Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/94275586519E58548913245A9FBA5703C7F010D4.cer
File:                     94275586519E58548913245A9FBA5703C7F010D4.cer (raw, json)
Hash identifier:          OL0H/FHCKaVmu5/k7FHDPiPkimLknTLtSYUis0qzhtY=
Subject key identifier:   94:27:55:86:51:9E:58:54:89:13:24:5A:9F:BA:57:03:C7:F0:10:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B870CAA11AABEB700C1E313925AE1EC6F18829A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/1/94275586519E58548913245A9FBA5703C7F010D4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:00:50 +0000
Certificate not after:    Thu 03 Apr 2025 00:05:50 +0000
Subordinate resources:    AS: 267312
                          IP: 45.233.128.0/22
                          IP: 2804:4b88::/32

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 15:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:87:0c:aa:11:aa:be:b7:00:c1:e3:13:92:5a:e1:ec:6f:18:82:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:00:50 2024 GMT
            Not After : Apr  3 00:05:50 2025 GMT
        Subject: CN=94275586519E58548913245A9FBA5703C7F010D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:37:88:8b:25:42:2d:05:53:03:59:fb:e8:01:
                    5e:d8:10:4e:8f:e3:c1:55:5b:ef:07:71:0f:08:f4:
                    4b:e0:a8:cf:e1:3a:13:08:ba:d6:07:e6:e1:8d:64:
                    55:b1:dc:97:6f:60:90:00:61:b4:cd:e9:15:4f:7b:
                    31:91:f7:f5:08:ec:bf:f0:86:2f:b1:09:8c:f2:92:
                    65:94:49:9b:15:da:49:a3:b2:93:b4:df:34:60:a2:
                    b5:2d:38:fb:37:1e:9c:17:37:3f:03:b7:64:73:26:
                    66:f9:33:d1:17:04:e8:6a:9c:fc:4e:ac:d3:b3:2e:
                    25:cd:72:1e:82:49:2f:cc:2c:c8:9c:82:1a:73:0a:
                    8c:93:3a:06:f6:ca:d5:a2:c6:25:5d:43:9f:fd:31:
                    09:73:a4:14:53:a5:86:37:6a:b8:27:a3:56:42:39:
                    78:1b:71:f5:ff:9a:5d:6d:16:74:32:9d:d1:39:a3:
                    24:f8:24:fe:42:21:c4:52:0c:8d:72:46:ae:01:f0:
                    04:27:33:38:28:26:4f:3f:71:1d:46:61:5e:00:0c:
                    9c:77:45:8f:7b:36:1a:26:10:7f:ed:a8:8a:c4:86:
                    9c:9e:9d:00:d2:8e:e9:26:83:2d:96:57:be:cd:a1:
                    8f:33:e8:86:dc:8f:ec:f1:5d:03:d8:b1:1b:c8:ec:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:27:55:86:51:9E:58:54:89:13:24:5A:9F:BA:57:03:C7:F0:10:D4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/1/94275586519E58548913245A9FBA5703C7F010D4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.128.0/22
                IPv6:
                  2804:4b88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267312

    Signature Algorithm: sha256WithRSAEncryption
         af:dd:91:cb:c5:33:d3:ce:8c:10:02:8c:2c:ff:6e:52:71:35:
         37:1f:8c:a7:b3:98:24:8f:6b:a6:d2:3e:09:ba:99:89:63:b2:
         25:25:86:64:28:15:91:06:d1:b2:38:23:bc:3b:41:8a:54:be:
         8e:19:03:a5:55:0d:a3:75:1f:c7:73:c7:e2:6c:3f:d7:ec:f5:
         2a:83:06:47:2a:88:64:78:ff:5a:13:99:61:73:07:5b:e8:71:
         20:4e:40:e4:2b:75:cd:a0:63:0c:46:60:77:d9:07:03:5e:9a:
         63:a0:b6:23:fe:56:cd:e0:ff:50:e3:95:f0:fb:d2:33:e5:f4:
         ca:3e:16:4f:44:a6:76:0d:99:7b:40:aa:a5:e6:19:e2:b5:db:
         22:35:bf:ee:14:e5:f3:bc:7e:3b:1c:32:77:38:94:0c:92:02:
         9c:6c:15:36:3c:bd:9c:61:a8:f5:77:54:8c:af:65:23:af:5e:
         4d:0b:b3:5f:12:b9:ba:29:15:24:00:2c:0b:7e:b9:7a:02:ba:
         0b:fd:93:3d:32:63:08:82:53:d1:1c:03:6b:c3:c7:1b:74:40:
         fc:3f:76:85:5b:36:d0:4f:45:87:f8:5b:ed:7d:c0:45:42:29:
         80:b3:c9:dd:b6:ae:81:73:a4:d7:cf:90:e5:48:fe:d3:ee:98:
         d2:6e:a9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 18:35:54 2024 by rpki-client on console-ams.rpki-client.org