Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/93E8F1E8B26E54612C2C1B2E58182FE529B6AA21.cer
File:                     93E8F1E8B26E54612C2C1B2E58182FE529B6AA21.cer (raw, json)
Hash identifier:          JR/UEFtHduGKp7BqbfWe56CQPdPU53vbTvF4eTUU/VY=
Subject key identifier:   93:E8:F1:E8:B2:6E:54:61:2C:2C:1B:2E:58:18:2F:E5:29:B6:AA:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19979F0071321E7824233A423EA970E77950F5AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/93E8F1E8B26E54612C2C1B2E58182FE529B6AA21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 May 2024 21:17:37 +0000
Certificate not after:    Wed 28 May 2025 21:22:37 +0000
Subordinate resources:    AS: 269194
                          IP: 45.179.236.0/22
                          IP: 45.180.216.0/22
                          IP: 45.238.236.0/22
                          IP: 168.181.252.0/22
                          IP: 170.247.28.0/22
                          IP: 2804:60d4::/32

Validation:               Failed, certificate revoked on Sun 20 Oct 2024 22:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:97:9f:00:71:32:1e:78:24:23:3a:42:3e:a9:70:e7:79:50:f5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 29 21:17:37 2024 GMT
            Not After : May 28 21:22:37 2025 GMT
        Subject: CN=93E8F1E8B26E54612C2C1B2E58182FE529B6AA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8f:45:87:38:22:96:d8:1c:e1:30:54:a1:8c:
                    ec:82:5e:78:0e:7a:49:55:f7:8f:25:54:a6:23:b1:
                    38:61:0a:66:b8:55:10:78:b2:1b:2b:c9:44:1b:9c:
                    c7:c5:25:56:9b:8d:2d:3e:ac:e2:1a:3d:eb:07:98:
                    08:3e:a2:9e:21:74:64:78:8e:a2:da:e0:6c:7d:ba:
                    ac:ed:40:e7:4c:6a:b3:59:51:a5:98:07:47:de:01:
                    f1:e8:94:b0:20:bd:c6:43:8d:9b:29:63:b3:e1:58:
                    2a:ac:4f:5f:95:ba:f9:71:64:d7:c6:cd:0b:6d:15:
                    6d:c9:bb:7f:bd:55:6f:5c:6d:0b:e8:6e:b8:86:16:
                    d0:0f:93:3a:62:51:61:96:1b:ca:9d:77:d7:78:f5:
                    69:4b:51:27:ff:ba:83:ff:26:01:aa:c0:be:5c:4a:
                    5d:9d:85:4c:a7:9b:01:98:4f:f6:e4:ea:6e:27:be:
                    5a:8c:30:51:cb:da:01:ca:0e:bd:7c:e5:df:e3:26:
                    d3:4e:3b:12:da:ab:28:48:5b:71:03:3c:bb:ab:59:
                    4a:0d:40:0f:8d:f4:4f:13:ec:63:1d:71:d6:1f:28:
                    63:4d:25:4b:39:b3:a0:57:00:36:57:90:f3:a8:09:
                    58:dd:c3:a1:d7:cb:8a:d2:46:e6:fb:3e:58:94:72:
                    5c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:E8:F1:E8:B2:6E:54:61:2C:2C:1B:2E:58:18:2F:E5:29:B6:AA:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/93E8F1E8B26E54612C2C1B2E58182FE529B6AA21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.236.0/22
                  45.180.216.0/22
                  45.238.236.0/22
                  168.181.252.0/22
                  170.247.28.0/22
                IPv6:
                  2804:60d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269194

    Signature Algorithm: sha256WithRSAEncryption
         d6:f1:28:1b:fb:89:aa:f2:fc:75:5d:61:16:09:26:65:6a:33:
         44:3f:1f:bf:e2:87:26:5a:bb:6a:9f:00:74:05:d1:e5:7d:47:
         71:48:3e:53:96:84:f6:26:c9:89:52:1e:cb:70:6b:a4:b3:d4:
         5e:df:16:d9:d7:61:f8:22:13:bd:6c:87:15:0b:85:97:ef:b7:
         68:89:04:a2:a3:37:a6:be:16:74:f2:5f:b6:ac:fa:23:71:79:
         08:50:b4:1a:49:2e:83:56:56:eb:3e:cb:2f:ad:c2:73:5b:ce:
         cb:96:08:4a:1e:35:57:be:d8:73:90:f3:72:26:bb:33:8a:c4:
         de:8e:63:2f:7b:02:71:f7:a0:f6:b1:2f:09:4f:ff:99:39:ce:
         53:61:2c:46:31:bd:de:b5:e4:4b:1d:2b:b9:30:57:f0:b6:39:
         dd:ef:85:cd:c2:d4:4c:21:00:0c:3f:e1:72:08:fa:29:88:37:
         00:f9:7c:d5:a8:ba:83:56:c8:6d:c1:d8:19:73:e3:ac:81:b3:
         e2:de:43:e8:cd:ee:ed:74:02:94:2d:40:9e:b4:8c:69:0e:a2:
         11:19:d5:14:61:ee:7f:9f:75:25:fa:02:a2:43:55:d0:d5:89:
         e4:e9:9c:6a:89:3b:c9:08:82:ce:20:cb:f8:7f:a2:5e:75:0f:
         2e:4a:1d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 23:53:52 2024 by rpki-client on console-fra.rpki-client.org