Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer
File:                     9524EE8472B5FC7B7954627809F56CFEB45E6323.cer (raw, json)
Hash identifier:          P0PFvbu2vlRi9oxA7/J1QjgEFO7jFCRb4Tuk9EvrAGY=
Subject key identifier:   95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       05A6927473C1E1B8E21522004689291B28F5E072
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:12:55 +0000
Certificate not after:    Wed 02 Apr 2025 20:17:55 +0000
Subordinate resources:    AS: 270828
                          IP: 190.115.220.0/22
                          IP: 2804:7208::/32

Validation:               Failed, certificate revoked on Thu 23 May 2024 07:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a6:92:74:73:c1:e1:b8:e2:15:22:00:46:89:29:1b:28:f5:e0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 20:12:55 2024 GMT
            Not After : Apr  2 20:17:55 2025 GMT
        Subject: CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ec:4a:e1:36:ac:f9:7b:f9:0f:3b:5c:8f:d9:
                    fa:ef:04:13:0f:6c:d6:06:b5:56:9d:22:79:93:26:
                    cf:bc:99:7e:28:0b:81:d6:34:aa:9a:eb:c6:95:16:
                    3a:9d:77:63:c7:9e:e9:ef:97:84:7c:ea:8a:e9:a6:
                    27:b8:35:7e:95:79:c6:8f:c9:25:b2:00:25:82:65:
                    f6:6c:64:f7:ae:d0:15:25:35:30:7a:6f:b4:e1:ee:
                    e2:c8:9c:f3:0e:bd:51:ca:2c:ec:08:0a:a9:9b:b3:
                    4d:83:d6:0c:41:ec:48:e5:62:ee:73:58:6c:6d:49:
                    ba:5c:eb:89:50:40:c2:8b:b2:4f:94:84:c3:06:5e:
                    5c:7c:17:0b:c0:04:0d:de:17:3c:5b:3a:de:8a:78:
                    b1:8d:d2:6e:3a:70:2d:4f:2a:70:45:a0:25:12:19:
                    e6:54:fa:ec:71:3d:ac:c1:54:48:cb:c3:86:d4:2c:
                    49:0b:c7:03:64:67:ea:cc:1c:63:69:7f:66:a7:8c:
                    d7:13:40:9f:70:df:93:57:19:0c:df:d4:f9:1f:d0:
                    19:e9:cb:55:d1:a9:1e:dc:a8:f0:26:14:47:06:52:
                    97:95:cd:80:5d:ee:ce:4d:95:3e:35:87:35:53:f7:
                    b0:1e:bc:28:7f:68:bb:7b:fc:6f:03:e7:03:b7:54:
                    14:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.220.0/22
                IPv6:
                  2804:7208::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270828

    Signature Algorithm: sha256WithRSAEncryption
         ad:98:af:d4:13:5e:6b:78:5d:5d:65:5e:e8:7f:59:a5:ee:7a:
         c8:c8:af:d2:89:aa:36:22:58:78:ac:11:a4:0c:37:e3:35:26:
         55:d0:14:d1:b1:06:d2:87:c8:88:09:98:6b:73:5c:2d:ec:47:
         0e:6f:9f:42:5f:0e:b0:f2:cf:80:82:85:5e:21:60:4d:00:78:
         3a:fa:dc:58:20:b7:9b:9c:c5:97:bb:a9:12:7a:cc:a4:80:b9:
         7b:49:65:82:88:f6:48:5b:4a:4e:1b:09:4d:91:48:76:fb:00:
         3c:0d:e9:ec:23:45:57:d2:02:7c:49:f3:e9:07:6a:36:49:25:
         2c:fd:e5:f6:a6:18:53:ca:08:21:71:60:2d:78:62:fd:fc:fc:
         a2:44:e1:a9:c4:9b:74:dd:ed:a6:03:98:3d:d8:ac:ec:92:e6:
         3d:ea:bf:25:50:f2:63:05:04:41:3e:bf:ec:56:b7:2e:0c:ed:
         42:6f:ce:89:75:b1:5c:d0:8d:12:60:3c:96:64:2a:a2:29:69:
         ee:c9:33:68:59:4f:5f:f9:61:bf:f0:29:df:c0:1b:77:d4:77:
         08:63:b3:0c:ba:e7:87:62:14:bd:dc:59:f5:53:8f:29:8f:90:
         22:80:ec:51:91:87:47:a0:de:92:08:e0:b1:c7:79:83:cb:ef:
         4b:2d:52:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:24 2024 by rpki-client on console-ams.rpki-client.org