Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D52D5FBF5120C30654881F61F146C9915781B93.cer
File:                     9D52D5FBF5120C30654881F61F146C9915781B93.cer (raw, json)
Hash identifier:          tWDB7WY6tQsj+JWraasx8yYZYc62AwIU4TZk0p0g0EA=
Subject key identifier:   9D:52:D5:FB:F5:12:0C:30:65:48:81:F6:1F:14:6C:99:15:78:1B:93
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       346910DDF90BD0D93E710176928681C6A1C966E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/1/9D52D5FBF5120C30654881F61F146C9915781B93.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:28:00 +0000
Certificate not after:    Thu 03 Apr 2025 12:33:00 +0000
Subordinate resources:    AS: 269612
                          IP: 45.189.228.0/22
                          IP: 2804:6734::/32

Validation:               Failed, certificate revoked on Sun 15 Sep 2024 07:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:69:10:dd:f9:0b:d0:d9:3e:71:01:76:92:86:81:c6:a1:c9:66:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 12:28:00 2024 GMT
            Not After : Apr  3 12:33:00 2025 GMT
        Subject: CN=9D52D5FBF5120C30654881F61F146C9915781B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:17:c7:ba:04:45:d4:9b:e9:85:97:ee:19:
                    c9:68:c5:8a:53:0e:7e:8a:02:cd:c4:b8:aa:d7:d6:
                    36:36:c4:6f:20:f2:bc:59:c8:41:ec:7d:50:2d:5c:
                    b9:6b:8e:5b:3c:18:5f:85:40:aa:48:95:28:11:42:
                    08:b7:91:94:d4:9b:83:47:e9:21:d0:2f:44:04:84:
                    ed:76:8c:65:d2:f3:1e:65:17:c0:1d:f1:4d:6b:94:
                    d5:63:74:14:85:04:27:be:fd:fc:dc:28:b1:aa:4f:
                    a0:0f:68:4f:93:15:25:21:f3:44:d2:d4:75:eb:b2:
                    7e:83:7e:d4:0f:c7:fc:4e:de:2f:48:fe:39:86:d1:
                    09:a2:d7:2d:61:18:fb:80:b8:20:85:68:23:6c:82:
                    c9:c2:20:75:4b:0f:21:0c:94:78:91:76:93:5c:5f:
                    22:29:71:79:d9:46:bf:9a:21:e7:f0:99:eb:d4:1b:
                    fe:82:af:d2:86:fb:1d:a4:77:cc:21:c9:ac:8e:fb:
                    2f:63:44:d5:cb:eb:75:76:b5:91:fb:20:28:18:ef:
                    a6:fb:35:b4:e3:8b:e5:fc:2d:e7:2a:bb:09:76:2a:
                    f3:86:b6:00:3c:48:e3:29:08:bc:f1:4a:ed:10:88:
                    ff:5d:5e:86:9b:90:5c:ee:49:36:5b:ba:ab:77:8f:
                    77:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:52:D5:FB:F5:12:0C:30:65:48:81:F6:1F:14:6C:99:15:78:1B:93
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/1/9D52D5FBF5120C30654881F61F146C9915781B93.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.228.0/22
                IPv6:
                  2804:6734::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269612

    Signature Algorithm: sha256WithRSAEncryption
         0e:b0:cd:9d:f8:47:53:1f:a2:c2:71:37:ab:8d:4f:b1:0f:a4:
         17:84:7f:3f:4e:6e:ff:c1:82:34:b8:28:d1:46:72:d0:5c:b7:
         0b:09:21:1f:56:dd:e7:ca:89:3b:50:6b:c4:38:b7:53:73:75:
         13:dd:5e:90:26:6a:2f:9c:c0:de:43:87:a6:9f:f6:18:71:bd:
         54:3b:3e:da:db:f7:07:be:9b:e0:88:64:26:51:90:0b:7e:4b:
         9b:45:b4:8a:09:ce:37:c2:bc:ac:68:33:b3:3c:c6:ef:9b:7e:
         05:07:96:13:86:78:25:58:c3:37:af:7f:97:3f:d0:45:5a:03:
         47:18:6f:ff:e4:f8:65:ac:bd:d6:da:93:4b:5a:a1:57:98:0c:
         15:dc:5c:71:d8:92:18:9a:95:6a:f0:a2:5d:aa:fd:a0:5e:d3:
         75:ad:d2:de:4d:a4:5a:b5:b4:4e:76:e4:f1:29:30:2a:cc:9f:
         f4:b2:37:91:51:bb:f0:8b:60:5b:b7:30:74:01:80:88:8e:28:
         90:6e:0b:49:66:1b:69:d0:4c:b5:da:c5:32:ef:30:fd:eb:af:
         f9:db:94:d6:e8:b7:dd:8a:f6:b4:da:6f:21:04:15:5c:30:8e:
         a5:aa:09:be:b9:1a:76:59:e5:82:30:a3:c1:8d:7e:77:9f:2b:
         30:8d:e6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 08:35:54 2024 by rpki-client on console-fra.rpki-client.org