Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer
File:                     93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer (raw, json)
Hash identifier:          SRn/y/VagHEQoSzCCa9qfWBdtvnLgVR/Q4G9vQfJYnA=
Subject key identifier:   93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D68F2C50A7061B9DF5935F0D2A434F658E5A16A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:11:21 +0000
Certificate not after:    Thu 03 Apr 2025 08:16:21 +0000
Subordinate resources:    AS: 271309
                          IP: 207.248.24.0/22
                          IP: 2804:7980::/32

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 18:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:68:f2:c5:0a:70:61:b9:df:59:35:f0:d2:a4:34:f6:58:e5:a1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:11:21 2024 GMT
            Not After : Apr  3 08:16:21 2025 GMT
        Subject: CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:e3:ad:9a:7d:02:58:7d:42:eb:8e:c9:29:
                    91:f3:b8:46:ca:81:eb:23:8d:ac:27:1d:36:4d:9d:
                    c8:02:f3:f1:53:d0:de:87:7a:61:24:98:28:36:42:
                    e4:c7:7a:17:72:f1:9b:6e:cc:33:70:ab:10:f3:e5:
                    00:5b:fb:05:ba:f9:fb:38:72:4f:ed:b4:f8:97:76:
                    6f:b9:e4:ee:b9:10:f6:07:90:18:00:d8:9e:d5:7d:
                    2a:99:33:2a:c7:c5:f1:28:66:50:86:89:16:fe:0e:
                    68:84:d9:bd:da:92:ff:97:18:f9:b4:e4:42:41:93:
                    1c:d7:06:fa:a4:60:9d:d8:3d:7a:3d:c8:68:78:80:
                    33:79:98:24:c0:6a:08:13:4d:12:00:04:58:39:31:
                    2e:71:76:50:a9:eb:f7:73:ee:9a:8e:5a:81:86:4d:
                    60:5d:2c:11:04:58:c7:5f:33:e0:8e:df:e6:28:43:
                    7e:39:c8:31:10:e1:2a:f9:6d:01:97:8b:a9:c7:0c:
                    50:00:fc:8c:20:8d:54:06:df:79:f8:a5:9b:30:fe:
                    b9:b1:2d:7c:34:29:e7:58:49:72:a7:60:f8:b7:ab:
                    36:00:c9:58:64:74:26:d6:b7:6a:71:7a:72:52:d4:
                    ed:ef:7b:af:f5:ac:80:78:d1:43:53:71:d3:7f:ef:
                    cc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.24.0/22
                IPv6:
                  2804:7980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271309

    Signature Algorithm: sha256WithRSAEncryption
         3d:d8:54:7f:80:4d:10:57:2d:25:37:26:92:db:45:f7:59:9e:
         8e:35:ee:3f:cf:fe:51:69:b5:4e:e0:b0:c3:95:62:d7:1f:1b:
         13:f1:2d:75:8b:3d:1c:81:78:a0:34:63:30:09:64:f1:c0:69:
         58:34:03:c3:09:ff:c9:ea:cf:69:eb:76:65:e6:50:da:42:34:
         8c:4f:53:51:b8:d5:ba:2e:28:77:0c:6e:44:ec:3b:a4:dc:46:
         ee:c4:80:de:49:c7:54:54:af:bb:c3:fe:37:1e:35:58:7e:40:
         f3:d0:f2:b2:7e:cb:f0:96:d3:5b:84:fe:87:54:ea:67:c5:36:
         c8:cf:ab:da:5d:bc:a1:45:c7:da:d2:0d:30:89:98:a9:2f:ae:
         fa:3b:0d:d8:a2:b6:9c:83:9e:7d:cd:f9:6d:4a:48:df:52:d6:
         c1:38:f5:9e:c3:fb:fb:44:d5:1c:06:60:05:79:5d:23:fb:95:
         0c:33:5d:5e:6a:e8:9e:8a:be:be:2d:fa:ea:37:51:6a:f2:98:
         af:59:3c:4e:99:c5:82:c6:18:41:31:83:94:59:a8:aa:6d:3d:
         28:07:d9:3c:c4:88:94:0b:fe:a0:51:9d:f3:ab:4c:a8:bd:06:
         23:d8:3f:c1:5c:6d:51:f1:03:5c:31:a0:43:32:54:d1:24:4a:
         73:c2:fe:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 20:10:51 2024 by rpki-client on console-fra.rpki-client.org