Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer
File:                     9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer (raw, json)
Hash identifier:          XmV4jrN7HuQUEeZwtC3EH5PemFCT4QP235C+MH4NwjU=
Subject key identifier:   9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D5CA8A7B6BFE731BAEDA55BB3750F55C90C7913
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:21 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:21 +0000
Subordinate resources:    AS: 267027
                          IP: 45.227.168.0/22
                          IP: 2804:4708::/32

Validation:               Failed, certificate revoked on Fri 28 Jun 2024 13:40:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5c:a8:a7:b6:bf:e7:31:ba:ed:a5:5b:b3:75:0f:55:c9:0c:79:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:21 2024 GMT
            Not After : Apr  2 18:31:21 2025 GMT
        Subject: CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d9:2a:7d:eb:04:62:f8:ab:c1:62:71:db:a0:
                    82:ab:6b:e7:4a:82:86:e3:20:3f:9f:3b:ea:83:52:
                    6c:85:31:4c:15:e1:9d:64:1b:c2:f4:e4:53:f4:8b:
                    3d:8c:f7:8c:02:c6:12:78:6f:5e:46:31:cd:ed:8a:
                    59:5b:7e:35:43:10:e3:a0:28:22:30:c9:58:0e:32:
                    9b:aa:59:3c:80:9a:a1:b1:16:19:d5:08:b5:3d:45:
                    71:f6:58:e0:e8:6c:25:d5:d3:22:10:91:72:b6:6c:
                    c6:65:2f:d8:de:62:5b:0e:e8:99:ff:bb:f7:aa:66:
                    15:00:84:e8:b5:cf:e4:10:35:f2:6f:a2:58:53:a6:
                    1f:9b:b2:29:c8:1d:51:01:60:d0:60:fe:35:c8:1b:
                    5a:86:bd:09:82:b2:c1:75:ac:10:6e:2c:fc:cb:ea:
                    b6:4b:fe:e6:f8:fa:e9:6b:c0:43:7a:b0:28:b2:dd:
                    74:6f:f2:f7:d1:c1:08:d3:57:86:15:dd:80:a9:2a:
                    f0:62:f8:1e:53:90:c6:c2:f1:7a:bd:44:36:c5:b4:
                    e8:8b:10:dd:7b:18:b7:5a:f9:7d:6c:bc:10:14:48:
                    0f:b1:69:25:dd:42:51:d7:5b:5b:56:ce:c7:f1:44:
                    77:e6:c8:58:cd:7b:f6:0e:8c:c7:f6:df:3f:b5:45:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.168.0/22
                IPv6:
                  2804:4708::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267027

    Signature Algorithm: sha256WithRSAEncryption
         75:71:84:94:ed:a4:d5:ad:b2:d2:cd:99:79:b2:fe:8e:d5:bf:
         f0:62:85:e1:82:46:41:7a:03:d8:c8:ff:5e:55:7e:3d:a8:59:
         ca:6b:af:86:f8:2e:bb:55:7f:57:5e:c1:3c:09:69:2b:01:7a:
         ff:b4:75:4e:0b:16:d1:be:d7:b7:c5:bb:6c:1a:8b:99:80:06:
         cd:74:a9:ee:bd:67:c3:cd:33:6e:0a:6b:8f:c9:27:a3:5b:66:
         24:7a:45:f3:11:54:91:c0:a0:a4:53:ce:6f:d2:f0:e2:97:49:
         9e:d7:c3:25:19:5a:af:7b:8b:57:21:df:51:59:72:11:8c:0d:
         e8:0a:9a:05:48:3f:ac:5f:78:93:0b:80:51:6a:c1:7b:bf:62:
         10:a8:9f:8f:70:28:e3:fe:4f:ed:22:fc:94:c1:20:09:5c:14:
         39:f3:ff:31:b2:d4:71:5c:76:dc:03:a0:88:46:62:39:94:84:
         8a:d2:2e:e7:cd:f5:ca:5a:03:26:58:86:c7:db:d5:ac:bf:21:
         2f:96:c6:39:44:58:b5:0f:e1:07:ee:fc:c6:bc:f7:b1:86:78:
         36:91:13:00:a2:07:1e:63:ce:42:f6:db:86:4f:bc:dc:2c:d6:
         a2:67:69:09:e8:9f:f1:5e:11:9f:d7:ce:8d:33:09:f7:e9:43:
         e8:b9:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 18:19:04 2024 by rpki-client on console-fra.rpki-client.org