Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.cer
File:                     B08ED87D0232B32F4B301B81417EB9BEAF579B9F.cer (raw, json)
Hash identifier:          iO7EyyQh70KDnJlS6GcQkoCysnLQd2mbfINJA2bEtLc=
Subject key identifier:   B0:8E:D8:7D:02:32:B3:2F:4B:30:1B:81:41:7E:B9:BE:AF:57:9B:9F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       113D975D634217FCBA5B3AF07AD12CE2E8C4BD47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:58 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:58 +0000
Subordinate resources:    AS: 270931
                          IP: 200.142.224.0/22
                          IP: 2804:73b0::/32

Validation:               Failed, certificate revoked on Sun 03 Nov 2024 02:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3d:97:5d:63:42:17:fc:ba:5b:3a:f0:7a:d1:2c:e2:e8:c4:bd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:58 2024 GMT
            Not After : Apr  2 18:30:58 2025 GMT
        Subject: CN=B08ED87D0232B32F4B301B81417EB9BEAF579B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:4a:f0:ca:a4:d0:03:e7:18:73:39:bb:cb:
                    9f:79:7e:97:09:63:18:77:b5:7c:4b:cb:c8:05:e2:
                    f6:3c:a5:6b:80:27:ac:32:86:79:94:32:8e:99:71:
                    f8:23:15:df:82:7e:de:a1:9a:7c:2a:ad:ce:3d:08:
                    e2:d8:59:76:e6:c4:d0:51:ec:e7:36:cc:aa:95:27:
                    cb:6d:14:3e:ef:92:46:c5:c4:50:4f:22:2b:bf:67:
                    c8:fa:4f:03:b6:88:d2:9a:20:87:c0:f5:ae:d2:e2:
                    24:da:20:c0:d8:ff:b9:65:d4:c0:08:ff:63:fe:89:
                    1c:5e:7a:6b:a1:94:94:e0:0c:5e:84:d6:c2:b0:d9:
                    c9:44:83:db:7f:97:ff:da:e9:1a:93:a9:f3:21:42:
                    f9:58:a0:b5:af:44:b4:1f:08:cc:39:7e:8f:d8:08:
                    33:23:55:fc:ab:08:82:bd:52:f1:ce:05:30:f0:46:
                    76:40:26:ce:14:90:ca:51:b9:67:46:11:42:db:aa:
                    e0:b6:84:e0:00:3b:93:24:af:96:02:4e:2d:aa:85:
                    6e:57:65:22:15:03:52:ce:15:28:91:85:e6:2b:7d:
                    ad:0f:02:4b:9e:34:d6:99:a6:63:af:49:28:c6:61:
                    7b:8c:e5:61:59:5e:17:f1:ed:1b:01:c0:b7:f1:0d:
                    b2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:8E:D8:7D:02:32:B3:2F:4B:30:1B:81:41:7E:B9:BE:AF:57:9B:9F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.224.0/22
                IPv6:
                  2804:73b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270931

    Signature Algorithm: sha256WithRSAEncryption
         a3:cd:78:b4:28:3c:f6:44:e0:a4:2c:6f:5b:ee:74:7e:4a:c0:
         eb:b7:10:63:6a:a5:c7:e8:fc:0f:95:e7:bf:53:27:54:6a:23:
         50:91:f9:ae:0f:e5:b6:33:a7:90:7d:29:84:c0:dd:f8:0d:2b:
         96:2d:fe:cf:79:fc:93:d1:c9:91:f0:7a:64:1a:84:2b:e4:eb:
         3a:ff:c2:93:d9:f4:d3:f2:23:30:af:38:27:c3:84:b6:b5:a3:
         99:c1:0c:e5:79:35:3e:cb:8c:01:07:e1:9b:40:d2:24:e6:9b:
         b8:de:9c:1c:b3:a2:e9:6c:08:5c:81:ce:b8:19:c2:9d:45:b1:
         4d:d5:11:7e:63:ed:6c:56:2d:12:4c:e9:52:33:d2:cd:97:c9:
         08:f1:a1:68:a6:17:8f:51:08:73:1d:36:49:f7:ad:8e:56:5f:
         81:6a:30:73:d0:95:02:af:84:15:37:ce:a3:f0:21:63:74:68:
         51:e8:fc:b2:72:b8:5f:c8:05:2a:72:e1:fa:2a:7d:7c:f6:8f:
         79:27:8b:a4:1b:0c:bf:4c:f5:16:48:a5:38:2a:00:26:83:f3:
         42:bf:6c:5c:39:e8:de:15:93:1c:85:4a:d1:8a:cd:40:21:aa:
         87:b3:2a:8d:4a:ae:39:9f:99:b5:b1:4b:2e:8f:05:6a:3e:fb:
         db:de:17:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 05:34:10 2024 by rpki-client on console-ams.rpki-client.org