Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C8D9D1EEED683E694967158C32F903C5F6087D81.cer
File:                     C8D9D1EEED683E694967158C32F903C5F6087D81.cer (raw, json)
Hash identifier:          FrWm3oM1KhbjsOit6UiX0Zlp8uQ0Up4126bCdA8v3oU=
Subject key identifier:   C8:D9:D1:EE:ED:68:3E:69:49:67:15:8C:32:F9:03:C5:F6:08:7D:81
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       061F664FF8AF5BD2A47D36E8F7A0855A7B5FE2E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/C8D9D1EEED683E694967158C32F903C5F6087D81.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jul 2024 20:17:03 +0000
Certificate not after:    Tue 01 Jul 2025 20:22:03 +0000
Subordinate resources:    AS: 272566
                          IP: 2804:853c::/32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 12:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1f:66:4f:f8:af:5b:d2:a4:7d:36:e8:f7:a0:85:5a:7b:5f:e2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  2 20:17:03 2024 GMT
            Not After : Jul  1 20:22:03 2025 GMT
        Subject: CN=C8D9D1EEED683E694967158C32F903C5F6087D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:55:c7:ee:49:2f:04:5d:9b:65:77:60:23:
                    66:ce:1a:bc:d3:dd:9e:6a:3e:e5:58:c9:ef:ac:98:
                    7b:29:16:be:2c:92:44:47:37:b4:73:62:d5:7d:8f:
                    16:8c:14:1f:5c:83:8c:48:b3:b0:b3:fc:bc:1f:c0:
                    9c:f7:3c:e6:a8:55:53:f5:bb:05:53:84:9e:69:6c:
                    2a:2e:23:aa:d8:cc:9a:b8:41:ac:79:b6:4e:67:9f:
                    00:c5:7d:22:e5:6c:c5:0f:07:c6:5a:71:c3:24:33:
                    ee:33:65:81:83:d4:15:c0:27:c6:6d:9a:cb:43:b6:
                    33:85:41:12:7d:2e:5a:e9:fc:b9:b5:02:8c:9e:34:
                    c3:9e:90:6b:67:ce:cf:dc:b9:1e:4a:d2:26:c3:e1:
                    58:32:40:46:92:c9:bb:2c:92:60:22:b9:79:1d:7a:
                    38:b5:2a:f3:39:7e:6d:3c:54:95:a6:10:b4:64:a7:
                    87:09:21:d7:b0:c0:d0:d4:45:42:a7:6a:b3:e5:15:
                    ed:b4:e9:3c:76:c6:17:62:75:e0:56:3e:7a:a5:e8:
                    db:e3:22:af:b7:bd:6e:8c:f7:e8:96:72:f1:09:7c:
                    6a:30:e7:39:fe:86:87:b5:bc:31:23:dd:f4:b2:e0:
                    45:30:c3:ba:60:18:6a:a3:fc:06:3f:1e:7a:01:c2:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:D9:D1:EE:ED:68:3E:69:49:67:15:8C:32:F9:03:C5:F6:08:7D:81
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/C8D9D1EEED683E694967158C32F903C5F6087D81.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272566

    Signature Algorithm: sha256WithRSAEncryption
         4c:02:81:71:97:4b:b3:33:27:d5:87:fd:e7:63:de:ea:0e:3a:
         5a:bd:7b:b2:be:87:36:da:4b:5e:ae:5f:5b:2e:4b:6a:ca:80:
         ec:eb:c1:94:ea:b9:71:81:1b:aa:57:72:5c:3c:d0:a5:50:36:
         01:1b:09:44:6d:fb:58:28:e4:35:76:48:c3:bb:23:fe:ff:d7:
         03:45:a0:6b:3e:d6:32:67:1d:64:d7:71:b3:f5:4b:3b:9f:23:
         f5:2b:db:e8:29:ab:3e:ed:fe:e8:59:0e:fd:49:a3:cc:19:85:
         57:5e:1e:9f:84:53:81:ba:98:38:9d:c3:df:c8:19:cf:2c:4b:
         2c:ea:34:7a:2e:03:86:e7:cb:ad:58:66:fc:76:71:3f:a3:07:
         59:91:93:64:42:ff:b8:24:55:d5:8c:da:5c:4f:da:14:3a:f9:
         fd:e5:71:97:7b:5c:7a:d9:60:08:2b:80:d8:2a:18:88:f3:de:
         b1:71:30:4a:89:ac:44:3b:90:c6:65:76:73:3d:d5:43:d0:7c:
         c7:46:e8:1a:d2:49:5e:a6:39:ac:cb:2e:b2:eb:80:9c:0e:0e:
         5b:6a:8a:40:3d:ba:b2:19:c2:31:a5:4a:b7:ea:78:19:e6:5c:
         14:97:2a:10:40:f2:0e:16:8f:56:40:94:95:19:44:02:ea:f1:
         e0:81:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 15:28:21 2024 by rpki-client on console-fra.rpki-client.org