Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C84AB5B443073DA7A0BA9201BD8F7FE9059BB251.cer
File:                     C84AB5B443073DA7A0BA9201BD8F7FE9059BB251.cer (raw, json)
Hash identifier:          ofhHz13IZCnVBsbMRecFDP/XPNKOuBX/rCYaMCgyL10=
Subject key identifier:   C8:4A:B5:B4:43:07:3D:A7:A0:BA:92:01:BD:8F:7F:E9:05:9B:B2:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       747127A2D861D008D92E5E23BC87122A46990422
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/62hDT5hS8LgaZfjuT6Exn1C9o832waJmyC3xHpEmpnmf/0/C84AB5B443073DA7A0BA9201BD8F7FE9059BB251.mft
caRepository:             rsync://rpki-repo.registro.br/repo/62hDT5hS8LgaZfjuT6Exn1C9o832waJmyC3xHpEmpnmf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Sep 2024 12:19:06 +0000
Certificate not after:    Tue 02 Sep 2025 12:24:06 +0000
Subordinate resources:    AS: 266215
                          IP: 200.9.24.0/22
                          IP: 2804:3c7c::/32

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 07:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:71:27:a2:d8:61:d0:08:d9:2e:5e:23:bc:87:12:2a:46:99:04:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  3 12:19:06 2024 GMT
            Not After : Sep  2 12:24:06 2025 GMT
        Subject: CN=C84AB5B443073DA7A0BA9201BD8F7FE9059BB251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:62:11:e0:b1:b5:cc:ce:d7:d7:39:01:c1:
                    f4:fa:3d:63:d9:07:68:ab:bf:1e:a8:e6:75:4e:51:
                    d7:35:d2:17:3e:b0:a9:e9:20:d5:01:9a:71:cf:7c:
                    c7:21:a4:d5:96:47:2e:7e:c0:36:3f:57:54:75:68:
                    2f:ec:98:9e:47:e2:b7:27:ec:a0:5c:f6:f6:c1:82:
                    dd:18:82:5a:67:ef:b5:3b:91:88:15:41:fa:0a:14:
                    c5:91:cd:55:4e:57:16:3c:25:92:00:84:27:f9:45:
                    f0:09:e9:02:5a:e7:41:43:d1:37:52:6f:27:42:53:
                    d0:ac:04:9b:de:8e:0f:96:5c:f4:76:3f:33:26:41:
                    50:4b:cf:63:67:75:55:33:af:f5:52:1a:a4:99:13:
                    df:e9:1e:10:9d:1b:e5:10:d4:ff:6f:ad:c3:f4:e4:
                    48:cc:42:c6:36:28:ba:d0:d7:4d:44:e8:06:8e:04:
                    2b:cc:f1:b3:07:e4:9f:9e:95:f0:e0:ae:c5:78:ee:
                    3a:56:38:70:1f:26:c9:ca:59:b6:89:81:d9:34:d8:
                    03:3b:1f:6f:b9:72:0c:0a:85:d2:9a:09:8e:46:85:
                    16:3d:e1:e1:0a:9e:dd:21:a0:6c:16:fc:4d:d6:6a:
                    ba:eb:61:6a:27:c5:aa:ad:65:6c:b2:31:d3:13:83:
                    5e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:4A:B5:B4:43:07:3D:A7:A0:BA:92:01:BD:8F:7F:E9:05:9B:B2:51
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/62hDT5hS8LgaZfjuT6Exn1C9o832waJmyC3xHpEmpnmf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/62hDT5hS8LgaZfjuT6Exn1C9o832waJmyC3xHpEmpnmf/0/C84AB5B443073DA7A0BA9201BD8F7FE9059BB251.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.24.0/22
                IPv6:
                  2804:3c7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266215

    Signature Algorithm: sha256WithRSAEncryption
         75:29:8b:93:ab:fe:e2:8f:36:d1:f4:86:bd:78:86:00:9c:8a:
         8e:a0:9b:b5:f6:6c:a8:2e:1c:6a:d5:f0:21:ae:55:d2:b5:06:
         a2:65:58:01:d9:5d:ed:6c:09:63:95:d2:78:6a:c2:3c:12:c7:
         ec:36:c4:96:73:99:d1:14:a3:81:5b:46:fd:70:0d:bd:99:ed:
         83:47:69:81:d8:83:43:d5:43:22:ec:7e:19:6d:68:1e:72:aa:
         26:bf:b0:d9:50:d7:97:f6:21:aa:0f:1a:14:a2:e8:21:c2:94:
         04:8b:e7:28:1f:55:df:c0:fc:87:e3:ea:29:9d:75:de:7d:28:
         66:2e:ae:d3:8c:77:55:f2:62:1a:32:f0:2b:10:1c:26:51:57:
         30:cf:63:42:91:1b:98:fc:02:72:1e:1d:6a:7d:6b:a4:8b:98:
         f1:9b:77:15:98:78:bc:ce:78:59:aa:f6:b8:b9:7d:fd:5a:95:
         f6:41:a6:04:f3:7c:e6:ff:d7:3f:c3:6b:d2:36:47:93:78:9b:
         cd:49:ad:3e:de:1f:3e:c1:21:c3:72:a2:bb:8a:1a:64:81:ee:
         3c:65:32:55:02:53:79:f9:0e:f1:9d:c9:b7:c3:1c:d2:1f:25:
         47:4f:b7:31:74:7a:44:91:72:a1:6f:83:b9:c9:a8:56:c6:df:
         65:92:7b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 10:03:06 2024 by rpki-client on console-fra.rpki-client.org