Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/93647FDAC05FD53C3F277DC1785972085B8274E3.cer
File:                     93647FDAC05FD53C3F277DC1785972085B8274E3.cer (raw, json)
Hash identifier:          pw0ZdaZ3wWwfx4z2xToWpYjYfOj+q787zBHTsIdRyzA=
Subject key identifier:   93:64:7F:DA:C0:5F:D5:3C:3F:27:7D:C1:78:59:72:08:5B:82:74:E3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       469534E813F6E39C3789001F73ED9D76F8156E90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/93647FDAC05FD53C3F277DC1785972085B8274E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Oct 2024 01:00:59 +0000
Certificate not after:    Wed 22 Oct 2025 01:05:59 +0000
Subordinate resources:    AS: 27688
                          IP: 200.159.128.0/19
                          IP: 2804:54a0::/32
Validation:               Failed, certificate revoked on Fri 29 Nov 2024 02:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:95:34:e8:13:f6:e3:9c:37:89:00:1f:73:ed:9d:76:f8:15:6e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 23 01:00:59 2024 GMT
            Not After : Oct 22 01:05:59 2025 GMT
        Subject: CN=93647FDAC05FD53C3F277DC1785972085B8274E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:f0:f6:38:d8:50:1b:de:d2:5b:cb:8b:1b:
                    b1:2b:6d:3c:9e:c0:af:61:13:4b:9b:7e:6b:07:19:
                    bc:97:2c:41:4b:b0:39:e7:9e:72:70:43:2c:53:26:
                    18:6e:92:0c:01:64:3e:42:80:cc:db:07:cd:f9:c4:
                    7c:72:28:2d:f7:44:73:9d:75:5c:17:1b:e7:c8:54:
                    35:de:0b:bd:a7:8a:60:8c:47:80:22:76:75:66:4e:
                    01:23:00:b3:df:5b:e2:5d:c5:5f:ce:bb:f5:f7:a2:
                    f2:8e:94:2b:f3:4c:f7:30:64:fa:df:2a:64:0b:12:
                    1d:81:31:96:e6:f6:6b:48:cf:7e:02:7f:51:78:02:
                    e2:6d:95:cb:f3:24:64:1d:03:05:b6:69:ab:0e:ed:
                    9d:18:49:44:88:31:d8:bf:a6:b7:f4:76:a6:28:4d:
                    22:7f:bf:05:d2:82:de:3e:95:5a:17:5e:b9:e2:48:
                    a2:7f:ba:92:de:39:de:d1:27:05:67:26:31:a5:76:
                    55:b0:20:d8:b0:a5:84:fc:61:a4:03:2f:10:9c:31:
                    eb:04:ae:e8:78:f9:37:7c:aa:fe:04:d0:9d:6b:b6:
                    2f:80:af:c2:ec:31:bb:cb:3d:22:64:fb:0f:97:19:
                    9e:6b:60:33:ca:50:bf:2a:8c:db:90:2b:48:6e:6a:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:64:7F:DA:C0:5F:D5:3C:3F:27:7D:C1:78:59:72:08:5B:82:74:E3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/93647FDAC05FD53C3F277DC1785972085B8274E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.159.128.0/19
                IPv6:
                  2804:54a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27688

    Signature Algorithm: sha256WithRSAEncryption
         d6:48:c3:16:c6:13:20:c9:a7:c6:3a:55:63:14:f5:30:f7:f5:
         2a:26:b3:4d:f6:ce:b8:76:1a:7a:9b:31:3f:5e:50:70:35:90:
         ea:48:81:47:b4:0c:2b:07:b0:6e:90:18:d1:0f:17:6f:23:e5:
         6a:ed:d1:df:1f:6b:9b:d9:cb:e2:f7:f4:a0:d1:0e:69:6f:be:
         31:b4:86:c5:2c:aa:a9:8a:a0:7b:d9:1e:49:13:32:80:56:97:
         e2:da:d0:2b:f4:f1:48:b1:fd:0c:11:de:35:a8:94:03:f0:c6:
         a6:58:48:9c:c8:71:e9:7c:0a:f5:71:c8:a5:61:da:e6:91:23:
         2e:e1:c4:f7:e5:e3:15:6b:fb:87:d7:de:38:13:df:b6:e5:25:
         8c:eb:d0:13:7b:56:38:75:a2:09:cc:15:0f:af:45:3e:23:3f:
         22:fd:02:c8:87:1e:65:f0:04:cf:48:9d:7b:ed:3c:bc:24:41:
         99:6e:ed:f3:43:42:b8:11:cd:04:87:cc:b1:e1:6a:b3:27:ce:
         cd:8e:ca:17:4f:1f:6b:13:f4:05:05:e0:bf:59:65:cb:9a:4b:
         6c:e4:b1:50:ca:e3:c3:47:4c:b9:05:5a:8b:10:3f:b0:53:10:
         b5:29:75:38:a5:23:1a:0d:be:ae:39:68:4e:06:32:51:d1:54:
         6e:05:8c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:37 2025 by rpki-client