Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/996A88B903A755A7D500E7DD842FA98D84332693.cer
File:                     996A88B903A755A7D500E7DD842FA98D84332693.cer (raw, json)
Hash identifier:          Kg5ts8HsKRHOaNT0uZ4YgQS9NfmQzQBV/JHPz70l6bg=
Subject key identifier:   99:6A:88:B9:03:A7:55:A7:D5:00:E7:DD:84:2F:A9:8D:84:33:26:93
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       40C445F438C5612954E5299993921173EB7BAC85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/996A88B903A755A7D500E7DD842FA98D84332693.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Aug 2024 19:27:18 +0000
Certificate not after:    Thu 31 Jul 2025 19:32:18 +0000
Subordinate resources:    AS: 52686
                          IP: 138.99.204.0/22
                          IP: 170.246.80.0/22
                          IP: 177.67.156.0/22
                          IP: 2804:2440::/32

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 11:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c4:45:f4:38:c5:61:29:54:e5:29:99:93:92:11:73:eb:7b:ac:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  1 19:27:18 2024 GMT
            Not After : Jul 31 19:32:18 2025 GMT
        Subject: CN=996A88B903A755A7D500E7DD842FA98D84332693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:05:83:24:2d:2f:0d:b1:f1:be:b2:40:4a:
                    1e:75:b1:de:58:df:68:24:b2:b3:6e:86:1a:5f:08:
                    92:19:1b:bc:a3:01:d2:fe:3e:a6:d3:0e:b9:5a:1b:
                    15:d2:41:85:41:7f:1c:c0:48:41:d7:6c:bb:ae:6a:
                    05:b5:f2:f8:a2:de:c9:68:e6:8a:32:0c:8c:8c:0f:
                    17:19:bb:d3:8d:24:a4:38:3a:d9:18:9d:7a:19:7d:
                    cd:5d:7e:ea:9d:21:77:ff:ef:7b:e1:39:ac:63:5b:
                    73:92:a2:30:ad:6f:52:1d:cf:69:64:2c:3b:d8:96:
                    77:46:70:60:72:3f:54:e7:0e:0b:f2:4b:fa:64:7b:
                    91:36:fb:77:a2:e2:cf:ec:1d:58:f2:ab:ec:b0:2f:
                    3c:17:6e:29:07:d6:18:9c:2d:7d:20:d2:74:89:35:
                    f5:eb:c8:5b:12:64:3a:99:1d:0a:48:63:76:b1:2e:
                    f2:28:73:4a:6b:87:6d:06:44:a1:24:01:08:d1:bf:
                    33:a9:b1:c1:7f:db:66:9a:e1:47:16:ae:c9:12:07:
                    18:50:f7:5b:93:ea:67:1e:89:df:14:72:7b:7e:56:
                    3f:a5:72:8c:41:b2:f7:df:8d:df:04:95:3b:93:48:
                    b0:70:ac:02:3a:2e:ce:f0:97:95:fa:26:42:8e:88:
                    1e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:6A:88:B9:03:A7:55:A7:D5:00:E7:DD:84:2F:A9:8D:84:33:26:93
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/996A88B903A755A7D500E7DD842FA98D84332693.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.204.0/22
                  170.246.80.0/22
                  177.67.156.0/22
                IPv6:
                  2804:2440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52686

    Signature Algorithm: sha256WithRSAEncryption
         0c:d8:49:37:27:d5:91:13:8a:ee:bb:ab:b0:df:8b:8f:74:e0:
         cf:12:d9:25:04:1d:7f:61:34:81:bb:fe:56:a9:99:1b:5e:53:
         96:f9:ca:3f:77:ac:0a:72:f0:7c:89:42:8c:ba:03:a8:a6:72:
         6b:b0:1f:0b:7f:17:02:10:bf:25:81:0b:09:88:91:5e:60:22:
         24:71:cc:68:d9:f8:a8:6f:d6:99:fa:fd:8f:cc:42:19:fa:dd:
         c4:2f:76:f4:f0:f7:e4:e8:88:ba:ee:c3:ba:37:37:ea:6d:5d:
         32:5f:99:0d:2c:ce:e0:f7:c5:b0:24:ad:d4:ad:0e:09:55:b3:
         33:cc:9e:db:f1:1a:1b:08:22:10:d4:d4:c0:e5:0b:ff:70:e7:
         c6:d7:6a:03:61:25:5c:21:04:9e:0c:9d:06:c3:b4:f3:c8:fd:
         02:6e:67:c5:b1:ff:20:82:0b:cd:32:b6:98:af:d4:3f:4e:d1:
         61:1e:16:16:70:2c:fb:ca:5e:36:e3:11:b8:b5:5e:53:00:39:
         25:e8:16:0d:17:14:db:e2:23:2a:76:c1:8f:7c:5e:db:c7:0d:
         0e:15:27:69:f3:a7:71:f5:cf:5e:c5:df:de:3b:41:b6:ff:6f:
         17:8d:7f:3d:2c:9b:ac:2d:eb:48:13:cb:57:78:2a:12:ab:e5:
         f9:86:3a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 14:18:49 2024 by rpki-client on console-fra.rpki-client.org