Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/93AA409873588A897219AA9BBC5D2F7353819FFD.cer
File:                     93AA409873588A897219AA9BBC5D2F7353819FFD.cer (raw, json)
Hash identifier:          VIOqBqSXkpZbCEeTqc7BP9n+dF3pESvENVys72b9j1M=
Subject key identifier:   93:AA:40:98:73:58:8A:89:72:19:AA:9B:BC:5D:2F:73:53:81:9F:FD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       78CB877905DD3D56A2ACB2016FE273E5C23613B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/93AA409873588A897219AA9BBC5D2F7353819FFD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:55:22 +0000
Certificate not after:    Thu 03 Apr 2025 08:00:22 +0000
Subordinate resources:    AS: 52677
                          IP: 177.66.204.0/22
                          IP: 2804:c18::/32

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 08:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:cb:87:79:05:dd:3d:56:a2:ac:b2:01:6f:e2:73:e5:c2:36:13:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:55:22 2024 GMT
            Not After : Apr  3 08:00:22 2025 GMT
        Subject: CN=93AA409873588A897219AA9BBC5D2F7353819FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:93:7f:72:77:f8:c5:74:92:7a:5e:3b:d7:
                    19:dc:5a:6a:e4:4f:fc:bc:c0:c1:a7:11:36:dc:e4:
                    bb:c2:0f:a2:dd:dd:38:f1:a8:61:52:76:ec:dd:78:
                    93:6b:44:b2:46:9e:00:44:eb:bc:a4:fa:20:74:1b:
                    51:e1:a9:00:23:91:1e:55:b8:91:74:15:f4:d8:86:
                    9a:0a:20:4c:59:33:e8:ac:e0:d5:33:a3:04:5a:40:
                    01:a2:aa:89:f1:5f:31:df:fa:8c:01:fe:ad:ff:ae:
                    ee:f6:48:ef:c8:eb:f8:7e:8c:1d:32:4c:f6:2e:12:
                    e4:e2:68:17:1e:b7:36:72:a0:a3:f7:60:42:f5:2d:
                    4d:d7:da:19:47:78:61:13:35:b8:31:b9:eb:7f:b4:
                    7c:43:50:69:1b:ea:97:ab:4d:05:83:2f:f2:4c:ee:
                    f4:3b:68:78:b8:c4:66:a1:36:01:17:4c:70:ae:e8:
                    a2:7d:a3:f1:9d:96:25:cf:21:06:73:f1:3f:9e:53:
                    0f:d7:eb:9b:9e:79:2c:46:f3:6d:00:58:bf:34:2f:
                    1b:c3:d3:57:e5:1e:08:0a:9b:a0:6f:a0:c0:83:fe:
                    a7:73:89:32:54:a0:b0:ae:fd:22:1a:10:f6:78:fa:
                    f7:00:31:65:7a:a5:fb:3d:a3:f2:a6:35:ff:94:a8:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:AA:40:98:73:58:8A:89:72:19:AA:9B:BC:5D:2F:73:53:81:9F:FD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/93AA409873588A897219AA9BBC5D2F7353819FFD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.204.0/22
                IPv6:
                  2804:c18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52677

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:d2:eb:26:28:79:14:34:8b:de:a7:15:04:bb:a0:d7:85:
         aa:8a:9c:1a:65:21:f1:82:b5:b0:d0:55:22:9d:f0:5f:83:df:
         35:45:ab:34:30:05:7c:6b:a7:fc:d3:08:e7:87:9a:9b:a7:bd:
         49:dc:24:4c:0e:a1:fd:52:e3:02:35:aa:ab:44:bc:dd:8c:64:
         42:e6:f0:5e:19:06:29:c5:d3:6e:69:e0:c4:0c:b0:3e:26:1a:
         e5:29:53:f3:d1:0b:15:cc:27:34:22:84:b0:8b:93:30:6f:3f:
         24:22:da:34:66:99:af:0e:5f:d2:2c:ed:fe:2d:11:1b:7d:b1:
         79:a0:de:bd:0e:57:08:62:79:1e:c3:68:23:1d:98:6e:b5:27:
         b3:9a:b8:b9:08:00:80:60:20:8d:23:d9:3f:28:47:31:64:15:
         49:59:1e:a2:50:fd:64:c1:5f:3b:52:1f:d5:ba:e1:bd:43:a1:
         68:67:e0:7e:f1:c4:ed:d6:db:71:c2:a2:93:6f:6f:f6:b6:67:
         ac:b6:2b:92:ed:73:ac:93:49:fa:04:52:80:ca:2f:01:ae:4c:
         5d:9a:14:d0:51:5a:05:5e:c4:8c:c0:96:4b:33:83:35:16:65:
         46:ff:ea:05:f8:b7:9b:c5:f8:f5:26:b6:31:8a:6e:44:34:85:
         15:19:92:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 10:48:59 2024 by rpki-client on console-fra.rpki-client.org