Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9F3D4FF479254B8B1D8C9552D7C82111AD6189A9.cer
File:                     9F3D4FF479254B8B1D8C9552D7C82111AD6189A9.cer (raw, json)
Hash identifier:          dce14LVH/XYGXcMvaWZm5ULH6X+jdKyQAunzrpUNPsg=
Subject key identifier:   9F:3D:4F:F4:79:25:4B:8B:1D:8C:95:52:D7:C8:21:11:AD:61:89:A9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2C6A40D0877BB059F3821DCEE569F286F01C41D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/9F3D4FF479254B8B1D8C9552D7C82111AD6189A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 May 2024 21:30:29 +0000
Certificate not after:    Fri 09 May 2025 21:35:29 +0000
Subordinate resources:    AS: 270274
                          IP: 200.124.84.0/22
                          IP: 2804:6980::/32

Validation:               Failed, certificate revoked on Fri 26 Jul 2024 13:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6a:40:d0:87:7b:b0:59:f3:82:1d:ce:e5:69:f2:86:f0:1c:41:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 10 21:30:29 2024 GMT
            Not After : May  9 21:35:29 2025 GMT
        Subject: CN=9F3D4FF479254B8B1D8C9552D7C82111AD6189A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:46:bb:49:d9:00:6a:0d:ba:73:03:57:91:
                    f8:99:ac:74:cf:8d:64:f7:a7:ca:7a:43:37:f0:17:
                    6a:c0:ee:d4:38:59:8d:0f:88:9a:8e:31:cd:58:88:
                    84:c9:c6:19:f3:af:08:93:2f:b3:11:27:18:f3:85:
                    86:ed:6b:05:ca:fa:96:0e:c7:e0:c7:e7:13:e3:a0:
                    07:a4:88:d4:30:7c:a1:5d:1f:99:30:60:ce:1c:b6:
                    eb:a9:9b:c6:e6:82:cd:15:01:19:66:5e:d9:d0:85:
                    70:0f:ff:48:4d:e1:f0:2f:3c:5d:c4:3f:b2:73:66:
                    d2:23:26:00:0e:74:a6:44:dd:ae:ed:70:5f:43:78:
                    ff:77:b3:6e:a2:43:55:dc:59:84:11:3b:49:87:42:
                    f8:eb:e1:6b:c5:29:14:28:e7:fc:37:6c:bb:07:6d:
                    4c:0a:23:e4:4c:fa:e7:f2:9c:39:ed:3a:71:15:e0:
                    c5:00:a5:4d:fc:92:44:92:7b:79:1e:36:29:66:01:
                    04:8e:46:9c:53:aa:38:1d:31:e5:92:92:99:ee:6a:
                    5d:19:5a:9d:3e:52:77:b1:8d:86:15:ff:db:05:f0:
                    69:2c:1e:b2:ac:e5:07:ed:38:1f:86:1f:c5:4a:09:
                    87:28:f0:b6:2c:78:a6:9b:28:a2:85:d3:bf:7d:71:
                    b1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:3D:4F:F4:79:25:4B:8B:1D:8C:95:52:D7:C8:21:11:AD:61:89:A9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/9F3D4FF479254B8B1D8C9552D7C82111AD6189A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.84.0/22
                IPv6:
                  2804:6980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270274

    Signature Algorithm: sha256WithRSAEncryption
         24:aa:5b:40:32:5c:33:59:bb:b3:41:9d:0f:34:84:9a:ee:e1:
         91:9e:20:30:5f:16:74:97:74:97:dc:c8:5a:bd:3c:37:d4:47:
         d0:31:72:47:05:51:9c:cb:87:15:fe:23:70:82:f9:d5:1f:af:
         60:ea:e6:94:67:ce:5d:b4:d8:94:2f:ae:5f:f4:3d:5c:33:4f:
         d8:eb:88:c5:10:94:21:79:13:2a:6d:90:9c:56:b6:bb:90:c9:
         1e:bf:35:73:02:3f:cb:c9:a0:45:c3:80:ab:29:b8:c6:95:0c:
         07:62:23:2b:16:0e:e5:c3:ed:fe:43:25:8f:f0:16:f9:cd:de:
         6e:72:16:ca:2e:a1:b9:dd:3f:74:c0:60:ca:25:30:e7:50:ee:
         55:63:64:7c:da:41:80:96:1e:6d:35:fa:9a:d4:2a:b8:1a:d3:
         83:97:8c:db:84:da:7b:fe:95:d8:af:a5:4f:c9:af:6e:d5:e3:
         ca:a1:cc:0c:04:55:96:22:1e:a4:4d:e9:a9:49:48:a4:c2:dd:
         30:70:ea:f6:8e:5c:ad:b8:99:6b:7e:6b:dd:4f:2b:c0:b8:2d:
         c1:ad:4a:8e:14:c8:54:09:fe:de:fd:1d:77:8e:fd:83:dc:0a:
         80:d3:72:6e:9e:5b:16:39:b6:ab:c9:d5:fb:86:bd:ee:9c:3b:
         cd:bd:dd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 16:29:27 2024 by rpki-client on console-fra.rpki-client.org