Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A9DAE0ED9DE31CDE9BC1177223117B73F0A69C9.cer
File:                     9A9DAE0ED9DE31CDE9BC1177223117B73F0A69C9.cer (raw, json)
Hash identifier:          ZrAIZEc75aRS78HjAN3rQ083t5w9Y2iXeRhCagm3QXs=
Subject key identifier:   9A:9D:AE:0E:D9:DE:31:CD:E9:BC:11:77:22:31:17:B7:3F:0A:69:C9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0C6B3D357B224E29037F4C953CA2D00ABA472D1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/9A9DAE0ED9DE31CDE9BC1177223117B73F0A69C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Oct 2024 21:33:20 +0000
Certificate not after:    Fri 03 Oct 2025 21:38:20 +0000
Subordinate resources:    AS: 269004
                          IP: 45.178.28.0/22
                          IP: 2804:5df8::/32

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 19:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6b:3d:35:7b:22:4e:29:03:7f:4c:95:3c:a2:d0:0a:ba:47:2d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  4 21:33:20 2024 GMT
            Not After : Oct  3 21:38:20 2025 GMT
        Subject: CN=9A9DAE0ED9DE31CDE9BC1177223117B73F0A69C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:a6:6c:71:f9:1c:dd:c9:21:3f:33:e4:8c:
                    14:dd:7a:e5:24:96:e6:45:42:fc:48:aa:31:84:f8:
                    a8:e5:6f:36:c1:e5:4f:23:58:63:b1:69:a0:64:5f:
                    a6:90:93:b5:7f:fa:17:7a:30:11:6a:27:30:9a:98:
                    19:d4:9f:83:c3:23:2b:ca:de:ae:bf:e3:cc:b5:ff:
                    53:43:12:f4:fc:75:a2:6a:10:81:3c:9c:bb:e0:e5:
                    07:90:e9:14:e6:3b:ae:46:3d:f5:df:65:58:e2:ee:
                    44:aa:17:a6:f7:ac:e2:64:c6:d2:d8:27:ca:d7:35:
                    32:e9:eb:8f:f6:f7:02:4d:fc:16:ae:10:da:5e:90:
                    15:33:3f:84:5c:c6:14:84:49:21:58:09:12:ea:20:
                    2b:20:71:db:b2:d8:33:46:40:69:af:1a:bf:7e:10:
                    43:fb:17:bb:84:fb:1c:cf:e2:fe:d0:6a:f7:07:77:
                    11:61:36:5c:a3:6b:9c:59:f0:c2:6a:c5:8d:4c:cf:
                    ae:e9:1e:67:dd:a8:fe:b5:46:1a:13:1c:6c:c3:87:
                    19:da:ae:6e:da:a7:2a:4d:71:5b:ee:e0:70:85:3d:
                    7b:35:0d:c8:83:99:49:46:19:67:50:c5:51:1d:c4:
                    e0:f8:56:9e:ef:6d:d6:4c:16:0f:d7:ef:8b:8c:e2:
                    56:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:9D:AE:0E:D9:DE:31:CD:E9:BC:11:77:22:31:17:B7:3F:0A:69:C9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/9A9DAE0ED9DE31CDE9BC1177223117B73F0A69C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.28.0/22
                IPv6:
                  2804:5df8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269004

    Signature Algorithm: sha256WithRSAEncryption
         c3:36:84:1b:c9:3f:c3:72:a3:96:46:7f:1f:ac:52:2f:49:36:
         6e:fe:c2:f9:76:bc:45:fe:7d:d1:50:b0:51:aa:1c:30:79:eb:
         44:ca:f4:99:db:a8:34:1c:28:b4:ea:d6:56:54:42:77:70:0e:
         c4:08:36:ea:50:e2:17:7c:11:50:f6:3c:9b:9f:03:6d:95:76:
         ce:28:e3:48:f9:72:15:94:6b:10:3c:8f:db:2e:69:2f:b9:66:
         8e:84:12:fb:12:10:40:3a:79:65:37:47:f8:a1:2f:ef:5a:21:
         8d:ce:82:28:14:0c:87:af:89:8b:14:cf:db:fa:2a:5e:f8:dc:
         cc:20:a4:81:2d:88:be:8a:80:ea:bd:8a:ad:dd:3d:f5:6c:cb:
         84:9a:7b:b6:80:18:c3:98:4a:37:5c:87:43:9f:2b:a5:7d:1f:
         3f:e4:32:7a:26:38:a6:a8:24:3d:62:26:00:1d:ff:06:cd:4d:
         14:33:92:17:f2:90:55:4a:89:7a:4f:a4:2c:50:59:e5:e7:c6:
         c4:bf:52:09:53:c2:2f:73:1e:c8:10:c4:30:2c:21:5a:88:c9:
         d4:0c:2e:ab:80:bf:c3:ac:d8:d7:fb:31:e9:25:a3:8d:80:64:
         ee:88:42:ae:51:10:3a:c8:9d:0f:a6:87:bd:28:cf:05:f0:e8:
         91:b0:40:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 21:35:34 2024 by rpki-client on console-fra.rpki-client.org