Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C893A7E80CC189AEC535DA25A622AA8CC765968A.cer
File:                     C893A7E80CC189AEC535DA25A622AA8CC765968A.cer (raw, json)
Hash identifier:          I5x3qeydQEmAKXjXH71ViMrLMAu1WKbmBM213G8pLlY=
Subject key identifier:   C8:93:A7:E8:0C:C1:89:AE:C5:35:DA:25:A6:22:AA:8C:C7:65:96:8A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6DC811E0F379089D2CB636335715557A302889D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/C893A7E80CC189AEC535DA25A622AA8CC765968A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Apr 2024 16:46:43 +0000
Certificate not after:    Mon 28 Apr 2025 16:51:43 +0000
Subordinate resources:    AS: 271045
                          IP: 45.65.164.0/22
                          IP: 177.67.160.0/21
                          IP: 201.54.184.0/22
                          IP: 2804:756c::/32

Validation:               Failed, certificate revoked on Wed 15 May 2024 07:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c8:11:e0:f3:79:08:9d:2c:b6:36:33:57:15:55:7a:30:28:89:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 29 16:46:43 2024 GMT
            Not After : Apr 28 16:51:43 2025 GMT
        Subject: CN=C893A7E80CC189AEC535DA25A622AA8CC765968A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3e:d1:21:1e:83:fc:3e:7d:36:2f:51:b6:08:
                    09:19:1d:a3:ff:d8:7f:1e:d2:3a:0d:ce:c7:86:e0:
                    3e:6e:e4:a7:97:70:05:1d:3d:62:83:ed:d0:40:92:
                    a7:46:43:fc:51:20:87:53:fb:49:f0:63:4a:bf:c2:
                    f1:ce:39:b6:01:4f:da:dc:18:a9:79:12:39:a0:f8:
                    df:94:c7:5b:e1:1d:8f:5b:9a:ff:c4:51:99:0a:53:
                    60:3f:85:06:ff:ec:fb:76:67:bc:a7:6f:f5:9f:f6:
                    97:44:bb:83:2d:8d:b4:bc:6b:1c:42:e3:d9:a5:bd:
                    3c:51:9a:d7:fe:47:5a:c3:14:3b:bd:d2:89:8d:71:
                    33:8d:c3:4d:eb:ab:18:0d:38:9d:a2:f2:04:54:07:
                    ea:af:f7:be:0c:60:44:97:69:5c:e8:84:c7:92:da:
                    f4:92:66:fc:7f:c2:0a:64:b3:87:2f:a9:04:7e:72:
                    59:69:f8:bf:45:8b:86:9e:92:3a:11:1f:00:f5:ca:
                    b1:cf:e9:fd:89:d8:bc:30:b6:76:3c:93:6d:03:5e:
                    87:ea:01:0f:50:bf:2c:05:18:e1:86:72:1e:c1:18:
                    e3:42:4c:a9:5d:1a:c9:52:7f:24:77:10:f9:69:92:
                    18:36:cf:97:f8:e9:78:c6:61:f5:cc:3a:f3:82:7d:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:93:A7:E8:0C:C1:89:AE:C5:35:DA:25:A6:22:AA:8C:C7:65:96:8A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/C893A7E80CC189AEC535DA25A622AA8CC765968A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.164.0/22
                  177.67.160.0/21
                  201.54.184.0/22
                IPv6:
                  2804:756c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271045

    Signature Algorithm: sha256WithRSAEncryption
         4a:21:cf:cd:f4:32:65:17:6f:b6:09:0d:a6:a3:ee:4c:e1:52:
         ab:0f:72:da:c8:9b:96:f0:39:54:5e:2c:33:63:fd:3f:6b:ae:
         42:ed:6f:ea:0a:46:6c:e8:4d:71:50:e6:dc:42:16:3f:55:7e:
         11:38:48:5c:94:38:5c:8f:8a:bf:ca:77:99:48:62:43:41:f7:
         45:01:14:45:16:ea:7f:8d:52:14:36:80:18:81:fc:db:cf:5d:
         3b:d9:2f:ae:40:94:0a:00:fc:be:64:7d:8e:bf:37:23:01:d9:
         64:19:9e:89:92:d8:6a:2c:bb:9c:fd:59:e9:99:e0:61:5f:9b:
         b3:4e:e9:c6:b3:fb:33:3b:85:a6:9e:65:4e:b4:8b:87:0e:a7:
         54:01:6f:5b:d8:92:8d:2c:bf:23:63:e1:12:c2:5c:7d:da:09:
         3c:13:2f:8d:45:81:5e:1c:eb:c7:d9:c9:41:e0:e4:ff:57:1b:
         bd:98:49:f0:ea:d6:f9:1d:93:77:d3:68:23:b7:3a:d3:87:c8:
         74:69:c5:f6:21:b2:5e:4a:f3:55:39:87:83:31:77:5b:f7:f1:
         b6:01:5f:9c:b1:f7:0e:74:8c:61:a2:d9:e6:3a:bf:30:6d:dc:
         08:2f:1a:75:9e:89:d9:36:9d:9d:e2:31:a0:d6:7d:c3:7b:d2:
         04:8d:69:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org