client on console-ams.rpki-client.org