Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/94CF83961C7D8A5FDC55C308A9F3B2E856270DE9.cer
File:                     94CF83961C7D8A5FDC55C308A9F3B2E856270DE9.cer (raw, json)
Hash identifier:          wHj+nKJVfWxvVbUvSPTsVGPZQo4lI7puT6Jqs/7yDDs=
Subject key identifier:   94:CF:83:96:1C:7D:8A:5F:DC:55:C3:08:A9:F3:B2:E8:56:27:0D:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       39318DCCEA3A04E783B8016BE913B31B6A6DA361
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/0/94CF83961C7D8A5FDC55C308A9F3B2E856270DE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Aug 2024 16:08:08 +0000
Certificate not after:    Mon 25 Aug 2025 16:13:08 +0000
Subordinate resources:    AS: 262997
                          IP: 186.219.255.0/24
                          IP: 2804:9d8::/32

Validation:               Failed, certificate revoked on Sun 10 Nov 2024 13:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:31:8d:cc:ea:3a:04:e7:83:b8:01:6b:e9:13:b3:1b:6a:6d:a3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 26 16:08:08 2024 GMT
            Not After : Aug 25 16:13:08 2025 GMT
        Subject: CN=94CF83961C7D8A5FDC55C308A9F3B2E856270DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:17:db:fb:78:52:7e:6a:07:23:5d:7b:ec:76:
                    aa:f9:4f:e2:75:d4:79:82:30:ae:da:f5:5f:ef:4d:
                    c4:f9:7f:dd:11:17:5c:a8:3e:f0:c8:1f:5f:f2:3f:
                    cc:0a:d2:45:45:38:8f:ad:9a:80:0c:68:c4:14:42:
                    1b:4a:71:33:2a:5d:84:82:73:0b:c5:b9:d2:fb:fa:
                    85:4d:ab:ec:ea:bd:de:f7:9b:5f:43:d3:0b:00:cb:
                    7d:a1:7d:71:69:88:71:63:e3:e3:3c:01:c5:a2:9a:
                    ce:13:fd:36:29:55:16:63:b4:e0:26:db:0a:4b:7c:
                    67:1a:7f:a5:27:68:69:35:d4:93:36:74:9d:f6:0a:
                    a3:4e:87:89:d7:52:85:9b:14:95:59:8e:22:c8:00:
                    09:10:ab:35:95:97:e8:17:39:15:05:ab:a9:16:3b:
                    00:a6:bf:a7:59:22:b1:cb:b3:0c:7a:09:47:c5:07:
                    6f:72:0e:d1:c7:c5:6b:90:5a:b8:98:e5:33:ce:99:
                    71:d4:6a:37:33:3d:54:b6:93:b7:00:6a:90:f4:52:
                    0e:73:5a:fa:26:e4:69:5e:0b:da:84:0c:0c:e2:63:
                    39:eb:77:9b:35:ec:7f:25:18:6f:ee:f0:c2:c1:c8:
                    09:c0:b7:d1:27:0f:72:08:5b:22:54:14:1d:c9:f0:
                    d2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:CF:83:96:1C:7D:8A:5F:DC:55:C3:08:A9:F3:B2:E8:56:27:0D:E9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/0/94CF83961C7D8A5FDC55C308A9F3B2E856270DE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.255.0/24
                IPv6:
                  2804:9d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262997

    Signature Algorithm: sha256WithRSAEncryption
         03:34:01:8a:6d:e3:25:19:80:d6:6a:5c:57:c1:33:82:99:4a:
         23:22:5e:b0:08:c5:cd:0f:84:45:61:56:5b:a0:8d:09:e6:0a:
         72:b6:1c:a0:3d:fa:02:db:da:b3:cf:e9:c9:05:e3:74:e8:e9:
         e3:01:4c:0c:40:01:1c:8e:09:c0:68:f9:18:2f:a2:82:ef:49:
         52:cd:ea:be:1d:94:e4:68:6e:f8:39:61:fd:b9:d0:21:a2:7e:
         e1:b3:9a:7a:86:2c:d1:ce:c1:6f:67:67:85:00:a7:f1:3a:74:
         ec:65:c4:6c:0d:8c:b2:7b:91:fe:16:1a:60:86:92:17:59:30:
         19:51:f7:1f:3e:cf:2d:d7:f9:29:84:1c:7f:f9:b7:50:96:2f:
         7f:88:e3:5e:b6:13:a0:1e:16:ce:08:1a:62:14:a5:6b:de:13:
         08:d0:ca:02:76:5d:b5:14:7f:6a:c6:2d:0c:32:77:13:39:a1:
         78:0b:42:98:c6:c1:09:7c:eb:28:04:e4:f3:47:e4:13:16:5b:
         a2:3d:84:22:6e:1d:14:5e:46:94:5f:d9:89:04:46:eb:ac:38:
         63:6c:91:c8:90:8f:c9:62:96:ed:ab:77:96:8e:83:79:f4:b2:
         7e:54:65:43:e5:8d:8e:3d:57:1a:7a:aa:a1:e5:db:2a:11:f4:
         6f:c0:00:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 17:09:35 2024 by rpki-client on console-fra.rpki-client.org